Your stuf is locked up tight
Medical records, important documents, the people you care about: what you keep in myStuf is personal. So it's encrypted everywhere it lives, on your phone, on our servers and in our backups, and only you decide who else sees it.
Encrypted on your phoneThe whole myStuf database, your photos, files and voice recordings are encrypted on the device. A lost phone or a copied file shows only scrambled data.
Encrypted on our serversYour notes, descriptions, details, medical records and Ask chats are stored encrypted, with the key kept apart from the database.
Encrypted backupsNightly backups are encrypted with their own separate key before they leave the server, and restoring them is tested.
Encrypted on the wayEvery connection between the app, the website and our servers uses HTTPS. Browsers are told to never use anything less.
On your phone
- Encrypted database. Everything myStuf stores on the phone is in an AES-256 encrypted database. Its key is made on your phone, kept in the phone's secure key store, and never leaves the device.
- Encrypted photos and files. Photos, documents and recordings are encrypted on the phone too, and are only unlocked in memory while you look at them.
- Lock the app. Require your fingerprint, face or phone PIN to open myStuf.
- Private in the app switcher. Optionally show a blank card when you switch apps, and block screenshots and screen recording inside myStuf.
- Lock a collection. Important Documents and other sensitive collections can be locked so they need your phone lock to open, even when the app is already open.
On our servers
- The contents of your records are encrypted at rest with AES-256: every field you fill in (including Additional Info), descriptions, notes, medical history, visits and test results, and your Ask chats. Item and collection names stay readable so lists and search stay fast.
- The master key lives apart from the data. A copy of the database on its own is unreadable, and the server refuses to start with the wrong key rather than show scrambled data.
- Photos and files are kept in encrypted cloud storage (AES-256 at rest), and only you and the people you share a collection with can open them.
- Your password is never stored. We keep only a one-way hash, so nobody, including us, can read it.
Backups you can trust
- Nightly server backups are encrypted with a separate key before they're copied off-site. We test restoring them, so "backed up" means it actually comes back.
- Backups you make yourself (phone or web) can be protected with your own password. The file is useless to anyone who doesn't know it.
On the web
- Your sign-in stays out of reach of web pages. myStuf Online keeps it in a protected cookie that page scripts can't read.
- Sign out after inactivity. On a shared or family computer, choose how long myStuf waits before signing you out.
- Browser protections stop other sites from showing myStuf inside their own pages, and keep your address bar from being shared with the sites you click through to.
You decide who sees what
- Sharing is by invitation only. You pick the person and whether they can view or edit, and you can take access back at any time.
- Ask, the AI assistant, is off until you turn it on. When it's on, only what it looks up for your question is sent to answer it, and our AI provider doesn't use it to train its models.
- Ask never sees secrets: passwords, PINs, door and alarm codes, Social Security numbers, account and card numbers, or anything in a Passwords or locked collection.
- Leave whole areas out of Ask: Medical Records, Medications, Glucose Readings, Vitals or Important Documents, each with its own switch. A budget stays out unless you let Ask see it.
What we don't do
- We don't sell your data, show you ads, or look through your collections.
- We don't use what you keep in myStuf to train AI.
Questions about how your data is handled? See the Privacy Policy or contact support.