This app is a private, comprehensive record of everything your family owns, owes, and holds on file — bank and investment accounts, credit cards, loans, insurance policies, property, vehicles, subscriptions, identification documents, legal papers, and more. It replaces scattered spreadsheets, folders, and sticky notes with one searchable place, kept entirely on this device.

Everything is encrypted with a master password you set yourself. There is no cloud sync, no account, and no server — which also means backups (and, if you choose, a linked data file) are entirely your responsibility. See the Security & Backup section below.

Browser requirement: the app itself works in any modern browser. Two convenience features — linking a separate documents folder, and auto-syncing your data file to a location you choose — need Chrome or Edge on desktop, since they rely on a browser capability Safari and Firefox don't support (and Apple has stated no plans to add). If you're on Safari or Firefox, everything still works and is still fully encrypted — attachments are just stored inside the app's own database instead of as separate files in a folder, and you'll use manual export/import instead of auto-sync for your data file. If you want the folder/sync features, open this file in Chrome or Edge instead; both are free to install and run fine alongside Safari on a Mac.

1. The first time you open the app, you'll be asked to create a master password. This encrypts everything on this device. Write it down somewhere safe — it cannot be recovered if lost.
2. Choose your primary currency before entering data. Go to Settings & Backup → Currencies — since this app is used worldwide, your primary currency determines how every total, balance, and report is shown from that point on. It's free in every tier; a secondary currency and extra per-account currencies can be added later once licensed.
3. Then set up where your data file lives. Go to Settings & Backup → Data File Location and link a location on your device — an external drive, or a folder synced by OneDrive/Dropbox/Google Drive. Once linked, the app keeps that file updated automatically every single time you make a change, so you're never relying on remembering to back up. This is free in every tier and takes under a minute — do this before you've put in real work you'd hate to lose.
4. Also point the app at a documents folder (if licensed) in Settings → Document file storage, so scanned statements, deeds, and IDs are saved as their own encrypted files on your device instead of bloating the data file. This requires a license (see "Free version vs. licensed" below) — free-tier users can skip this for now and add it later; attachments are still fully encrypted either way, just stored inline instead.
5. If this copy of the app has your data pre-loaded from a spreadsheet, go to Settings & Backup and look for an "Import your data" section near the bottom — click its import button once to bring everything in, then review it for accuracy.
6. Otherwise, go to Family Members first and add each person in the family — this makes it easy to select account holders by name later, rather than typing them out each time.
7. Go to Accounts and click + New Account for each bank account, card, policy, property, or holding you want to track.
8. Attach supporting paperwork — statements, policy documents, deeds, IDs — either from within an account's form or directly in the Document Vault.
9. Add people worth keeping on file — agents, doctors, lawyers, accountants — in Contacts.
10. Check the Dashboard any time for your family's total assets, liabilities, and net worth, and use Reports & Printing whenever you need a PDF for your own records or to share.

This app is free to use for up to 5 accounts, with two reports included at no cost: the Net Worth Summary and the Emergency Contact & Account Sheet. Everything else in the free version works exactly the same as the licensed version — the same encryption, the same backups, the same login-credential storage.

A license key unlocks: unlimited accounts, every report (Full Detail, Open-only, Summary of Open, Summary of All, and the duplicate-account check), editing dropdown lists (categories, document types, contact roles, countries), a secondary/reference currency and extra currencies, linking a documents folder, and duplicating an account as a new record.

Don't have a key yet? Settings & Backup → License has a "Get a license at kepwell.app" button that takes you straight to the pricing page. To activate a key you already have, paste it into the same License section. If you ever remove or downgrade a license, nothing is ever hidden or deleted — every account you've already saved, even past the 5-account limit, stays fully visible and editable; the limit only stops you from adding new accounts beyond it while unlicensed.

Every purchase helps fund classroom renovations for children in low-income communities — see Settings → License for details.

Dashboard — Total Assets, Total Liabilities, and Net Worth, totaled in your primary currency (set in Settings → Currencies), with any account entered in another currency converted automatically using the rates fetched whenever you open the app (refreshable any time from the rate strip at the top, or overridden manually in Settings). If you've chosen a secondary/reference currency, its equivalent is shown alongside each total too. Below that: a breakdown by category, a breakdown by currency (your primary currency always listed first), a net worth trend line that builds up as you use the app over time, a 45-day preview of upcoming due dates, and your most recently updated accounts.

