How InCase keeps your information safe

What we can't see

• Anything you type into an item: names, account and policy numbers, passwords, 2FA keys, notes, "how to claim" steps.
• Your documents and your video message link.
• Your release letters' passwords. We never see or store them.

If our servers were hacked, or someone at InCase went looking, they'd find only scrambled data.

What we can see

To run the service, we need a few things in readable form:

• Email addresses, so we can send sign-in links and invites.
• The names you give the people in your vault, and their relationship to you.
• Each item's category and type (for example "Insurance · Life"), its status, and the date you last checked it.
• How many items and documents you have, their sizes, and when they were changed.
• An item's expiry date, only if you set one, so we can remind you. The reminder email never says which item it is.
• Your plan and billing status. Card details are handled by Stripe and never reach us.

How your vault is locked

• Your email gets you to the door, not into the vault. Opening it also needs your Face ID, fingerprint or passphrase, so someone who gets into your inbox still can't read anything.
• Everyone has their own key. When you share an item, your device locks a copy for that person's key only. Nobody sees items you didn't share with them, and nobody sees who else is in your vault.
• You approve every key. Before anything is shared with someone, you approve them, and you can compare a safety code to make sure it's really them.
• Items are signed. Your device signs everything you save, so your family's devices can tell if anything was tampered with.

"Just in case" and release letters

• Items you seal "just in case" are locked with a release password that InCase generates and that you print as a letter for your attorney, your will, or a friend you trust.
• Opening them takes both that person's own sign-in and the letter. Neither works alone.
• When someone uses a letter, you're emailed right away, and you can stop it during the waiting period you chose.
• You can make a new letter at any time, and the old one stops working.

The honest trade-offs

• We can't reset your vault. You get a printed recovery code when you sign up. If you lose your devices, your passphrase and that code, nobody can open the vault, including us.
• Removing someone can't un-show what they already saw. If you remove a person, change any passwords you had shared with them.
• The app runs in your browser. Like every web app, it's only as safe as the code we send. We protect our code and hosting accounts with two-factor sign-in.

If you stop paying, or if InCase goes away

• If payments stop, your vault stays open for your family, read-only, for 6 months. After that it's paused until anyone in it renews. Nothing is deleted.
• You can download a readable copy of everything, or print an emergency packet, at any time. It's decrypted on your device, never on our servers, so you're never locked in.