Welcome to incase. This Privacy Policy describes how In Case LLC (“incase,” “we,” “us,” or “our”) collects, uses, and protects your information on shareincase.com and the incase web and mobile applications (collectively the “Services”).
By using the Services you agree to the terms of this Privacy Policy. If you don’t agree, please do not use the Services.
incase complies with applicable state privacy laws including the California Consumer Privacy Act and similar state regulations. Privacy rights vary by state. To exercise any privacy right available to you under applicable law please contact us at [email protected].
A note before we begin
incase was built on a simple promise — your information is yours. We store it securely, we share it only with the people you choose, and we never sell it, advertise with it, or send it to third parties. We don’t use AI. Everything in this policy reflects that promise.
1. What we collect
Account information
When you create an account we collect your email address, used to log you in via passwordless email codes. We also collect the date and time your account was created.
Case content
The information you choose to enter into your Cases and Folders — doctors, contacts, documents, financial information, health information, wishes, heirlooms, and anything else you add. This is your most sensitive information and we treat it accordingly. See the Encryption section below for how we protect it.
Operational logs
Basic technical logs — which pages were accessed, when, and by which account — so we can keep the Services running and investigate problems if they occur. These logs do not include the content of your Cases.
Payment information
Your payment details are collected and processed by Stripe, our third-party payment processor. incase does not store your credit card number, expiration date, or billing details. Stripe’s privacy policy is available at stripe.com/privacy.
Cookie information
We use cookies to keep you logged in and to understand how the Services are used at an aggregate level. Our cookies do not contain your Case content and we do not combine cookie data with your Case information. You can disable cookies in your browser settings though some features of the Services may not function properly without them.
2. What we do not collect
We do not collect information about you from third parties.
We do not run advertising or analytics tools that track your behavior across other websites.
We do not use your Case content to train AI models or send it to any large language model or third-party data processor.
We do not sell your information. Ever.
3. How we use your information
We use your account information to operate and maintain your account, send you important service communications, and notify you of material changes to this policy.
We use your Case content solely to provide you the Services — storing it, displaying it to you, and sharing it with the people you have explicitly authorized.
We use operational logs to monitor service health, investigate security incidents, and improve the Services.
We use aggregate, non-identifiable information to understand how the Services are used and to improve them.
4. How we encrypt your information
The security of your Case content is our highest priority.
Sensitive fields — account numbers, identifiers, passwords, medical information, and other content you enter into your Cases — are encrypted at the application layer before they reach our database. This means even our team and our database administrators cannot read your sensitive content directly from the database.
Uploaded files — photos, scans, and PDFs — are encrypted before they are uploaded to storage. Decryption keys are held by the application, not the storage provider.
Your login is passwordless. We never store a password for your account.
No security system is perfect and we cannot guarantee absolute security. In the event of a security incident that compromises your Case content we will notify you promptly in accordance with applicable law. To report a suspected security issue please contact us at [email protected].
5. Sharing and access
People you invite
You decide who has access to your Cases and at what level — your entire Case, individual Folders, view only, or view and edit. You can change or revoke access at any time. We share your Case content only with the people you have explicitly invited and authorized.
Service providers
We work with a small number of trusted service providers — including our hosting provider and payment processor — who help us operate the Services. These providers are contractually bound to protect the confidentiality of your information and may not use it for any purpose other than providing services to incase. We do not share your Case content with service providers.
Legal requirements
We may disclose your information if required by law, subpoena, or other legal process. We will notify you before disclosing your information in response to a legal request unless we are legally prohibited from doing so or there is an urgent safety reason that prevents notification.
Business transfers
If incase is involved in a merger, acquisition, or sale of assets, you will be notified by email of any change in ownership and of your options regarding your information before any transfer occurs.
6. Your rights
You may access, correct, or request deletion of your personal information at any time by contacting us at [email protected].
California residents
If you are a California resident you have additional rights under the California Consumer Privacy Act including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. incase does not sell personal information. To exercise your California privacy rights contact us at [email protected].
Deletion
You may delete your account at any time through your account settings. Deletion starts a 7-day grace period during which your account is frozen but fully recoverable — simply log back in to cancel it. After the grace period your Case content is permanently deleted from our live systems (within 30 days of your request). Deleted content then ages out of our encrypted backups, which roll off automatically within 90 days. Operational logs may be retained for up to 90 days for security purposes and never include the contents of your Case.
If we deny a privacy request you may appeal by contacting us at [email protected] and we will respond within 60 days.
7. Data retention
We retain your Case content for as long as your account is active. If your subscription lapses, your Case is locked and scheduled for deletion; you can restore full access at any time before then by resolving payment. If you delete your account, a 7-day grace period applies (log back in to cancel); after that your Case content is permanently deleted from our live systems within 30 days, and deleted content ages out of our encrypted backups within 90 days.
8. Children
If you believe a child under 13 has provided information to incase please contact us at [email protected] and we will delete it promptly. incase only stores information for children under 13 that has been entered by a parent or guardian.
9. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes we will notify you by email and post a notice in the Services. Your continued use of the Services after notice of changes constitutes your agreement to the updated policy.
10. Contact
Questions, concerns, or requests regarding this Privacy Policy or your data:
[email protected]
In Case LLC
shareincase.com