Renewals — Every expiry, monthly-due, and yearly-due date across all accounts in one sortable list, colour-coded by urgency, with a window filter (30 days / 90 days / 12 months / everything) and a Download calendar (.ics) button so renewal dates land on your phone or desktop calendar.

Accounts — The master log, one record per account, card, policy, property, or holding. Use the search box, category/status filters, and the family member filter above the table to narrow things down — the family member filter matches an account if that person is listed as a holder or named in the beneficiary field, so picking someone shows everything tied to them either way. Or use the Go to account dropdown just below the toolbar — it lists every account sorted by Category, showing Category, Institution, and Description together on one line, so you can jump straight to the one you want. Inside each account's form, the ◄◄ First, ◄ Previous, Next ►, and Last ►► buttons let you page through your accounts without closing the form each time. Each account also carries its own currency (from the list you've configured in Settings → Currencies), a beneficiary field for who inherits it, and a read-only change history log that records what changed and when. When you have several accounts at the same institution, open any existing one and click ⧉ Duplicate as new record — it opens a fresh New Account form with every field already filled in from the one you copied (except attached documents), so you only need to change what's actually different, like the account number or balance, before saving.

Login credentials — every account has its own encrypted Username / login ID, Password, and Password hint fields, right in the account form — free in every tier, not a paid feature. The password field stays masked by default; click Show to reveal it. For safety, a revealed password re-masks itself automatically after a short pause, and immediately if you switch to another window or tab. Click Generate strong password for a 24-character random password (built with the browser's cryptographic random number generator, not a weak one), then Copy to put it on your clipboard without ever having to read or retype it. The Password hint field is for a clue to help you remember it — not the password itself — so don't put the actual password there.

A quick way to add several similar accounts: create the first one in full, then duplicate it for each additional one, updating only the fields that differ each time — much faster than typing the institution's address, phone, and other shared details from scratch every time.

Document Vault — Every file you've attached, in one searchable list, filterable by document type and by the same family member (holder/beneficiary) filter described above. Attach files either from here or directly inside an account's form — both places show the same underlying documents. When attaching from an account's form, each file gets its own Document Type dropdown right there in the list, so you tag it as you go instead of leaving it as "Other." If you have a backlog of documents still tagged "Other" — for example after bringing in 500+ legacy documents from an older version — click Bulk re-tag documents for a fast list view: pick a real type for each one, then save all your changes at once. Every document must be linked to an account (there's no "unlinked" option) — this is what makes the family member filter work, and what ties each stored file to a specific account's Serial Number (see Document security below). ⚠️ A scanned copy is not a legal substitute for the original. Wills, property deeds, titles, and IDs in particular are often only accepted as originals for legal, government, or financial purposes — keep your paper documents safe even after attaching a scan here.

Family Members — Each person's details: date of birth, blood group, passport/national ID numbers, emergency contact, and notes. Names entered here are what populate the Account Holder dropdown when adding or editing an account.

Contacts — Agents, brokers, doctors, lawyers, accountants, and anyone else the family might need to reach.

Reports & Printing — One-click reports for full detail, summaries, an emergency contact sheet for a spouse or executor, and a duplicate-account check (see below).

Settings & Backup — Personalize the archive's name, choose your primary/secondary/available currencies, change your master password, edit exchange rates, edit any dropdown list, choose where your data file and documents folder live, export or restore an encrypted backup, or erase everything.

Global search — The search box at the top of every page searches accounts, documents, contacts, and family members at once; click a result to jump straight to it.

Multi-currency — Set up your currencies in Settings → Currencies: a primary currency (what all totals are shown in — free to change in every tier), an optional secondary currency (shown for reference alongside primary on the Dashboard and in the Net Worth Summary report — leave it as "None" if you don't want this) and a list of "Your currencies" available on the Account form. Setting a secondary currency and adding extra currencies both require a license (see "Free version vs. licensed" above); removing a currency you're no longer using stays free. Give any account a currency from that list and its balances still roll up correctly into your primary-currency totals on the Dashboard and in Reports, using exchange rates fetched live whenever you open the app (refreshable any time, or overridden manually in Settings). Important: any currency you use — including your secondary currency — needs to actually be in "Your currencies" to get a real exchange rate; the app now adds your secondary currency to that list automatically when you set it, but if a currency you're using shows a rate of exactly 1.00 or is missing from the rate strip, add it to "Your currencies" and click "Refresh now."

