Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how Hanns Ventures Private Ltd (“Hanns Ventures”, “we”, “us”, or “our”) collects, uses, stores, protects, and shares information when you use the IFIGO mobile application, related cloud services, backup features, automatic-delivery features, and the IFIGO website (collectively, “IFIGO” or the “Service”).

IFIGO is a private-information handoff app designed to let you write journals, store information in a private vault, prepare information for selected recipients, maintain daily check-ins, create backups, and automatically deliver selected recipient packages when the conditions you configure are met.

IFIGO is designed around a principle of minimising the amount of sensitive content that needs to reach our servers.

You choose what information to store, which information is assigned to each recipient, and the missed-check-in period used by the automatic-delivery process.

Recipient packages are prepared on your device and protected with a password before they are uploaded for delivery. The shared-memory answer used as the password for a recipient package is not sent to, stored by, or known by IFIGO’s servers.

This Privacy Policy should be read together with the IFIGO Terms of Service.

1. Who We Are

The IFIGO Service is operated by:

Hanns Ventures Private Ltd
Registration: 200500790M
Singapore
Email: ifigoapp@gmail.com

For privacy questions, requests concerning your personal information, or questions about this Privacy Policy, please contact us at the email address above.

2. Information You Provide or Create

Depending on how you use IFIGO, you may provide or create the following categories of information.

Account information

This may include:

email address;
display name;
sign-in provider;
account identifier; and
information associated with authentication and account management.

Journal and vault content

You may choose to store information such as:

journal entries;
notes;
text;
attachments;
files;
URLs;
usernames;
passwords;
secrets; and
other information you choose to keep in IFIGO.

Because IFIGO can be used to store highly sensitive information, you should only add information that you are comfortable storing, protecting, backing up, and potentially sharing with recipients you select.

Recipient information

Depending on the features you use, this may include:

recipient name;
recipient email address;
shared-memory question;
recipient assignments;
package status; and
delivery information.

The shared-memory answer used as the password for a recipient package is intended to remain on your device and is not uploaded to IFIGO’s servers.

App settings and status

This may include:

check-in preferences;
check-in time;
missed-check-in period;
reminder settings;
lock settings;
backup status;
subscription status;
package status;
delivery status; and
related timestamps and operational information.

Notification and delivery information

This may include:

notification tokens;
device platform;
reminder timing;
timezone;
check-in status;
missed-check-in status;
package status;
delivery status;
delivery timestamps;
email delivery results; and
related technical information.

Backup information

If you enable backups, IFIGO may process:

encrypted backup files;
backup status;
timestamps;
synchronization status; and
related backup metadata.

Support information

If you contact us, we may receive the information you choose to provide, including your email address, message, attachments, and other information needed to respond to your request.

3. What IFIGO Is Designed to Keep on Your Device

IFIGO is designed to keep sensitive source information primarily within the app on your device.

Depending on the features you use, local app data may include:

journal entries;
vault items;
attachments;
recipient information;
shared-memory answers;
app settings;
check-in information;
package information;
backup information; and
other app-related records.

The current app uses encrypted local app storage and separately protects local attachment files. Security-related key information may also use device-provided secure storage.

The protection available to local data depends partly on your device, operating system, device lock, operating-system security features, backup settings, and other device capabilities.

You are responsible for protecting your device and keeping your device lock and other authentication credentials secure.

4. What IFIGO Servers Receive

IFIGO is designed not to upload journal body text, vault secrets, raw attachments, or shared-memory answers to Firebase as ordinary readable application data.

Instead, selected information is prepared into recipient-specific protected packages on your device.

However, IFIGO’s cloud services need to process certain operational information to operate the Service.

Depending on the features you use, this may include:

account identifiers;
recipient names;
recipient email addresses;
shared-memory questions;
package status;
delivery status;
storage references;
checksums;
notification status;
check-in status;
timestamps;
subscription status;
error information; and
other information required to operate, secure, troubleshoot, and maintain the Service.

