The short version
- Your vault belongs to you. We never sell your data, and we never use it for advertising.
- Your data is stored on servers in the UK. Sensitive fields are encrypted with AES-256-GCM, and account passwords are hashed with bcrypt.
- Only the people you invite can see your vault, and by default only once we have verified your death. You can revoke their access at any time.
- You can delete your account and data whenever you like. Most of your vault is encrypted in your browser with your passphrase, so only you can read it, and not us.
The rest of this policy explains this in detail, as the law requires.
1. Who we are
MyLegacyInfo is operated by MyLegacyInfo UK (“MyLegacyInfo UK”, “MyLegacyInfo”, “we”, “us”, “our”).
For the personal data covered by this policy, we are the data controller.
If you have a question about this policy or your data, email us at support [at] mylegacyinfo [dot] com.
2. What this policy covers
This policy covers the MyLegacyInfo website, web application and related services (the “Service”). It applies to:
- Vault owners: people who create a MyLegacyInfo account to store their own information.
- Trusted people: executors, family members, solicitors or others invited into a vault.
- Family plan members and gift recipients.
- Visitors to our website.
3. The information we collect
3.1 Information you give us when you create an account
- Your name, email address and password. We store only a bcrypt hash of your password, never the password itself.
- Your plan, billing preferences and communication preferences.
- A profile photo, if you choose to add one. It is stored encrypted, shown only to you, and deleted when you remove it or close your account.
3.2 Information you store in your vault
What goes into your vault is your choice. Depending on the features you use, it may include:
- Legal and wishes: will details created with our Will Builder, personal and funeral wishes, letters to loved ones.
- Documents: scans of signed wills, property deeds, insurance policies and identity documents.
- Money and property: bank and financial account details, property and asset information, valuations, and household budget data. This includes bank statement PDFs you upload so we can extract transactions automatically.
- Identifiers: for example National Insurance and passport numbers.
- Digital life: online account details and login credentials stored in the Password Vault, and subscription lists.
- Health and care: care plans, medication and treatment preferences, and Emergency Card details.
- Calendar entries and any other notes you add.
3.3 Information about other people
Your vault will often contain information about other people, such as beneficiaries, executors, family members and contacts named in your will, wishes or letters. When you invite a trusted person, or buy a gift vault, you give us that person's name and email address so we can send them an invitation.
Please only add information about other people that you're entitled to share, and where it's reasonable to do so. Wherever practical, let people know you've named them in your vault.
3.4 Information we collect automatically
- Security and audit data: sign-ins, failed sign-ins, changes to your vault, and every time a trusted person accesses your vault, with a timestamp, the IP address and the browser and device. You can see this audit trail on your Security page.
- Technical data: server logs, IP address, browser type and the pages you visit, which we use to run and protect the Service.
- Cookies: see section 11.
3.5 Payment information
Payments are handled by our payment provider, PayPal. Your card or PayPal account details go directly to them and never reach our servers. We share your email address with PayPal to set up your subscription, and from them we receive only limited details, such as your subscription and payment status.
4. Health information and other sensitive data
Care plans, medication preferences and Emergency Card details may include health information. Your wishes and letters may reveal your religious or philosophical beliefs, for example funeral arrangements. The law treats this as “special category” data.
We only process this information because you choose to store it, and with your explicit consent, which you give when you add it to your vault. You can withdraw that consent at any time by deleting the information or your account. We never use special category data for any purpose other than storing it for you and sharing it with the trusted people you choose.
5. How we use your information, and our legal basis
Data protection law requires a legal basis for each use of personal data. Here are ours:
| What we do | Legal basis |
|---|---|
| Create and run your account, store your vault, and give trusted people access in line with your permissions | Performance of our contract with you |
| Extract transactions from uploaded bank statements and send your monthly budget reports | Performance of our contract with you |
| Take payments, manage subscriptions and deliver gift vaults | Performance of our contract with you |
| Send service emails: invitations, security alerts, billing notices and important changes | Performance of our contract; legitimate interests in keeping accounts secure |
| Keep audit logs, lock accounts after repeated failed sign-ins, and detect fraud and abuse | Legitimate interests in protecting you, your trusted people and the Service |
| Process trusted people’s and gift recipients’ names and email addresses to send invitations | Legitimate interests in providing the sharing features our customers ask for |
| Store health and other special category information | Your explicit consent |
| Send product news and offers (only if you opt in) | Consent, which you can withdraw at any time |
| Keep financial records, and respond to lawful requests from authorities | Legal obligation |
We do not sell your data, use it for advertising, or use the contents of your vault to train artificial intelligence models. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
7. Where your data is stored
Your vault data is stored on servers in the United Kingdom. If any of our service providers process limited personal data outside the UK (for example, for email delivery, payments or the optional AI will check), we make sure appropriate safeguards are in place. These include UK adequacy regulations, or the ICO's International Data Transfer Agreement or Addendum. Contact us for details.