Estate planning — Use the Beneficiary field on each account to note who should inherit it, then generate the Emergency contact & account sheet from Reports for a one-page summary a spouse or executor can use without wading through closed accounts.

Each report opens a print-ready page in a new browser window/tab. Use your browser's print dialog and choose Save as PDF as the destination to get a PDF file, or print directly. All reports are grouped by Category, alphabetically, and end with a Summary Totals page.

• All Records — Full Detail (licensed): every field captured, one full page per record, including login credentials where saved.
• Open Records — Full Detail (licensed): same, limited to accounts currently marked Open.
• Summary of Open Records (licensed): one line per open account, with subtotals.
• Net Worth Records Only (free in every tier): only accounts marked "applicable to net worth," one line per record.
• Summary of All Records (licensed): one line per record, every status.
• Emergency Contact & Account Sheet (free in every tier): one page per open account marked "Include in Emergency Report" — institution phone, holders, beneficiary, and login credentials where saved. Check that box on any account's form to add it here; an optional message and its intended recipient (set in Settings & Backup) print at the very top, above the account list.
• Check for duplicate accounts (licensed): scans every record for likely duplicates by institution + account number, or institution + description.

Every printed report shows who it's licensed to (or that it's the free version) in the header, a faint repeating watermark across each page, and again in the footer — this carries through to PDFs made from these reports too.

If nothing happens when you click a report button, your browser likely blocked the pop-up — allow pop-ups for this app and try again.

Every category dropdown — Account Categories, Document Types, Contact Roles, and Countries — can be extended. This requires a license (see "Free version vs. licensed" above); the dropdowns themselves are always usable in the free version, only adding or removing entries is gated. Go to Settings & Backup → Dropdown Lists. For Account Categories, first pick the group (e.g. "Banking," "Insurance") from the dropdown, then add or remove categories within it, or create an entirely new group. The Country field (in an account's address section) comes preloaded with every country in the world — use the search box in Settings to quickly find one to remove, or add a custom entry of your own. Changes apply immediately across the app.

By default, every file you attach is stored as text inside the app's own database — simple, but it makes your data file balloon in size as you add documents. In Settings → Document file storage, you can link a real folder on your computer instead; every attachment is then saved there as its own file, and your data file stays small. Linking a new folder requires a license (see "Free version vs. licensed" above) — if a folder was already linked before a license was removed, it keeps working for reading and managing existing files; only linking a brand-new folder needs a license. This also requires Chrome or Edge on desktop — see "Browser requirement" above. On Safari or Firefox, the linking option won't be available, but attachments are still fully encrypted inside the app's database, so nothing about security is lost — you just don't get separate files in a folder.

Encryption: files saved to a linked folder are encrypted with the same master password that protects everything else in the app — the files on disk are unreadable without it, even if someone opens that folder directly outside the app. Nothing extra to set up; it's automatic.

Naming convention: each file is named starting with the account's Serial Number (the same #ID shown throughout the app), e.g. doc_acct47_112_statement.pdf.enc — so a glance at the folder shows which account a file belongs to. The number after it is the document's own internal ID, there only to keep filenames unique when an account has more than one attachment.

Moving existing attachments into a linked folder: once a folder is linked, a "Move existing attachments into this folder" button appears — it encrypts and moves anything still stored inline inside the app's database out to the folder.

Upgrading documents from an older version of this app: if you're bringing in a documents folder from an earlier version, those files are likely still unencrypted on disk under an older naming pattern. Link that folder, then either click "Upgrade documents from an older version" in Settings to process everything in one pass with a progress indicator, or simply open documents normally — the app now detects an old-format file automatically the first time you open it, upgrades it in place, and opens it, with a small notice that it was upgraded. Either way, the original old files are never deleted or modified; only new, encrypted copies are added alongside them.

