Data processing and sub-processors
OnlyWallet is built so that we hold your data without being able to read most of it. This page explains the roles under the DPDP Act and who helps us run the service.
Effective 22 October 2026
These terms form part of the Terms of service between you and Beyond Basics, and add detail to the privacy notice.
1. Roles
- Beyond Basics is the Data Fiduciary for your account and for the details we can read: your Google email and name, the readable item details, payment schedules, reminder dates, space membership and emergency access records listed in the privacy notice.
- You decide what goes in your vault. When you store documents or details about other people, such as your spouse, children or parents, you choose what to record and who to share it with. Keep only what you need and tell family members what you hold for them.
- We cannot read encrypted content. Document fields, passwords, notes, scanned text, file names and files are encrypted on your device. We store and sync the ciphertext only to provide the service, and have no key to open it.
2. What the operator can and cannot see
| Readable by us | Encrypted, not readable by us |
|---|---|
| Google account email and name; titles you have not marked private; tags; category and template; issue, expiry and due dates; amounts; payment status; profile names and dates of birth; reminder dates; file type and size; space member emails and roles; emergency access emails, waiting period and status | Every document field and custom field; card numbers, CVVs and PINs; logins, passwords and authenticator keys; notes and payment notes; scanned and recognised text; private titles; file names and file contents; space names, managed-member names and member display names; your vault keys |
If a title would reveal something sensitive, use Mark title private when you add the item. The full design, including its limits, is on the Security page.
3. Sub-processors
We use these providers to run OnlyWallet. We will update this list before adding a new one.
| Provider | What it does for OnlyWallet | Data involved | Location |
|---|---|---|---|
| Google LLC: Firebase Authentication | Google sign-in and account identity | Google email, name, user ID | Global |
| Google LLC: Cloud Firestore | Database for encrypted vault records and readable details | Everything listed in section 2 | Mumbai, India (asia-south1) |
| Google LLC: Firebase App Check | Checks requests come from a genuine copy of the App | App and device attestation tokens | Global |
| Google LLC: Firebase Cloud Messaging | Push notifications for reminders and emergency access | Device push tokens and generic notification text | Global |
| Apple Inc.: Apple Push Notification service | Delivers those pushes to iPhone and iPad, through Firebase Cloud Messaging | Device push tokens and generic notification text | Global |
| Cloudflare, Inc. | Hosting for the Website and web app, serverless functions (reminder and alert pushes, Google Drive token exchange, document-link key release), security and cookieless analytics | Request data such as IP address; an encrypted Google Drive refresh token; the records those functions read | Global |
| Google LLC: Gmail | Our support and grievance mailbox | Emails you send us | Global |
Google Drive is yours, not ours. Your encrypted files are stored in your own Google account, in a folder called "OnlyWallet Vault", under your agreement with Google. OnlyWallet asks only for the drive.file permission, which lets it see the files it created and nothing else in your Drive. When you share a file in a space, the App gives the other members' Google accounts read access to the encrypted file, so Google and those members can see that the file exists, but not what it contains.
4. What we commit to
- We process data only to run OnlyWallet for you. We do not sell it, use it for advertising, or build profiles from it.
- We never ask for your master password or recovery phrase, and the App never sends them to us.
- Server-side security rules let only you, and the people you have chosen to share with, read your records. Our own staff access readable data only when needed to support you or keep the service secure.
- If a personal data breach affects you, we will tell you without delay and report it to the Data Protection Board as the DPDP Rules require.
- When you delete your account, we erase your records from the live database at once. Residual backup copies are overwritten within a limited period.
5. Requests about someone else's vault
If a relative or anyone else holds your documents in their OnlyWallet vault, we cannot read or remove that content because it is encrypted under their keys. Please ask them directly. For anything we can help with, email [email protected].
6. Changes
We may update these terms as the law or the service changes, for example when a provider changes. We will post the new version here with a new effective date.