Alpha: Save My Secrets is in testing. Please don't store anything mission critical yet, and keep your usual backups.
Privacy
Last updated 13 October 2026. This is a plain-English alpha version and is being reviewed by a lawyer before launch.
Who we are
Save My Secrets is run by Alamex Ltd, which is the data controller for the personal information described here. You can reach us at savemysecrets@alamex.com.
What we can't read
Everything you put in your vault (personal messages, final wishes, passwords, account details and documents) is encrypted in your browser before it is sent to us. We store only the encrypted version. Your master password never leaves your device.
Alpha, stated plainly: in the default setting, we also hold a release key so we can pass your vault to your nominees. That means during the alpha we could technically open a vault. We only use it after the release checks, but it is a promise, not a technical guarantee. Nominee questions, which remove our ability to open vaults, are being built. You can check all of this in our public source code.
What we can read, and why
Your account: name, email address, mobile number, your check-in settings and your account status. We need these to log you in and check in with you.
Your nominees: the names, email addresses, phone numbers, postal addresses and relationships you give us. We need these to contact them and to check who they are if they ask for access.
Security records: a hash of your login key (not your password), your two-factor secret, hashes of your recovery codes, and records of logins, check-ins and messages we send.
Nominee requests: if someone asks for access to a vault, we store their name, email address, their conversation with our verification assistant, any document they upload (such as a death certificate), and our automated assessment of it.
Waiting list: your email address, plus the IP address and browser details sent with the form, to stop abuse.
Rate limiting: short-lived counters keyed to IP addresses and email addresses, to slow down people trying to guess their way in.
Our lawful bases are performing our contract with you (running the service you signed up for) and our legitimate interest in keeping vaults secure and preventing fraud. For nominees, it is the legitimate interest of the owner who named you, and of you, in passing on what they left.
Who helps us run the service
Cloudflare hosts the website and database. Our database is currently stored in Cloudflare's eastern North America region.
Anthropic provides the AI that interviews nominees and checks documents. It only receives information from nominee requests (the conversation, the uploaded document and the owner's name). It never receives vault contents.
Email, text and WhatsApp providers will deliver our messages once they are switched on. We will list them here by name before they are.
Some of these providers process data outside the UK. Where they do, we rely on the UK's approved transfer safeguards, such as the International Data Transfer Addendum or the UK–US data bridge.
We do not sell your data, show adverts or use tracking cookies. The only browser storage we use keeps you logged in during a visit.
How long we keep it
Your account, vault and nominees: until you ask us to delete your account, or until your vault has been released and 12 months have passed.
Nominee requests: for 12 months after they close, so we can investigate any dispute.
Waiting list: until you join or ask to be removed.
Rate limiting counters: they reset within a day.
Your rights
You can ask to see, correct or delete the information we hold about you, or object to how we use it. During the alpha, email savemysecrets@alamex.com from the address on your account and we will act within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
If we stop running the service
We will email every account holder at least 90 days before closing, so you can move what matters. Because your vault is encrypted, the encrypted copy is useless to anyone who takes over our systems without your password or the release key.
Changes
If we make a significant change to this page, we will email account holders before it takes effect.