Privacy Policy

1. Information We Collect

A. Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number (optional)
• Password (hashed using bcrypt; never stored in plain text)
• Two-factor authentication method preference and verification status
• Profile preferences and settings

B. Billing Information

When you subscribe to a paid plan, our payment processor (Stripe) collects:

• Credit or debit card details
• Billing address
• Transaction history

C. Family Plan Content

You choose what information to store. The Platform organizes your data across these categories:

• Action Cards: Scanned bills, bank accounts, credit cards, subscriptions, and financial accounts
• Properties: Real estate, vehicles, and ownership details (including property claimants/heirs)
• Medications: Prescription and supplement details, dosages, pharmacy information, prescribing doctors
• Professional Contacts: Up to 9 types including primary care, estate attorney, accountant, financial advisor, insurance agent, and others
• Legacy Messages: Text messages, audio recordings (up to 30 seconds), and short video clips intended for delivery to loved ones on dates or events you specify
• Secure Access Notes: Passwords, PINs, and sensitive access credentials for use by your designated executor
• 72-Hour Checklist: Auto-generated task list for the first 72 hours after a crisis, built from your actual accounts, contacts, and bills
• Reminders: Bill due dates, tax deadlines, and recurring financial alerts

D. Documents and Media You Upload

• Photos of bills, bank statements, medication labels, and insurance documents
• Audio recordings and video clips for legacy messages
• Document metadata (file name, upload date, file size, file type)

HEIC Conversion: Photos taken on iPhones in HEIC format are automatically converted to JPEG on our server before processing. The original HEIC file is not retained after conversion.

E. Family Sharing and Access Data

When you invite family members or designate trusted individuals, we collect:

• Their name and email address
• Relationship type (spouse, Point Person, or executor)
• Access permissions you grant to each person
• Access request and approval records
• Account closure request records (executor-initiated)

F. Signup Attribution and Referral Data

• UTM parameters (source, medium, campaign) if you arrive via a marketing link
• Partner referral codes if you sign up through a professional partner
• Referral source tracking for commission purposes

G. Technical and Usage Information

We automatically collect:

• IP address
• Browser type and version
• Device type (mobile, tablet, desktop)
• Operating system
• Pages visited within the Platform
• Time and date of access
• Session duration
• Error reports (via Sentry, our error tracking service)
• Feature utilization and navigation patterns

2. Artificial Intelligence (AI) Processing

A. What AI Processes

We use the Anthropic Claude API (a third-party AI service) in two ways:

1. Scanning documents you photograph.

• Bill and Statement Parsing: When you snap a photo of a bill, bank statement, or financial document, the image is sent to the Claude API. The AI reads the document and extracts structured data such as account name, account number, service provider, billing address, due date, and amount. This data is returned to you for review before you save it.
• Medication Label Parsing: When you snap a photo of a medication label, the image is sent to the Claude API. The AI extracts medication name, dosage, prescribing doctor, pharmacy, and refill information.

2. Helping with your plan using information you have already saved.

• 72-Hour Checklist: When you generate your checklist, we send relevant saved plan details — your medications (name, dosage, pharmacy), doctors and professional contacts, bills and accounts (provider, category, due date), properties, pets, and any allergies you have recorded — to the Claude API so it can create a personalized step-by-step guide for whoever steps in to help you. We do not send account numbers, Social Security numbers, email addresses, secure notes, or the contents of legacy messages.
• Plan Insights: To suggest gaps in your plan, we send only high-level counts and category labels (for example, “4 bills, 2 properties, has legacy messages”) — never the underlying personal details.