⚠ Warning — attaching a file the moment it lands in a cloud-synced folder can attach an incomplete copy. If a document is sitting in a OneDrive, Google Drive, or Dropbox folder, that service may show it as fully present in the file list before its actual content has finished downloading to your device. Attaching it to Kepwell in that exact window can save an incomplete file — the attachment will still show up normally and often still opens for a while, but the underlying file may not be genuinely intact. Before attaching anything you just saved into a cloud-synced folder, open it directly first (double-click it, let it fully load) — that forces the cloud service to finish downloading it — before switching to Kepwell to attach it.

Checking your documents for this: click "Verify all documents…" in Settings at any time to have the app actually decrypt and check every attached document, confirming each one's content genuinely looks like a valid file of its type — not just that a file with the right name exists. This is read-only and changes nothing. It also automatically distinguishes real damage from a few things that only *look* alarming but aren't — for example, a file encrypted twice by mistake, or one that's simply mislabeled as the wrong file type — and shows those in green with an explanation, separate from the ones that genuinely need re-attaching. If anything is flagged, an "Export this list (CSV)" button lets you save the whole list as a spreadsheet, so you can work through it at your own pace instead of depending on the app's live session each time. Worth running this once after attaching a large batch of documents, and occasionally afterward as a check-up.

Cleaning up files nothing points to anymore: removing a document from an account only removes the link to it — the underlying encrypted file stays in the folder on disk, on purpose, so that everyday action never risks losing something by accident. Over time this can leave old, disconnected files quietly taking up space. Click "Clean up unconnected files…" in Settings to scan for exactly those files. Nothing is touched automatically: the full list is shown first, with file sizes, and only the files you explicitly confirm are deleted.

Before and after attaching any document, the account form now shows a caution reminder with four steps worth actually following, especially for anything important: open the source file first to confirm it's genuinely readable, attach it and save, then reopen the account and open the attached copy from inside the app to confirm that works too, before closing the form. It takes a few extra seconds and catches problems immediately, rather than months or years later when the document is actually needed.

If some documents can't be found under their recorded filename: this can happen if files were consolidated from more than one old folder, or renamed along the way (cloud-sync tools sometimes do this on conflicts). When "Upgrade documents from an older version" reports documents it "could not find," a reconciliation report appears right below the button: it scans your folder for files that don't belong to any record yet, and matches them back to the missing documents by comparing original filenames. Each suggestion needs your confirmation before anything changes — click "Use this file" for a single suggested match, or, when there's more than one document with exactly one likely match, click "Apply all N single matches" to confirm them all in one batch. Anything with several possible matches gets a dropdown to choose from by hand, and anything with no match at all is reported plainly so you know to look for it elsewhere rather than assume it's fixable here. Nothing is ever auto-applied without a click — this is deliberate, since misattaching the wrong file to the wrong record would be worse than leaving it unresolved.

• Your data is encrypted on this device with AES-256, using a key derived from your master password. There is no password recovery. If you forget it, the data cannot be unlocked by anyone. Your password needs to be at least 15 characters — a string of 4–5 random words (e.g. "correct horse battery staple") is easier to remember and just as secure as a shorter password stuffed with symbols, since length matters far more than character variety. You can click "Show" next to any password field to check what you've typed before submitting it.
• By default, data lives only in this browser's internal storage, tied to this device. It does not sync anywhere on its own.
• Use Settings → Export full backup regularly, and store the file on a cloud drive or external disk. Backups are encrypted too, so they're safe to store off this device — but you'll need the master password that was active when you made that specific backup to restore it.
• Beyond manual backups, the app also keeps its own safety net automatically: Settings → Automatic backups & recovery shows up to 15 encrypted snapshots, taken every time you unlock the archive and right before anything risky — erasing all data, importing a backup, changing your master password, or syncing to a linked file. Each one can be restored (replacing current data with that snapshot) or downloaded, and restoring always snapshots your current state first, so even a restore is itself undoable.
• Settings → Danger zone has two erase options: Erase all data clears your accounts, documents, members, and contacts, but keeps a safety-net snapshot taken right before, so it's recoverable. Erase everything, including backups goes further and also permanently deletes all 15 automatic snapshots — there is genuinely nothing left to recover afterward on this device. Because of that, it asks for your master password to confirm (not just a click-through dialog), so it can't be triggered by someone who merely has access to an already-unlocked session. Use it only when you actually mean it, such as before discarding or selling a device.
• If you'd rather your data live in a real file you control — on an external drive, or a folder synced by OneDrive/Dropbox/Google Drive — use Settings → Data File Location to link one. Once linked, the app keeps that file updated automatically every time you make a change, and you can load it again from a different computer later. Full step-by-step instructions are printed right in that section. This feature needs Chrome or Edge on desktop.
• Use 🔒 Lock now (bottom of the sidebar) whenever you step away from your computer — it re-locks the app without closing it.
• Login passwords stored on individual accounts follow the same "don't leave it on screen" principle: a revealed password re-hides itself automatically after a short pause, and immediately if you switch to another window or tab — but locking the whole app with 🔒 Lock now is still the more thorough option when stepping away for longer.
• This file (the app itself) contains no data — your information lives in the browser's storage, or in your linked data file, separately. Copying this HTML file to another computer gives you the app, not your data; use an exported backup or a linked data file to move your data across devices.

Kepwell Family Archive ("the App") is made available by Kepwell LLC, a limited liability company registered in Texas ("Kepwell," "we," "us"). By purchasing or using the App, you ("you," "the user") agree to these terms.

Purchases are processed by Paddle.com Market Ltd ("Paddle"), who acts as the Merchant of Record and authorized reseller for this product. Your purchase transaction — payment, receipt, applicable tax — is between you and Paddle. These Terms govern your use of the software itself.

The App is a single-file, offline software application for organizing personal and family financial records, documents, and account information. It runs entirely on your own device and does not require an internet connection to use, aside from an optional, anonymous currency exchange-rate lookup (see the Privacy Policy for details).

Free version: usable indefinitely at no cost, limited to 5 accounts and 2 of the built-in reports.

Licensed version: a one-time purchase that unlocks unlimited accounts, every report, multi-currency support, linked document folder storage, and related features, for as long as you use the App. There is no subscription and no recurring charge.

Upon purchase, Kepwell grants you a non-exclusive, non-transferable license to use the App for your own personal and household record-keeping. Specifically, you may:

• Install and use the App on any devices you personally own or control
• Make backup copies for your own use

You may not:

• Share, resell, sublicense, or redistribute your license key to any other person or household
• Use the App to provide record-keeping services to third parties for commercial gain
• Reverse-engineer, decompile, or modify the App's license-verification mechanism
• Remove or alter the attribution shown in the App or in printed reports

Kepwell retains all ownership and intellectual property rights in the App. You are licensed to use it; you do not own the underlying software.

We offer a 14-day, no-questions-asked money-back guarantee from the date of purchase. To request a refund, contact support@kepwell.app with your order details, or use Paddle's own refund process from your purchase receipt. Refunds are processed by Paddle in accordance with their standard refund handling.

The App encrypts your data using a master password that only you know and that we never receive, store, or have any way to see. This means:

• We cannot recover your data if you lose your master password. There is no "forgot password" option, by design — it's what makes the encryption meaningful.
• All your account information, documents, and login credentials live only on your own device (and anywhere you've chosen to link or back it up), never on our servers, because we don't operate any servers that touch your data at all.
• You are responsible for backing up your own data using the tools built into the App (linked file location, automatic backups, manual export).

Kepwell is not liable for any loss of data resulting from a lost master password, device failure, accidental deletion, or any other cause. The App includes automatic backup and recovery features specifically to help you avoid this, and we strongly encourage you to use them.

The App lets you attach scanned copies of documents for your own convenience and record-keeping. A scan or photograph stored in the App is not a legal substitute for the original paper document. Wills, property deeds, titles, government-issued IDs, and similar documents are frequently required in their original physical form for legal, governmental, or financial purposes. You are responsible for retaining your own original documents; Kepwell is not liable for any consequence of relying on a copy stored in the App in place of an original.

The App is provided "as is," without warranty of any kind, express or implied, including but not limited to fitness for a particular purpose. While the App uses industry-standard AES-256 encryption, we do not claim or warrant that it is immune to all possible security threats, and you use it at your own risk.

To the maximum extent permitted by law, Kepwell's total liability to you for any claim arising from your use of the App is limited to the amount you paid for your license. We are not liable for indirect, incidental, or consequential damages, including loss of data or loss of access to accounts referenced within the App.

