Security & continuity

Guarding words that can't be rewritten

A service holding your last letters owes you precision, not reassurance. This page describes how your content is protected today, what we deliberately don't claim, and what happens to your words if we ever close our doors.

What protects your words today

Available today

Encrypted in transit

Everything that moves between your device and our servers travels over TLS. Nothing is ever sent in the clear.

Encrypted at rest

Your content is stored encrypted on our database and file-storage provider (Convex), with keys managed at the infrastructure level.

Access control

Through the product, your content is visible to exactly three groups: you, people you explicitly share with, and — after a delivery you configured — the recipients you named.

Payments never touch our servers

Card details go directly to Stripe. We store only a transaction record and a customer reference.

Honesty over marketing

What we don’t claim

When I Die Files is not end-to-end encrypted today. The encryption keys protecting your stored content are managed by our infrastructure provider, not derived from your password. That means that, like nearly every cloud service, a small number of operators could technically access the database. That access is restricted and logged, and we never read your content except with your consent for support or where the law requires it — but you deserve the precise truth, not a vague “military-grade encryption” badge.

In development

Client-side encryption for vault contents — keys derived on your device, unreadable by us — is on our roadmap. Until it ships, you will never see us use the words “end-to-end” or “zero-knowledge.”

Backups and durability

Your content lives on managed, replicated infrastructure with automated backups, so a failed disk or a bad deploy can’t take your letters with it. We deliberately don’t promise specifics we can’t personally verify about our provider’s internals — but durability is the one property of this product we treat as non-negotiable, and we keep our own copies of operational data needed to honor the commitments below.

If When I Die Files shuts down

The first question anyone should ask a legacy service. These four commitments are written into our Terms of Service — they bind us and any future acquirer:

  1. 01

    12 months advance notice

    If When I Die Files ever ceases operations, every user hears about it at least a year before anything changes.

  2. 02

    Scheduled deliveries executed

    Every delivery you've configured is carried out before shutdown. Winding down the company doesn't cancel your letters.

  3. 03

    Full data export for everyone

    Every user receives a complete export of their content — letters, vault, life story, everything.

  4. 04

    A successor option

    We'll offer the option to transfer your data to a designated successor service, so continuity doesn't depend on you noticing an email.

No lock-in, ever

You can export your letters anytime, free, on every plan — and we encourage you to keep your own copies of anything irreplaceable somewhere you control. A service earns decades of trust by making itself easy to leave.

Found a security issue? Email support@whenidiefiles.com — we read every report and respond to security disclosures first.

Security & Data Continuity | When I Die Files | When I Die Files