B. What AI Does NOT Do

• AI never receives your account numbers, Social Security numbers, email addresses, secure notes, or the contents of your legacy messages
• AI does not process audio or video legacy message content
• AI does not make decisions about your plan, your family, or your finances — it only suggests, and you decide
• AI does not profile you or create behavioral models
• AI is not used for marketing, advertising, or recommendations

C. AI Data Protections

• Images are sent to Anthropic's API via encrypted HTTPS connection
• Anthropic's API does not retain your data for model training (per Anthropic's commercial API data policy)
• We do not store the raw AI response after structured data is extracted and saved to your account
• AI processing occurs only on our server; no AI processing happens in your browser
• Each AI request includes a confidence score. Low-confidence results are flagged for your manual review
• You always review and approve AI-extracted data before it is saved

D. Your Right to Decline AI Processing

AI-assisted scanning is optional. You may manually enter all information without using the scan feature. The AI photo-scan is a convenience tool, not a requirement.

3. How We Use Your Information

A. Core Service Delivery

• Create and maintain your account
• Store and organize your family plan information
• Process AI-assisted bill and medication scanning
• Generate your personalized 72-Hour Checklist from your actual data
• Enable family sharing with role-based access controls
• Process payments and manage subscriptions via Stripe
• Send transactional emails (receipts, password resets, account notifications, family invitations)
• Deliver scheduled legacy messages on dates or events you specify
• Send bill reminders and tax deadline alerts

B. Communication

• Respond to your support requests
• Send important service updates and security notices
• Notify you of changes to Terms or Privacy Policy
• Send re-engagement nudges if your plan is incomplete (you can unsubscribe)
• Send educational content about estate readiness via email (you can opt out)

C. Platform Improvement

• Analyze aggregated, anonymized usage patterns to improve features
• Monitor errors via Sentry to fix bugs and technical issues
• Track onboarding completion rates to improve the new-user experience
• Develop new features based on aggregated user behavior

D. Legal Compliance

• Comply with applicable laws and regulations
• Respond to valid legal process (court orders, subpoenas)
• Protect against fraud, unauthorized access, or security threats
• Enforce our Terms of Service

4. How We Store and Protect Your Information

A. Infrastructure

B. Encryption and Security Measures

• AES-256-GCM encryption for sensitive fields including bank account numbers and medication details
• bcrypt password hashing (passwords are never stored in plain text and cannot be retrieved)
• Two-factor authentication via email security codes (default) or authenticator app (optional), enforced via middleware on every protected route
• Row Level Security (RLS) on all 23 database tables, ensuring users can only access their own data and data explicitly shared with them
• Signed URLs with 10-minute expiry for all document and media file access (no permanent public links)
• SSL/TLS encryption for all data in transit
• AES-256 encryption at rest for all stored data (Supabase default)
• Private storage buckets with access-controlled policies (no public file URLs)
• Content Security Policy (CSP), Strict-Transport-Security (HSTS), X-Frame-Options: DENY, and other security headers enforced on all responses
• Rate limiting on authentication endpoints (login: 5 attempts/minute; signup: 3 attempts/hour; security code requests: 3/15 minutes; security code verification: 5/15 minutes)
• Stripe webhook signature verification for all payment events
• Cron job authentication via secret header verification

C. Data Isolation

Your data is isolated from other users through multiple layers:

• Every database query is filtered by your authenticated user ID
• Row Level Security policies enforce access at the database level, independent of application code
• File storage paths are user-specific and access is verified before generating signed URLs
• Family members with sharing access can only see what you have explicitly permitted based on their role

5. Family Sharing and Role-Based Access

You control who can access your plan and what they can see. NOKP supports four roles:

• You can modify or revoke any role at any time
• Executor access to secure notes and full legacy messages is gated behind access tier approval
• We maintain audit records of access requests and approvals
• We do not mediate family disputes about access. You control your own plan.

6. Professional Partner Program

A. What Partners Are

Estate attorneys, financial advisors, life insurance agents, assisted living facilities, employers, and other professionals may partner with NOKP to refer clients, purchase seat-based licenses, or offer NOKP as a benefit.

B. What Partners Can See

Partners cannot see your vault contents, your name, or any identifiable information. Partners with active accounts can access:

• Aggregate statistics only: total referrals, total active users (count only), and revenue/commission data
• Referral tracking: whether sign-ups occurred through their referral code (no user names or details)
• Seat utilization: how many of their purchased seats are in use (count only, no user details)

C. Partner API

Partners with approved API access can query aggregate statistics programmatically. API access is authenticated via hashed API keys and returns only anonymized, aggregate data. No individual user data is ever accessible through the partner API.

