Privacy should be understandable, not just legal.

Our commitment

BeforeHand is designed around deliberate access, data minimization, and clear control. We do not treat a family relationship as automatic permission to view another person's plan.

Information you provide

When you create an account, we collect your name, email address, and (optionally) a phone number for two-factor authentication and time-sensitive alerts. If you sign in with Google instead of a password, we receive only your name, email address, and profile photo from your Google account — nothing else, and we never access your Gmail, Drive, Calendar, or Contacts.

Information you record in your plan

Your plan can include structured records (financial accounts, insurance policies, digital account logins, medical directives, personal property, and similar categories you choose to add), uploaded documents, and information about the people you connect to your plan — their name, relationship to you, and contact details. Fields you mark as sensitive, such as account passwords and identification numbers, are encrypted before they're stored and are masked on screen behind an additional security PIN you set separately from your account password.

Who can see it, and when

Nothing you record is visible to anyone by default. Access only exists for the specific people you choose, scoped to exactly what you decide — a full plan, a single category, or a single item — and most access stays inactive until you explicitly publish it. Some access is conditional: it only activates once a life event you've defined (such as incapacity or death) is reported and verified through a review of real evidence, not a single click.

Once a death is verified specifically, we treat closing your accounts and settling your affairs as the priority: the Executor you've named and the family point of contact you've designated automatically gain full access to your plan's records and documents at that point, regardless of the narrower access they may have held while you were living. Everyone else you've connected to the plan can see high-level progress on that process without seeing your underlying records, unless they hold their own specific access to them.

How we communicate with you

We send email and, for time-sensitive items, text messages about account activity: access being granted, a life event being reported or verified, and updates once a plan enters the account-closure process described above. We use Mailgun to deliver email and Twilio to deliver text messages; neither is authorized to use your information for any purpose beyond sending the message we ask them to send.

Where your information is stored

Your plan data and uploaded documents are stored using Supabase, our database and file-storage provider, with sensitive fields encrypted before they ever reach storage.

Your choices

You can review, edit, or remove what you've added, and change or revoke anyone's access at any time your plan isn't already in the account-closure process described above. To request a copy of your information or ask us to delete your account, contact us at the address below.

Children

BeforeHand is built for adults planning for themselves and the people they trust. It is not directed to, and we do not knowingly collect information from, children.

Changes to this policy

If how we handle your information changes in a way that matters, we'll update this page and, for significant changes, tell you directly.

Contact us

Questions about this policy or your information: hello@beforehandplan.com.

Before this policy is final

This page reflects the product's actual current design and the providers listed above. It should still be reviewed by qualified counsel, updated with the company's legal name, registered address, and jurisdiction, and reconfirmed against the exact providers in use before it is relied on as a binding privacy policy.