Privacy Policy
Encrypted1. Information We Collect
When you establish your WWD sanctuary, we collect only the essential credentials required to authenticate your identity: your verified email address, device identification tokens, and designated multi-factor authentication methods.
All personal assets—including financial account records, estate documents, emergency directives, digital credentials, and family contact details—are encrypted locally on your personal device prior to transmission. We store solely encrypted ciphertext blobs.
We do not record your Master Passphrase or your 6-digit MPIN on our central servers. If you misplace your master key, WWD personnel cannot retrieve or reconstruct it on your behalf.
2. How We Use Your Data
Your account metadata is utilized exclusively to maintain the operational reliability of your vault, process real-time security alerts, confirm active device sessions, and dispatch scheduled activity check-ins.
We never deploy tracking beacons, cross-site cookies, third-party analytics trackers, or targeted advertising scripts within the mobile app. We do not monetize, lease, or broker your personal information to data aggregators or marketing partners under any condition.
3. Data Security & Cryptography
Your emergency vault is safeguarded by military-grade AES-256-GCM symmetric encryption combined with XChaCha20-Poly1305. Cryptographic keys are derived on-device through Argon2id password-hashing algorithms with high memory and iteration parameters.
Designated family circle recipients can only unlock delegated items following verified security trigger conditions and your pre-configured authorization delays, ensuring absolute control over posthumous or emergency releases.
All data in transit is protected by strict Transport Layer Security (TLS 1.3) with Certificate Pinning to shield your communications against man-in-the-middle exploits.
4. Your Rights & Vault Erasure
You hold irrevocable ownership over your vault. At any time via Account Settings, you may export your complete repository as an encrypted archive or execute a cryptographic self-destruct sequence.
Upon an account termination request, all encrypted blocks, session histories, and device identifiers are permanently expunged from our storage cluster within 48 hours, leaving no recoverable traces on backup systems.
5. Privacy Officer Contact
For cryptographic audits, data protection questions, or inquiries regarding our compliance with global privacy regulations (GDPR & CCPA), contact our designated Data Protection Officer at: