- The app and database run in Sydney.
- Your photos and documents are stored in Cloudflare’s Oceania region.
- Only the people on your record can see it. There are no public links.
- Your record is never sold or shared for marketing.
Where it’s stored
The app and its database run in Sydney. Your photos and documents are stored in Cloudflare’s Oceania region. Everything is encrypted in transit, and our storage providers encrypt it at rest.
Who can see it
Only the people on your record. Every photo and document is checked against your record before it’s shown, so there’s no link anyone else could open.
Nobody can remove anyone else from a record. In a partner visa, one partner’s status can depend on the other, so a tool that let one person lock the other out of their own evidence could be misused. Members can only choose to leave.
Your account
You can sign in with a 6-digit code we email you. Codes work once, expire after 10 minutes, allow 5 tries, and are stored only as a keyed hash. Passwords are optional and stored as one-way hashes, never in plain text. Sign-in, sign-up, codes and password reset are rate limited. Reset and invite links work once and expire. Changing or resetting your password signs you out on your other devices.
Deleting your account deletes your record and its files. If you share a record, you leave it first, and what you added stays with it for your partner.
Services that help run Almost Home
| Service | What it does | What it can see |
|---|---|---|
| Vercel | Runs the app, in Sydney. | Requests to the app while they're handled. Also counts page views, without cookies. |
| Neon | Database, in Sydney. | Your account, and the titles, dates and notes on your items. |
| Cloudflare R2 | File storage, in its Oceania region. | Your photos and documents. |
| Upstash | Rate limiting, in Sydney. | An email or IP address, kept for up to an hour to stop password and code guessing. |
| Resend | Sends emails from Tokyo. Its records are kept in the US. | Your email address and the email itself (sign-in codes, password resets, partner invites and the emails you can unsubscribe from). |
| PostHog | Usage analytics, in the US. | An account ID and actions like “exported a PDF”, plus which public pages are viewed by visitors who aren’t signed in, and the country each visit or sign-up comes from (no cookies, no IP address). Never pages inside the app, and no names, emails, photos or documents. |
| Google (optional) | Sign-in, only if you choose “Continue with Google”. Runs in the US. | That you signed in to Almost Home. We keep only your Google account ID, and offer your first name for you to confirm as your display name. |
| QStash (Upstash) | Times the welcome email, about a minute after you sign up, and the weekly reminders. Runs in the US. | Your account ID only. Never your email address or anything in your record. |
| Stripe | Processes payments, only if you unlock Almost Home. Runs in Australia and the US. | Your email, card details and what you paid. We never see your full card number. |
The full details are in our Privacy Policy. Questions about your data? Email hello@almosthome.au.