Privacy Policy

What we collect

Three kinds of information:

• Account basics · email, phone, name, profile photo. Used to sign you in and identify you.
• Identity & demographics · Aadhaar number, name, date of birth, gender, address, and photo received from UIDAI during e-KYC verification.
• Estate content · assets, beneficiaries, executors, witnesses, notes, and any documents you add.

How it's stored

Account basics are stored in our database in plain form because we need them to operate (deliver a sign-in code, show your name).

Identity and estate content are stored encrypted at rest under keys we manage. Sensitive estate fields · names of beneficiaries, asset values, private notes · are additionally encrypted in your browser before they reach our servers, using a key derived from your master password. We do not have a copy of that key. If you lose both your password and your recovery sentence, that data cannot be recovered by anyone, including us.

Who can see your data

• You · through your own account, any time.
• People you name (beneficiaries, executors, witnesses) · only after the verified conditions you set are met.
• WillWolf staff · only the unencrypted parts (account basics, KYC demographics) and only under audited support workflows. We log every internal read.
• Indian regulators or law enforcement · only when legally compelled, and we will notify you unless the request prohibits it.

Third parties we use

• UIDAI (via Sandbox by Quicko) for Aadhaar e-KYC verification.
• A telecom provider to deliver one-time codes by SMS.
• An email provider to deliver one-time codes and account notifications.
• Cloud infrastructure (in India region) for hosting and storage.

We do not sell, share, or use your data for advertising.

How long we keep it

• Account basics: as long as your account is active, plus 30 days after deletion for fraud-prevention purposes.
• KYC demographics: as long as your account is active, then permanently deleted on account closure.
• Estate content: yours to remove any time. After account deletion, all encrypted estate blobs are permanently erased within 30 days.

Your rights

Under the DPDP Act (India), you can request a copy of your data, ask us to correct it, or delete your account at any time. Email privacy@willwolf.in and we will respond within 30 days. For complaints, you can also contact the Data Protection Board of India.