A portion of proceeds from licensed purchases supports school renovation projects in low-income communities, as described on our product page. This is a voluntary charitable use of a portion of business proceeds by Kepwell — it does not make Kepwell a charity, and purchases are not tax-deductible donations.

We may revoke a license found to be in violation of Section 3 (for example, redistributed or shared license keys). Termination does not affect data already stored locally on your own device, which remains yours and accessible via your master password regardless of license status.

These terms are governed by the laws of the State of Texas, United States, without regard to conflict-of-law principles, consistent with Kepwell LLC's registration in Texas.

We may update these terms from time to time. Material changes will be reflected by an updated "Last updated" date above. Continued use of the App after changes constitutes acceptance.

Questions about these terms: support@kepwell.app

Kepwell Family Archive runs entirely on your own device. We don't operate a server that your data ever touches, we don't have accounts or logins, and we have no way to see, collect, or access anything you enter into the App. There is exactly one automated network request the App makes, described in full below, and it contains no personal information whatsoever.

If you take nothing else from this page: your financial records, documents, and passwords never leave your device unless you personally choose to put them somewhere (a linked folder, a cloud-synced drive, an exported backup file you save yourself).

None. Kepwell (the company) does not collect, receive, store, or have access to any data you enter into the App — not your accounts, not your documents, not your login credentials, not your master password, nothing. All of it is encrypted with AES-256 using a master password that only you know, and stored locally in your browser's own storage on your device.

When you have an internet connection, the App automatically looks up current currency exchange rates (if you use more than one currency) by contacting open.er-api.com. This request includes only a currency code (e.g., "USD") — no account information, no personal data, and nothing that identifies you or your device. If you're offline, this simply doesn't happen and the App uses the last rate it fetched.

No other network requests are made by the App itself. There is no analytics tracking, no telemetry, no crash reporting, and no "phone home" of any kind.

• On your device, inside your browser's local storage, encrypted with your master password.
• Anywhere you choose to put it, if you use the App's optional features to link a backup file location or a documents folder to a location you control (an external drive, a folder synced by a cloud service like Dropbox or Google Drive, etc.). Those are your choices and your accounts with those services — Kepwell has no visibility into them.
• In any backup file you export yourself. These are encrypted, and can be stored wherever you like.

Your purchase is processed by Paddle.com Market Ltd, who acts as the Merchant of Record for this product. Paddle collects the personal and payment information necessary to process your order (name, email, payment details, and country for tax purposes) under its own privacy policy, available at paddle.com/legal/privacy. Kepwell receives only what's needed to know a valid purchase was made — we do not receive your payment card details, and we do not build a customer database beyond what's needed to support license activation issues if you contact us.

The App itself is a local file and sets no cookies. If you visit our product/landing page before purchasing, that page may use only what's necessary for basic functioning — no advertising trackers or third-party analytics are used on it as of this writing.

The App is intended for use by adults managing household and family records. It is not directed at children, and we do not knowingly collect information from children — nor could we, since we don't collect information from anyone.

Because Kepwell does not hold any of your personal data, there is generally nothing for us to provide, correct, or delete on request — your data lives under your own control on your own device. For questions about data Paddle holds related to your purchase (receipts, payment details), contact Paddle directly or via preferences.paddle.com.

If this policy changes, we'll update the "Last updated" date above. Since the App itself doesn't check in with us, we'd recommend checking this page occasionally if you want to stay current.

Questions about this policy: support@kepwell.app

Checking license status…

The free version stores up to 5 accounts and includes the Net Worth Summary and Emergency Contact Sheet reports. A license key unlocks unlimited accounts, every report, multi-currency, linked document folders, and duplicate-as-new-record — and never removes or hides any account you've already saved, even past the free limit.

Every purchase helps fund classroom renovations for children in low-income communities — see our past project. Know someone who'd find this useful? Recommend it

This message appears at the very top of the Emergency Contact & Account Sheet, above the list of accounts you've marked for emergency use — a place to leave instructions for whoever needs this someday.

Optional — pick a family member or contact so it's clear who should read this first.