Where IFIGO uses application-level encryption for particular fields, those fields are encrypted before being stored by the relevant cloud service. Cloud-provider infrastructure encryption and application-level encryption are separate security measures.

IFIGO does not claim that information stored or processed by a third-party cloud provider is inaccessible to that provider. Third-party providers operate under their own security, privacy, and service policies.

5. Encryption and Protected Packages

IFIGO is designed to protect sensitive information before it leaves your device.

Depending on the feature:

local app data is stored in encrypted app storage;
attachment files are separately protected;
supported backup files are encrypted on your device before being saved to a supported cloud backup provider;
recipient packages are generated on your device as password-protected PDF files before upload;
the shared-memory answer used as the PDF password is not uploaded to IFIGO’s servers.

The shared-memory answer is therefore not available to IFIGO’s servers for package opening.

The cloud service nevertheless processes operational information needed to keep packages current, determine delivery status, operate the missed-check-in process, and deliver packages.

No app, device, network, cloud provider, email provider, or storage provider can guarantee complete security.

You are responsible for protecting:

your device;
your device lock;
your IFIGO account;
your cloud accounts;
your backup access;
your shared-memory answers; and
any information or passwords needed by your selected recipients.

6. Cloud Services

IFIGO uses Firebase and related Google Cloud services for functions such as:

account authentication;
cloud infrastructure;
storage of operational metadata;
cloud messaging;
server-side scheduling and workflows;
protected-package management;
delivery processing;
reliability and security; and
error and operational logging where enabled.

Cloud processing may include:

signing you into your account;
maintaining account and app metadata;
synchronising relevant settings;
recording check-ins;
tracking missed-check-in periods;
managing package status;
maintaining delivery status;
uploading protected recipient packages;
sending notification messages;
detecting errors;
preventing duplicate processing;
protecting the Service against abuse or unauthorised access; and
maintaining Service reliability.

The cloud keeps the authoritative check-in schedule and delivery state.

As a result, a missed-check-in period may continue even if your phone is offline, powered off, unavailable, uninstalled, or otherwise unable to communicate with IFIGO.

7. Backups to Google Drive or iCloud Drive

If you enable backups, IFIGO may create an encrypted backup of your app data together with the information necessary to restore it.

Depending on your device, platform, and settings, backups may be stored in your:

Google Drive account; or
iCloud Drive account.

IFIGO does not control Google Drive or iCloud Drive.

Those providers have their own:

privacy policies;
terms of service;
security measures;
storage limits;
retention practices;
account controls; and
deletion processes.

IFIGO’s Delete All Data, Reset App, and Delete Account functions are designed to attempt deletion of IFIGO backup files through the applicable backup provider.

However, deletion may be affected by:

provider outages;
account-access problems;
provider-side retention;
provider backups;
technical failures;
copies outside IFIGO’s control; or
other circumstances involving the third-party provider.

If IFIGO cannot complete a required deletion step, the app may report that the deletion operation failed rather than representing the operation as successfully completed.

8. Automatic Delivery and Protected Packages

When package preparation is available for your account, IFIGO may maintain a recipient-specific protected package based on the information you have assigned to that recipient.

Each recipient package is intended to contain only the journals, vault items, and attachments that you have assigned to that recipient.

The package is prepared on your device and protected before upload.

The IFIGO cloud service may process package and recipient metadata required to keep the package authoritative and deliverable, including:

recipient name;
recipient email;
shared-memory question;
package status;
delivery status;
storage reference;
checksum;
timestamps; and
error status.

The shared-memory answer used as the package password is not uploaded to IFIGO’s servers.

If the configured missed-check-in deadline is reached and the applicable subscription state permits automatic delivery, IFIGO’s cloud service may send the latest verified protected package to the recipient you selected even if your phone is no longer available.