D. What We Share with Partners

• That a signup occurred via their referral code (for commission calculation)
• Aggregate, anonymized readiness statistics (no individual data)
• Count of active users under their referral or seat allocation

We never share: your name, email, vault contents, or any individually identifiable information with any partner.

7. Readiness Scorecard

When you complete the scorecard:

• Your responses are used to generate your readiness score and gap analysis
• If you provide your email address to receive your results, your email is stored in MailerLite (our email marketing platform) and you enter our educational email nurture sequence
• You can unsubscribe from marketing emails at any time using the unsubscribe link in every email
• Scorecard responses are not linked to your NOKP app account unless you later create one with the same email
• We do not sell scorecard email addresses to third parties

8. Email Communications

A. Transactional Emails (via Resend)

These are essential service emails you cannot opt out of:

• Account verification and password resets
• Family sharing invitations and access request notifications
• Payment receipts and subscription confirmations
• Bill reminders and tax deadline alerts you configured
• Legacy message delivery notifications
• Security codes for two-factor authentication at login
• Account closure notifications

B. Re-Engagement Nudges (via Resend)

If your plan is incomplete, we may send periodic nudge emails encouraging you to continue. These are triggered by specific conditions (e.g., no bills snapped after 7 days, no family member invited after 14 days). You can unsubscribe from nudge emails at any time using the unsubscribe link, and we honor unsubscribe requests via cryptographic token verification.

C. Marketing Emails (via MailerLite)

Educational content about estate readiness, scorecard results, and product updates. You can opt out at any time.

9. Cookies and Tracking Technologies

A. Cookies We Use

• Essential Cookies: Authentication session management, CSRF protection, two-factor authentication state (required for the Platform to function)
• Analytics Cookies: Google Analytics tracks aggregated usage patterns, traffic sources, and page views
• Preference Cookies: Remember your settings and dashboard state

B. Third-Party Cookies

• Google Analytics may set cookies to understand usage patterns
• Stripe may set cookies during the payment checkout process

C. Your Control

• Most browsers allow you to refuse or delete cookies
• Disabling essential cookies will prevent login and Platform functionality
• We honor Do Not Track (DNT) browser signals

D. Future Analytics

We plan to implement PostHog for product analytics. When implemented, PostHog will track feature usage and navigation patterns to help us improve the Platform. PostHog data is used only for internal product improvement and is never shared with third parties. We will update this policy before activating PostHog.

10. Information Sharing and Disclosure

We do NOT sell, rent, or trade your personal information. We share information only in these specific circumstances:

A. Service Providers

We use the third-party providers listed in Section 4A. Each provider:

• Is contractually obligated to protect your data
• Can only use your information to provide their specific service to us
• Cannot use your data for their own marketing or purposes
• Must comply with applicable data protection regulations

B. Legal Requirements

We may disclose information when required by law:

• Valid court orders or subpoenas
• Law enforcement requests with proper legal authority
• Protection of our legal rights or enforcement of our Terms
• Prevention of fraud or imminent security threats
• Protection of user safety in emergency situations

We will notify you of legal requests for your data unless prohibited by law or court order from doing so.

C. Business Transfers

If Next of Kin Plan is acquired, merged, or sold:

• Your information may be transferred to the acquiring entity
• We will notify you at least 30 days before any transfer
• The acquiring entity will be bound by this Privacy Policy for existing user data
• You will have the opportunity to delete your account before the transfer

D. With Your Explicit Consent

We may share information in circumstances not described above only with your explicit, informed consent.

