Why we exist
We built the vault
we could never open.
An estate is rarely lost in a courtroom. More often it is simply never found: an insurance policy nobody knew about, a demat account nobody could name, or a land deed kept in a drawer cleared out after a loss.
Over ₹1.5 Lakh Crore lies unclaimed across Indian bank accounts, EPF funds, and insurance policies simply because families lacked a confidential roadmap.
We built WillWolf the only way we were willing to ask for that trust: the vault is encrypted on your browser, and we hold no master key.
Only you hold the key
We never see your master password.
Locked on your device
Encrypted before it leaves your browser.
7 asset categories
From your flat to your patents.
English and Hindi
Built for Indian succession law.
The core principle
We keep the shape, never the contents.
The one engineering rule the whole vault is built on, and the reason we can never read what is inside yours.
The bare minimum to run your account
We know your account exists, roughly how many items are in each category, and when you last updated. Without this, we cannot log you in or send you a reminder.
- That your account exists and whether it is active
- How many items are in each category (like "3 properties")
- When you last updated your vault
Everything you actually recorded
Which property, worth what, going to whom, with what private message. All of it is locked on your device and reaches us as scrambled data we have no key to unscramble.
- Property addresses, bank account numbers, folio numbers
- Beneficiary names, shares, and personal messages
- The generated Will PDF (encrypted with your vault)
What this means for you
Three things this rule guarantees.
No one at WillWolf can open your vault.
Not an engineer, not the founder, not our support team. We hold no key of any kind. That is by design: you are the only one who ever holds the key that opens your vault.
Changing your master password is safe.
Your vault key is created once in your browser and never replaced. Resetting your master password just re-encrypts the same key, so nothing you have recorded is ever touched.
A reset link would be a back door, so there is none.
Recovery uses a secret sentence known only to you, verified inside your browser. Your recovery stays fully in your hands, and only you can ever restore access to your vault.
The safest way to hand it over
Only the people you named can open what you left them.
They sign in with their own Aadhaar, and either walk straight in if you released early access, or wait for our team to verify a death certificate. Nothing on our side alone is enough to open a vault.
See how the claim worksHow your data is handled
Where your data lives, and who touches it.
Encryption covers what is in your vault. Everything else is a matter of policy, so here it is in one place.
- Where it is stored
- Enterprise cloud infrastructure hosted in India, ISO 27001 certified and SOC 2 audited. Backups stay in the same region and are deleted on the same schedule.
- Who else is involved
- A licensed Aadhaar e-KYC provider for identity verification. A telecom provider to deliver one-time codes by SMS. An email provider for codes and account notices. We do not sell your data. Not to advertisers, not to insurers, not to anyone.
- How long we keep your data
- As long as your account is active. When you ask to delete it, your data is removed after a recovery window you choose, from 2 to 48 hours.
- What deletion means
- A genuine hard delete, on a timer you control. When you ask to delete, your account deactivates and the erase is scheduled for a recovery window you choose, from 2 to 48 hours. Sign back in during that window and the deletion is cancelled. Once it ends, everything you recorded, your vault, your will, your assets and the people you named, is permanently erased from our servers, backups included, with no support override that can bring it back.
- Legal and law enforcement requests
- We can only hand over what we hold, which is the metadata listed on the home page. Your encrypted vault contents cannot be produced even under a court order, because we have no key to unlock them.
The full policies live in the app: Privacy Policy and Terms of Service. Questions about either go to support@willwolf.in.
What we won't do
Honesty is the product, not the marketing.
A vault is only worth what its weakest claim is worth. These are the ones we have committed to keeping.
We will not claim more than the system does
Encryption protects what you record inside your vault. Your name, email and membership plan stay outside because the service needs them to run. We tell you which is which, plainly.
We will not pretend to be your lawyer
WillWolf is a self-service tool, not a law firm. It turns what you record into a will you can sign, but for tax planning or family disputes, you still need your own lawyer.
We will not hide the trade-off
True end-to-end encryption has a real cost. If you lose both your master password and your recovery sentence, your vault cannot be unlocked by anyone, including us. We put this warning on the home page, not in the small print.
We will not surprise you with pricing
What you pay is the price shown on the pricing page. No upsells inside the vault, no per-asset fees, and no charges to your family or beneficiaries when they need to unlock what you left them.
See what it actually holds
Seven asset categories, the people you name, and a will generated from all of it. The records are encrypted before they leave your device.