أثرAthar

Privacy Policy

Last updated: October 2026

The short version

Your vault holds some of the most personal content that exists. We treat it that way: we encrypt it, we never sell it, we never use it for advertising, and nobody at Athar reads it in the ordinary course of business.

What we collect

  • Account data: your name, email, password (stored only as a bcrypt hash), and optional 2FA secret.
  • Vault content: messages (encrypted at rest with per-account keys), recordings and files you upload.
  • People you add: names and contact details of recipients and guardians — provided by you, used only to deliver and verify as described in the product.
  • Activity log: security-relevant events on your account (sign-ins, check-ins, guardian actions), shown to you on your dashboard.
  • Billing: handled by Stripe; we never see or store card numbers.

What we do with it

One thing: operate Athar. Check-in emails, guardian verification, delivery after death, support when you ask for it. We share data only with the processors that make the service run — hosting (Vercel), database and storage (Supabase), email (Resend), payments (Stripe) — each bound by their own data-protection terms.

Encryption, honestly stated

Written messages are encrypted at rest (AES-256-GCM, per-account keys). Media files are stored in a private bucket, served only through authorized requests. This is strong server-side encryption — not end-to-end encryption: our systems can decrypt content in order to deliver it to your loved ones. Full E2E is on our roadmap.

Your rights

  • Export: ask and you receive a copy of everything you stored.
  • Delete: the Security page has a delete-account option that erases everything, permanently, in minutes.
  • Correct: every piece of data you gave us is editable in the app.

Recipients and guardians

If someone added you as a recipient or guardian, we hold your name and contact details solely to fulfil that person's wishes. Write to support@athargo.com to have your details removed (we will tell the vault owner their delivery plan changed, without saying why).

Retention

We keep your vault while your account exists. After a vault is released, claim pages remain available to recipients. Deleted accounts are erased immediately from the live database and leave backups within 30 days.

Contact

support@athargo.com