Email delivery

Current recipient delivery uses Brevo transactional email services.

When a protected package is delivered, information necessary to send the email may be shared with Brevo, including:

recipient name;
recipient email address;
delivery email content;
shared-memory question included in the email; and
the password-protected PDF attachment.

The shared-memory answer/PDF password is not included in the delivery email and is not sent to Brevo by IFIGO.

Once a package has been delivered, the recipient controls their copy.

A recipient may be able to:

download it;
store it;
copy it;
forward it;
disclose it; or
otherwise share it.

IFIGO cannot control what a recipient does with a package after delivery.

You should therefore select recipients whom you trust.

9. Notifications and Check-Ins

IFIGO uses Firebase Cloud Messaging and device notifications to support features such as:

daily check-in reminders;
delivery-status alerts;
service notifications; and
certain background or maintenance functions.

To provide these features, IFIGO may process:

notification tokens;
device platform;
reminder timing;
timezone;
check-in status;
missed-check-in settings;
subscription status; and
related operational timestamps.

Disabling notifications does not, by itself, pause the server-side missed-check-in period.

If notifications are disabled, you may not receive reminders even though the cloud check-in schedule continues.

When you want to acknowledge a check-in, you should open IFIGO and use the available I’m OK action.

10. Subscriptions and Purchases

Purchases and subscriptions are processed through the Apple App Store or Google Play.

IFIGO uses RevenueCat to help manage subscription and entitlement information.

Depending on the platform and transaction, IFIGO may process information such as:

product identifier;
entitlement status;
active or inactive status;
expiration date;
renewal status;
environment;
transaction or event identifier; and
related timestamps.

IFIGO does not receive or store your full payment-card details from Apple, Google, or RevenueCat.

Your App Store or Google Play subscription follows the applicable store’s billing and renewal rules.

Automatic delivery does not automatically cancel your subscription.

11. How We Use Information

We may use information to:

provide and operate IFIGO;
authenticate accounts;
provide journals, vault, check-in, backup, package, and delivery features;
store and process operational metadata;
generate, manage, upload, deliver, and delete protected recipient packages;
send check-in reminders and service notifications;
process missed check-ins and automatic delivery;
manage subscriptions and paid features;
restore data from supported backups;
troubleshoot errors;
maintain security and prevent abuse or unauthorised access;
improve reliability and performance;
respond to support requests;
enforce our Terms of Service;
comply with applicable legal obligations; and
establish, exercise, or defend legal claims where appropriate.

We do not sell your personal information.

We do not use the content of your journals or vault entries for advertising purposes.

12. Legal Bases for Processing

Where privacy laws such as the GDPR apply, we may process personal information on one or more of the following legal bases, depending on the circumstances:

Performance of a contract

Processing may be necessary to provide the Service you requested, including account management, check-ins, protected packages, backups, subscriptions, and automatic delivery.

Legitimate interests

We may process information where necessary for legitimate interests such as:

maintaining Service security;
preventing abuse or fraud;
troubleshooting;
improving reliability;
protecting our users and Service;
maintaining business records; and
establishing or defending legal claims.

Where we rely on legitimate interests, we consider whether those interests are balanced against applicable privacy rights and expectations.

Consent

Where required, we may ask for your consent before collecting, using, or sharing particular information.

Where processing is based on consent, you may withdraw that consent where applicable. Withdrawal does not affect processing that occurred before withdrawal.

Legal obligations

We may process or retain information where required to comply with applicable laws, regulations, court orders, or lawful requests.

The legal basis applicable to a particular processing activity may vary depending on the jurisdiction and circumstances.

13. How We Share Information

We do not sell your personal information.

We may share information with service providers and other parties where necessary to operate IFIGO, including:

Google / Firebase / Google Cloud

For services including:

authentication;
cloud infrastructure;
operational metadata;
cloud functions;
storage;
messaging;
security;
logging; and
reliability.

