PRIVACY POLICY.

1. Introduction

When I Croak ("we," "us," "our," or "the Company") provides a platform that helps you organize your financial, personal, and household information into a secure, structured "life map" for the benefit of the people you designate as trusted contacts.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. By creating an account or otherwise using our website or application (collectively, the "Service"), you agree to the practices described in this policy.

2. Information We Collect

We collect information you provide directly, information generated as you use the Service, and limited technical information collected automatically.

Information You Provide

• Account information: name, email address, phone number, and password
• Profile and life-map content you choose to enter, such as descriptions of accounts, insurance policies, properties, business interests, contacts, and household instructions
• Trusted contact information you provide on behalf of family members or designees
• Payment information, processed by our third-party payment processor (see "How We Share Information")
• Communications you send to our support team

Information Generated Through Use

• Activity logs, including login times and access events for you and your trusted contacts
• Interactions with The Guide, our AI companion feature
• Preferences and settings you configure within your account

Information Collected Automatically

• Device and browser type, IP address, and general location derived from IP address
• Usage data such as pages visited and features used, collected via cookies and similar technologies (see "Cookies & Tracking")

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and your life map
• Provide, operate, and improve the Service, including The Guide
• Grant and manage access for the trusted contacts you designate
• Send account, security, and activity notifications, including real-time alerts when your account or map is accessed
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Detect, investigate, and prevent fraud, unauthorized access, and security incidents
• Comply with legal obligations

We do not sell your personal information, and we do not use the contents of your life map for advertising purposes.

4. What We Never Store

A core principle of When I Croak is that we store the map, not the vault. We do not request, and we ask that you not enter, the following into your life map:

• Bank, brokerage, or credit card account numbers
• Login passwords or credentials for third-party accounts
• Social Security numbers or other government identification numbers

Instead, your map is designed to describe where this information lives (for example, "checking account at [Bank Name] — see password manager") so your trusted contacts know where to look, without our platform ever holding the sensitive credentials themselves.

5. How We Share Information

We share information only in the following circumstances:

• Trusted contacts you designate — access to your map is granted only after activation and identity verification, as configured in your account settings
• Service providers — we work with infrastructure and payment providers, including Supabase, Stripe, and Vercel, to operate the Service. These providers are contractually bound to protect your information and use it only to provide services to us
• Legal and safety reasons — where required to comply with law, respond to legal process, or protect the rights, property, or safety of When I Croak, our users, or the public
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections

We do not sell or rent your personal information to third parties for their marketing purposes.

6. How We Protect Your Information

We apply industry-standard safeguards designed to protect your information, including:

• AES-256 encryption for data at rest and TLS 1.3 encryption for data in transit
• Mandatory multi-factor authentication for every trusted contact before they can access your map
• Real-time activity alerts for every login by you or a trusted contact
• Infrastructure built on SOC 2 Type II certified providers
• Cyber liability insurance coverage

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to enable multi-factor authentication on your account.

7. Trusted Contacts & Family Access

You control who is designated as a trusted contact and what portion of your map they can access, and under what conditions their access is activated. Trusted contacts are required to complete identity verification and enable multi-factor authentication before viewing any information. You may add, remove, or modify trusted contacts and their access permissions at any time from your account.

If you are added as a trusted contact by another user, information about you (such as your name and contact details) may be entered into that user's map by them. You may contact us using the details below with questions about how your information is used in this context.

8. The Guide (AI Companion)

The Guide is an AI-powered feature that assists trusted contacts during the activation process by referencing information stored in your map to generate guidance, call scripts, and draft communications. The Guide processes map content to generate these outputs; it does not use your data to train third-party AI models beyond what is necessary to provide this feature to you.

9. Data Retention

We retain your account and map information for as long as your account remains active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time, subject to the limitations described in "Your Rights & Choices" below.

10. Your Rights & Choices

Depending on your location, you may have the right to:

• Access, correct, or update the personal information in your account
• Request a copy of the information we hold about you
• Request deletion of your account and associated information
• Opt out of non-essential marketing communications
• Object to or restrict certain processing of your information

To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We will respond in accordance with applicable law.

11. Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling certain cookies may limit some features of the Service.

12. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

13. International Users

If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to this transfer.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service prior to the change becoming effective. The "Last Updated" date at the top of this page reflects the most recent revision.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us at:

When I Croak
Email: privacy@whenicroak.com
Website: whenicroak.com