- The app and database run in Sydney.
- Your photos and documents are stored in Cloudflare’s Oceania region.
- Only the people on your record can see it. There are no public links.
- Your record is never sold or shared for marketing.
Where it’s stored
The app and its database run in Sydney. Your photos and documents are stored in Cloudflare’s Oceania region. Everything is encrypted in transit, and our storage providers encrypt it at rest.
Who can see it
Only the people on your record. Every photo and document is checked against your record before it’s shown, so there’s no link anyone else could open.
Nobody can remove anyone else from a record. In a partner visa, one partner’s status can depend on the other, so a tool that let one person lock the other out of their own evidence could be misused. Members can only choose to leave.
Your account
Passwords are stored as one-way hashes, never in plain text. Sign-in, sign-up and password reset are rate limited. Reset and invite links work once and expire.
Deleting your account deletes your record and its files. If you share a record, you leave it first, and what you added stays with it for your partner.
Services that help run Almost Home
| Service | What it does | What it can see |
|---|---|---|
| Vercel | Runs the app, in Sydney. | Requests to the app while they're handled. Also counts page views, without cookies. |
| Neon | Database, in Sydney. | Your account, and the titles, dates and notes on your items. |
| Cloudflare R2 | File storage, in its Oceania region. | Your photos and documents. |
| Upstash | Rate limiting, in Sydney. | An email or IP address, kept for minutes to stop password guessing. |
| Resend | Sends emails from Tokyo. Its records are kept in the US. | Your email address and the email itself (password resets and partner invites). |
| PostHog | Usage analytics, in the US. | An account ID and actions like “exported a PDF”. No names, emails, photos or documents. |
Questions about your data? Email hello@almosthome.au.