Apple and Google

When applicable, for:

account sign-in;
App Store or Google Play purchases;
subscriptions; and
entitlement information.

Google Drive or iCloud Drive

When you enable supported backup functionality.

RevenueCat

For subscription and entitlement management.

Brevo

For transactional delivery emails and protected-package delivery.

Your selected recipients

When automatic delivery occurs or when you otherwise choose to share information with them.

Legal, safety, and security parties

We may disclose information where reasonably necessary to:

comply with applicable law;
respond to lawful legal process;
protect the rights or safety of users or other persons;
investigate suspected fraud or abuse;
protect the security of the Service; or
establish, exercise, or defend legal claims.

Service providers may process personal information on our behalf and may be subject to contractual, legal, or technical restrictions concerning their use of that information.

14. Analytics, Logs, and Technical Information

IFIGO may maintain technical and operational logs necessary to operate, secure, troubleshoot, and maintain the Service.

Depending on the features enabled in the production version of the Service, this may include information such as:

account identifiers;
device or platform information;
application version;
timestamps;
error information;
service events;
package and delivery status;
authentication events; and
security or operational events.

If IFIGO introduces analytics, crash-reporting, advertising, or other third-party tracking technologies that collect additional personal information, this Privacy Policy may be updated to describe those practices.

IFIGO does not use journal or vault content for advertising purposes.

15. Your Choices and Privacy Controls

Depending on the features available in your version of IFIGO, you may be able to:

create, edit, or delete journal content;
create, edit, or delete vault items;
manage recipients;
change recipient assignments;
change your shared-memory questions and answers;
change your check-in time;
change your missed-check-in period;
enable or disable supported backups;
manage notification permissions;
manage device permissions;
manage Google Drive or iCloud Drive permissions;
manage subscriptions through Apple or Google; and
delete or reset your IFIGO data.

16. Access, Correction, Deletion, and Other Privacy Rights

Depending on your country or applicable privacy law, you may have rights concerning your personal information.

These may include the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of personal information where applicable;
request restriction of processing where applicable;
object to certain processing where applicable;
withdraw consent where processing is based on consent;
request a copy of certain personal information in a portable format where applicable; and
lodge a complaint with an applicable privacy or data-protection authority.

Singapore’s Personal Data Protection Act includes obligations concerning access and correction of personal data, as well as protection, retention, notification, and overseas transfer requirements. (PDPC) Where the GDPR or similar laws apply, additional rights may apply, including rights concerning erasure, restriction, objection, and data portability. (Eur-Lex) To make a privacy request, contact:

ifigoapp@gmail.com We may need to verify your identity before completing a request in order to protect your account and personal information.

Some requests may be subject to legal exceptions, technical limitations, the rights of other individuals, or other applicable requirements.

17. Delete All Data, Reset App, and Delete Account

IFIGO provides different data-management functions because deleting local app content is not necessarily the same as deleting an account.

Delete All Data

Delete All Data is designed to remove:

journals;
vault items;
recipients;
protected packages; and
IFIGO backups.

App and check-in settings and existing delivery status may remain.

Reset App

Reset App is designed to remove:

app content;
protected packages;
backups;
notification state; and
delivery state.

It also restores default app and check-in settings and restarts the check-in process.

Your account, subscription state, and Screen Lock PIN may remain.

Delete Account

Delete Account is designed to:

remove the IFIGO account;
remove associated cloud package information;
remove notification and delivery information;
attempt applicable backup cleanup;
remove applicable local data; and
delete the associated Firebase Authentication account.

The exact result may depend on device availability, cloud-service availability, backup-provider access, provider-side retention, legal obligations, or other technical limitations.

Deletion of an app does not necessarily delete an IFIGO account or all cloud information.

Similarly, making local data unavailable does not necessarily mean that the information has been securely deleted from every location or provider.

18. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

provide the Service;
maintain account and subscription functionality;
operate automatic delivery;
maintain security;
prevent abuse and fraud;
troubleshoot technical problems;
resolve disputes;
comply with legal obligations; and
establish, exercise, or defend legal claims.

Different categories of information may therefore have different retention periods.

Local information

Local app information remains on your device until you delete it, reset the app, delete your account, uninstall the app, or the operating system otherwise removes the app data.

Cloud information

Cloud metadata, package information, notification records, delivery information, subscription records, support records, and operational logs may be retained for different periods depending on their purpose and applicable legal or technical requirements.

Backups

Backups stored in Google Drive or iCloud Drive may remain until you, IFIGO through an applicable cleanup process, or the relevant provider deletes them.

Recipient copies

Once a protected package has been delivered to a recipient, IFIGO cannot control copies that the recipient has downloaded, stored, forwarded, or otherwise created.

Some information may need to be retained after account deletion where required for legal, security, fraud-prevention, accounting, dispute-resolution, or other legitimate purposes.

19. International Processing and Transfers

IFIGO uses service providers that may process information in countries outside your country of residence.

For example, cloud, email, authentication, subscription, backup, and infrastructure providers may operate data centres or processing systems in multiple countries.

Where applicable law requires safeguards for international transfers, we will use appropriate safeguards required by that law.

You understand that using an international cloud-based service may involve the processing of information outside your country.

20. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include:

encrypted local app storage;
protected attachment storage;
protected recipient packages;
device secure-storage capabilities;
controlled cloud access;
authentication controls;
access restrictions;
operational monitoring;
security controls provided by our service providers; and
other technical and organisational safeguards appropriate to the Service.

However, no security system is completely secure.

IFIGO cannot guarantee that information will never be lost, accessed without authorisation, disclosed, altered, or compromised.

You are responsible for protecting your:

device;
device passcode;
IFIGO account;
cloud accounts;
backup access;
shared-memory answers; and
other credentials.

21. Children

IFIGO is intended for users 18 years of age or older.

We do not knowingly provide the Service to children under 18.

If you believe that a person under 18 has created an IFIGO account or provided personal information to us, please contact us at ifigoapp@gmail.com.

If we become aware that we have collected personal information from a person who is not permitted to use the Service, we will take reasonable steps to address the situation in accordance with applicable law.

22. Third-Party Services

IFIGO relies on third-party services to provide certain features.

These may include:

Google Firebase and Google Cloud;
Google Sign-In;
Apple Sign-In;
Google Drive;
iCloud Drive;
RevenueCat;
Apple App Store;
Google Play; and
Brevo.

These providers may have their own privacy policies and terms.

IFIGO is not responsible for the independent privacy practices of third-party providers or for how a recipient handles a protected package after delivery.

23. No Advertising Use of Journal or Vault Content

IFIGO does not sell your personal information.

IFIGO does not use the content of your journals, vault items, or protected recipient packages for advertising purposes.

We do not provide journal or vault content to advertisers.

Operational information may nevertheless be processed by service providers as necessary to operate, secure, maintain, troubleshoot, or deliver the Service.

24. Data Breaches and Security Incidents

We maintain measures designed to detect, investigate, respond to, and address security incidents.

If a security incident occurs that triggers a legal obligation to notify affected individuals or a relevant authority, we will provide notifications as required by applicable law.

The nature and timing of any notification may depend on the circumstances of the incident and applicable legal requirements.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes to the Service;
changes to our data practices;
security improvements;
new features;
changes to third-party providers;
legal or regulatory requirements; or
operational changes.

The updated version will be posted through the applicable IFIGO website or app.

The “Last updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

26. Contact Us

If you have questions about this Privacy Policy, your personal information, or IFIGO’s privacy practices, contact:

Hanns Ventures Private Ltd
Registration: 200500790M
Singapore
Email: ifigoapp@gmail.com

For privacy requests, please include enough information for us to understand and verify your request.