Account Security
Sign-in is handled through Google authentication. We never see or store your Google password. Always use a strong, unique Google password and keep your Google account secure.
Data Access Controls
Your plan and claims are protected by row-level security in the database. Each query is scoped to your own user ID, so other users cannot access your records.
Private Notes
Notes are stored with the account that wrote them, and database rules only ever return a note to that same account. Sharing a plan does not expose its notes.
Shared Plans
A plan is only visible to someone else if you invite their email address from Settings. Access is checked in the database on every request against the email on their signed-in account, and it can be set to view only, can log claims, or Plan Admin. With the first two levels, the database only returns claim rows for the covered person that invite is linked to — everyone else's allowances and limits are visible, but their claim details are not. Plan Admins see every covered person's claims. Only the plan owner can edit plan details, invite people or remove access, and removing someone takes effect immediately.
Policy Document Storage
Policy documents you attach to a plan are held in a private storage area with no public URLs. Every time you open one, the server checks your access to that plan in the database and then issues a signed link that expires after five minutes. The storage layer itself also enforces the same ownership rules, so a file cannot be read, replaced or removed by anyone outside your plan even if a link is guessed. Only PDFs and images are accepted, with a size limit, and deleting a document removes the stored file too.
Encryption In Transit
All traffic between your browser and the app's servers uses HTTPS/TLS encryption. Document uploads and API calls are sent over encrypted connections.
Sessions
Your session is managed by the authentication provider. You can sign out at any time from the dashboard or settings page, which clears your local session.
Reporting Concerns
If you notice suspicious activity or believe your account has been accessed without permission, sign out immediately and contact the app owner.