What happens to your information.

1. Who is responsible for your information?

I'll Sort It is an independently operated software service based in New Zealand. It is not a health provider, government agency, bank or professional advisory service.

For privacy questions, access or correction requests, or concerns about how information is handled, contact hello@illsortit.app.

For New Zealand users, our handling of personal information is subject to the Privacy Act 2020 where that Act applies. Depending on where you live, other privacy laws may also give you rights.

2. What information do we collect?

We collect only information needed to provide and secure the service, including:

• account details such as your email address, verification status, country/region and language preferences;
• information you choose to add about a person you support, including practical family or care-related admin;
• documents, photos, notes, voice-memo transcripts, appointments, tasks, reminders, amounts and other information you deliberately save;
• family/helper access details, roles and invitations;
• security and activity information needed to protect accounts, investigate abuse and keep an audit trail;
• subscription and billing status. Card details are handled by Stripe rather than being stored by I'll Sort It.

3. Why do we use it?

We use personal information to run the features you ask for: organising documents and life admin, creating reminders and follow-ups, enabling family/helper access, searching your own saved information, processing Smart Sort suggestions, sending account/service emails, providing subscriptions, securing the service and responding to support requests.

We do not sell personal information or uploaded document content to advertisers or data brokers.

4. Where is the data stored?

The current production service is configured on Fly.io in Sydney, Australia (region: syd). The live SQLite database and uploaded files are stored on a persistent Fly Volume attached to the application in that region.

Fly Volumes are encrypted at rest by default. In addition, uploaded document files use application-level AES-256-GCM encryption before storage. Sensitive free-text life-admin details and saved voice-memo transcripts also use application-level encryption at rest.

Because the primary hosting region is outside New Zealand, information can cross the New Zealand border. We use overseas service providers only where they are needed to operate the service and take privacy obligations for cross-border handling seriously.

5. Which outside services receive information?

We keep the provider list small. The main providers currently used to operate the live service are:

These providers may process limited information in other jurisdictions under their own infrastructure and privacy arrangements. We may also disclose information where required by law or where necessary to protect users, the service or others.

6. What does Smart Sort do with a document?

Smart Sort is designed to reduce retyping. When you give it a document, image or text, the service can extract text and suggest useful details such as a date, amount, category or next action.

You review and confirm important details before they are saved. Smart Sort is an organising tool, not medical, legal, financial or professional advice.

Your uploaded content is not made public and is not sold for advertising. Access is checked on the server against the supported person and the role of the signed-in account.

7. Family and helper access

If you invite another person, they receive their own account and the permissions attached to their role. Do not share your password. The owner/manager controls who is invited and can remove access where the app allows.

You are responsible for making sure you have an appropriate reason or authority to store and share another person's information through the service.

8. How long do we keep information?

We keep account and saved family-admin information while it is needed to provide the service or while your account remains active. You can delete individual documents and records using available controls, and you can delete your account from Settings.

When an account is deleted, we remove the active account data from the primary application systems. Limited copies may remain for a short period in encrypted infrastructure snapshots, security logs or provider systems, or where retention is required for legal, fraud-prevention or financial-record obligations. Fly.io automatically maintains volume snapshots unless that feature is disabled; those snapshots are also encrypted at rest.

9. Your privacy rights

Under New Zealand's Privacy Act 2020, individuals can request access to personal information held about them and can ask for corrections. You can also export accessible account information through the app.

Email hello@illsortit.app if you need help accessing, correcting or deleting information. We may need to verify identity and authority before releasing information, particularly where a request involves someone else's records.

If you are in New Zealand and remain concerned about a privacy issue after contacting us, you can contact the Office of the Privacy Commissioner.

10. Security

Security measures include HTTPS, secure session cookies, email verification, optional two-step verification, server-enforced per-person permissions, file-type validation, protected downloads, encrypted storage and account activity records.

No internet service can promise zero risk. Keep your own original copies of critical documents and contact us promptly if you believe an account or document has been accessed improperly.

More detail is available on the Security page.

11. Changes to this policy

We will update this page when the way the service handles information materially changes, including if the main hosting location or important service providers change. The date at the top tells you when this version was last updated.

Questions?

If something here is unclear, email hello@illsortit.app. Privacy questions should get a real answer, not a vague promise.