8. How we protect your information
- Sensitive fields, including bank details, National Insurance and passport numbers and Password Vault entries, are encrypted with AES-256-GCM before they are written to our database. GCM authentication tags let us detect any tampering.
- Data is encrypted in transit using TLS.
- Account passwords are hashed with bcrypt (cost factor 12).
- Accounts lock for 15 minutes after 5 failed sign-in attempts in a row.
- Sign-ins, changes to your vault and every access by a trusted person are logged in an audit trail.
- Staff access to production systems is strictly limited, logged and only used where necessary to support you or keep the Service running.
No online service can be completely secure. Please use a strong, unique password, keep it private, and let us know straight away at support [at] mylegacyinfo [dot] com if you think your account has been compromised. If a personal data breach puts your rights at risk, we will tell you and the ICO as the law requires.
9. How long we keep your information
- Active accounts: for as long as your account is open.
- Accounts never verified: if you sign up with a password and never confirm your email address, the account is deleted after 30 days.
- If your plan ends or a payment fails: your vault is locked, not deleted. We keep it until you take out a plan again, close your account, or ask us to delete it.
- Deletion on request: when you close your account from your Security page (which you can do even without a plan), we delete it and your vault straight away. Copies in our providers' backups are overwritten within a further 30 days. A sealed copy of your vault passphrase, kept in a separate store for recovery, can't open anything once your vault is gone; we remove it in a regular manual clean-up, because our servers are deliberately unable to delete from that store. Security logs and billing records are kept for the periods below.
- Audit and security logs: up to 12 months, unless we need them longer to investigate a security incident.
- Billing records: 6 years, to meet tax and accounting obligations. This includes a gift you bought: your name and email, and the recipient's.
- Invitations: invitation codes expire after 7 days. Family plan invitations that aren't accepted are deleted after 30 days. A trusted person you have named stays in your vault until you remove them, because they may only need to join much later.
10. What happens to your vault when you die
MyLegacyInfo exists to help your family after you're gone. Trusted people can see your vault as described in section 6.1, according to the permissions you set for each of them. A trusted person, or a member of your family plan, can report your death to us. We ask for supporting evidence, such as a death certificate, and email you straight away. You have 48 hours to tell us the report is wrong. Our team reviews every report, and trusted people only get access once we have approved it, after those 48 hours or sooner if the evidence is conclusive.
UK data protection law does not apply to people who have died. Even so, we continue to treat a deceased person's vault as confidential. We only release it as they instructed, or where required by law. Most of a vault is encrypted with a key we don't hold, so we can't read or export its contents for anyone; your trusted people see it through their own accounts. Your executor or personal representative may ask us to close your vault, and we may ask for evidence before doing so.
12. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data. You can edit most of it yourself.
- Erase your data (“the right to be forgotten”).
- Restrict or object to certain processing, including processing based on legitimate interests.
- Data portability: receive your data in a commonly used format. You can download the documents you have uploaded at any time, and we will send you a copy of what we can read, such as your account and billing details. The contents of your vault are encrypted in your browser with your passphrase, so we cannot read them to make a copy; you can see and copy them whenever your vault is unlocked.
- Withdraw consent where we rely on it, without affecting processing that already took place.
To exercise any of these rights, email support [at] mylegacyinfo [dot] com. We will respond within one month, and we may need to confirm your identity first. Exercising your rights is normally free.
If someone has stored information about you in their vault, they control that information. We may not be able to share it with you without their permission. Please contact us and we'll help where we can.
13. Children
The Service is for adults aged 18 or over. We don't knowingly create accounts for children. Vault owners may record information about their children, such as guardianship wishes, as part of their own estate planning.
14. Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
15. Changes to this policy
We may update this policy from time to time. If we make significant changes, we'll email you or show a notice in the app before they take effect. The “last updated” date at the top shows when this policy last changed.