11. Your Rights and Choices

A. Access and Export

• View all your plan contents at any time through the Platform
• Download a comprehensive PDF export of your full plan
• Request a machine-readable copy of all data we hold about you

B. Modify

• Update your account information and profile
• Edit any stored content (action cards, medications, contacts, etc.)
• Add, modify, or revoke family sharing roles at any time
• Change access permissions for any shared family member

C. Delete

• Delete specific items (cards, medications, contacts, legacy messages, etc.)
• Remove uploaded documents and media
• Close your account entirely

Upon account closure: you have 90 days to download your data. After 90 days, all data is permanently deleted from our production database. Backup copies are purged within 30 additional days. Transaction records required by law are retained for 7 years. This process is irreversible.

D. Communication Preferences

• Unsubscribe from marketing emails via the link in every email
• Unsubscribe from re-engagement nudge emails via the link in every email
• You will continue to receive essential transactional emails (receipts, security alerts, password resets)

12. Data Retention

13. Children's Privacy

Next of Kin Plan is designed for adults and is not intended for children under 18.

• We do not knowingly collect personal information from anyone under 13 years of age
• Our Service requires users to be at least 18 years old to create an account
• If we learn we have collected information from a child under 13, we will delete it immediately
• Parents who discover their child has provided information to us should contact us at support@nextofkinplan.com

14. International Data Transfers

Your information is stored and processed in the United States on infrastructure operated by Supabase, Vercel, Stripe, and our other service providers. If you access the Platform from outside the United States, you acknowledge and consent to the transfer and processing of your information in the United States. U.S. data protection laws may differ from those in your jurisdiction.

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to Know

• What personal information we collect, use, and disclose
• The categories of sources from which we collect information
• The business purposes for collecting your information
• The categories of third parties with whom we share information

Right to Delete

Request deletion of your personal information, subject to legal retention requirements.

Right to Correct

Request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing

We do not sell or share your personal information for cross-context behavioral advertising. No opt-out mechanism is needed because we do not engage in these practices.

Right to Non-Discrimination

We will not discriminate against you for exercising any of these rights.

To exercise these rights, email privacy@nextofkinplan.com with the subject line “California Privacy Request.” We will verify your identity before processing your request and respond within 45 days.

16. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation:

Legal Bases for Processing

• Contract: To provide the Service you have subscribed to
• Legitimate Interest: To improve the Platform, prevent fraud, and ensure security
• Consent: For marketing communications and AI-assisted scanning (you may withdraw consent at any time)

Your Rights

• Access: Obtain a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion (“right to be forgotten”)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interest
• Withdraw Consent: For any consent-based processing, without affecting prior lawful processing

Contact our Data Protection Officer at: privacy@nextofkinplan.com. You also have the right to lodge a complaint with your local supervisory authority.

17. Security Breach Notification

In the event of a data breach affecting your personal information:

• We will notify affected users within 72 hours of confirmed discovery
• Notification will describe: what happened, what data was affected, what steps we are taking, and what you can do to protect yourself
• We will report to relevant authorities as required by applicable law (including state attorney general notifications where required)
• We maintain incident response procedures and conduct post-incident reviews

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements.

• We will notify you of material changes via email to your registered address and a prominent notice on the Platform
• Material changes take effect 30 days after notice
• Non-material changes (e.g., formatting, clarifications) take effect when posted
• Continued use of the Service after changes take effect constitutes acceptance
• If you disagree with changes, you may close your account before they take effect

Version History

• Version 2.0: February 24, 2026 (current — comprehensive rewrite reflecting AI processing, updated tech stack, partner program, and role-based access model)
• Version 1.0: December 8, 2024 (initial release)

19. Third-Party Links

The Platform may contain links to third-party services including legal document providers, financial institutions, and other resources. We are not responsible for the privacy practices, content, or security of third-party sites. We encourage you to review their privacy policies before providing any information.

20. Contact Us

For Privacy Questions: Email: privacy@nextofkinplan.com

For General Support: Email: support@nextofkinplan.com
Website: www.nextofkinplan.com

To Exercise Your Privacy Rights:

Email: privacy@nextofkinplan.com
Subject Line: “Privacy Rights Request”
We will respond within 30 days (up to 45 days for complex requests, with notice of the extension).