Privacy Policy

Your family records deserve care. We do not sell your information. New saved form answers and vault copies are encrypted on your device before storage. Older saved forms need owner-led conversion; encryption does not immediately remove historical backup copies.

Bagwire LLC operates The Black Estate App and is the data controller for personal information processed to provide it. The operator's direct privacy and support email is awaiting publication. Paddle support at paddle.net handles purchases, not app-record access or deletion requests.

• Your account: your email address and password (the password is stored in a scrambled form — we can't read it).
• Your documents: the answers you type into forms, the signatures and initials you draw, and when you save changes.
• Your purchases: purchased document or bundle, payment identifiers, status, and dates. Paddle is our reseller and Merchant of Record; your card number is handled by Paddle, not stored in our app.
• Vault copies and contacts: file contents, filenames, and contact details are stored encrypted. Your account identifier, record identifiers, document category, file path, encrypted size, and timestamps remain visible to the hosting service.
• Helper questions: general questions you submit and the document category are sent to the AI provider. Saved answers, vault files, and private contact records are not automatically attached. Do not submit private family, financial, or medical details to the helper.
• Basic technical logs: like error reports, so we can fix things when they break.

• Account information, saved encrypted answers, vault records, and purchase status provide sign-in, storage, editing, and paid access: performance of our contract with you.
• Questions you send to the helper and text selected for narration provide the answers and audio you request: performance of our contract. Microphone access is optional and requires your device permission; recorded speech is sent for transcription when you choose that feature.
• Technical information, which may include device/browser details, IP addresses, request identifiers and errors, helps operate and secure the app and prevent fraud: our legitimate interests in a reliable, secure service.
• If you contact support, we use the contact details, order information, and message you provide to respond: contract performance or our legitimate interest in answering inquiries. Avoid sending private estate or medical records.
• Records needed to comply with tax, accounting, legal requests, or disputes are used for legal obligations and legitimate interests in establishing or defending claims. Where we rely on consent for optional processing, you may withdraw it.

Lovable Cloud and its hosting providers process account information and encrypted records to run the service. AI, transcription, and speech providers receive the questions, audio, or narration text you request through Lovable's AI service; encrypted vault contents are not automatically attached. Browser-only helper conversation history is session-only, but providers may retain operational records under their own policies.

Paddle receives information needed to sell the product, manage purchase access, process payments and refunds, comply with tax rules, and issue invoices. Paddle processes payment-related information under its own Privacy Notice. We may share necessary information with professional legal or accounting advisers, and with authorities where law requires it.

Saved records are kept while needed for your account or until you delete them. We delete or anonymise information when it is no longer necessary, except records required for legal obligations, security, dispute resolution, or accounting. These records may need to be retained after account closure. Provider backup, technical-log, and AI-service retention periods have not been independently verified; we do not promise immediate removal from every backup.

Helper conversations are not saved as an app conversation history. Microphone audio is used for transcription, not stored as a recording in your account. Closing or leaving the helper ends its in-app conversation; this does not establish that all provider operational records have been erased.

Essential session technologies, including browser storage and any authentication cookies, keep you signed in and protect access. Browser permissions control the microphone. Vault unlock keys are held only in memory, not saved in browser storage. We do not intentionally use advertising or marketing cookies. No optional analytics or marketing cookies should be enabled without any consent required by law.

You can manage cookies and site storage through your browser and revoke microphone permission in device settings. Blocking essential storage may prevent sign-in or saved-record access.

Hosting, AI, and payment providers may process data outside your country. Where UK or EEA transfer rules apply, appropriate safeguards such as an adequacy decision or standard contractual clauses are required. The operator has not yet independently verified all provider locations and transfer arrangements; this notice does not claim a completed GDPR compliance assessment.

We do not sell your information or send marketing emails. Our hosting service stores encrypted vault records; Paddle handles payments. The AI provider receives only questions you choose to submit, not your stored vault contents. Designated contacts currently have no access to your vault and receive no invitations.

• You can edit or delete any saved document in the app at any time.
• You can sign out on any device, and you can use the "Sign out" button to end your session.
• You can ask us to delete your account and everything in it — just contact us.
• You can ask for a copy of what we hold about you, and we'll provide it.

Depending on applicable law, you may have rights to access, correct, erase, restrict processing, receive portable copies, object to processing, and withdraw consent without affecting earlier lawful processing. UK/EEA users may complain to their data protection supervisory authority. Where GDPR applies, requests are normally answered within one month; lawful extensions will be explained. Some records must be kept for legal obligations. We cannot decrypt vault records without your vault password.

Vault files, filenames, contact notes, and newly saved form answers—including signatures and initials—use device-side AES-256-GCM encryption. Sensitive personalized form titles are replaced with a general document category when saved or converted. The vault password unlocks an encryption key held in browser memory, not persistent browser storage. The vault locks when the tab is hidden, on sign-out, or after five minutes without activity.

Older saved answers remain readable by the hosting service until you explicitly convert them while signed in and unlocked. The My documents page shows which records are awaiting conversion. Deleting or converting records does not instantly erase provider backups; retention periods have not been independently verified.

Contact-assisted recovery and biometric confirmation are not active. Losing your vault password currently means losing access to encrypted records. Account password resets cannot decrypt the vault. The app does not automatically release documents after an emergency or death.

Independent security review is pending. HIPAA applicability, required agreements, and SOC 2 assessment have not been established for this app. Do not store Social Security numbers or regulated health records yet. Screen watermarks and blurring deter casual copying but cannot prevent screenshots or photographs.

The app is for adults planning their own estates. You must be 18 or older to create an account.

If we change how we handle your information, we'll update this page with a new date. If a change is significant, we'll tell you inside the app before it takes effect.