Your archive is encrypted on this device with this password. It's never stored anywhere and there's no way to recover it if it's lost — choose something you'll remember.

New password needs to be at least 15 characters. A string of 4–5 random words is easier to remember and just as strong as a short password stuffed with symbols.

Choose your primary currency (the one totals are shown in) and, optionally, a secondary currency shown for reference alongside it. Add any currency you use to the list below to make it available on the Account form.

Your currencies PRO to add more

By default, your data lives inside this browser's internal storage, tied to this device and browser profile. If you'd rather keep the actual data file somewhere you control — an external drive, a specific folder, or a folder synced by OneDrive/Dropbox/Google Drive — you can link one here. Once linked, this app keeps that file updated automatically every time you make a change.

How to change the data file's location:

1. Click Choose a location & start linking… above.
2. In the picker that opens, navigate to wherever you want the file to live — for example a folder inside OneDrive, Dropbox, Google Drive (the local synced folder), or an external/USB drive — and give the file a name (it will save as a .json file).
3. Your current data is written to that file immediately, and the status box above will confirm it's linked. From then on, every time you save, edit, or delete something in this app, that file is updated automatically.
4. To move the data file later, just move/copy the actual file to its new location using Windows Explorer or Finder as normal, then come back here and click Choose a location & start linking… again, pointing at the file in its new spot.
5. To use this app on a different computer with the data already in that file, install the app there, then click Load from an existing data file… and select the file (it can be on a synced cloud folder, a USB drive, or a network location). You'll need your master password to unlock it.
6. Your browser may occasionally ask you to reconfirm permission to access the linked file — this is a normal browser security check, just click Allow.

⚠ Switching to a new browser or computer for the first time? The very first time you set up a master password on a new browser, device, or profile, a fresh, unique encryption key is generated behind the scenes — even if you type the exact same password as before. If you then use Load from an existing data file… to bring in your existing data, the app correctly adopts that file's own original key once your password is confirmed, so everything — including any documents in a linked folder — stays consistently readable. This applies the same way to restoring an automatic backup and importing a downloaded backup file; all three paths are handled identically for this.

This is the fix for the JSON file getting huge. By default, every PDF/photo you attach to a record is stored as text inside this app's database and inside your linked data file / exported backups — which is why that file can balloon toward hundreds of MB or more as you add documents. Link a folder here instead, and every attachment is saved as its own file inside that folder, encrypted with your master password — the files on disk are unreadable without it, even if someone opens that folder directly. Your data file then stays as small, fast-loading metadata that just points to those files.

If you're linking a documents folder from an older version of this app, those files are likely still unencrypted on disk. Use "Upgrade documents from an older version" to check for and encrypt them under this version's format — the original files are left untouched as a safety net.

Checks that every attached document actually decrypts to a valid, readable file — not just that it's present. This catches documents that were incomplete or corrupted at the moment they were originally attached (for example, from a cloud-sync file that hadn't finished downloading yet). It reads your master password already unlocked for this session; nothing is sent anywhere.

Removing a document from an account only removes the link to it — the encrypted file stays in the folder on disk. Over time this can leave behind files nothing points to anymore. This scans for exactly those unconnected files and shows you the full list before deleting anything; nothing is removed without your explicit confirmation.

Recommended one-time setup:

1. Click Link a documents folder… and choose (or create) a folder — e.g. a "Family Archive Documents" folder on your drive or a synced cloud folder. This is separate from the JSON data file's location, though they can sit next to each other.
2. Click Move existing attachments into this folder. This copies every PDF/image you've already attached out of the internal database and into that folder as individual files, then shrinks the corresponding database records to just a filename reference. This can take a few minutes if you have a lot of large files — leave the tab open until it says "Done."
3. Go to Settings → Data file location and click Sync now (or save any record) — your linked JSON file will now be written again, dramatically smaller since it no longer carries the file bytes.
4. Going forward, every new document you attach is written straight into this folder automatically. If you use the app on another computer, link the exact same folder there too (e.g. via the same cloud-synced path) so it can find the files referenced in your data.

The app automatically saves an encrypted snapshot each time you open it, and again right before any risky operation (erasing all data, importing a backup, changing your master password, or syncing to a linked file). If something ever goes wrong, restore one of these snapshots below -- restoring replaces your current accounts, documents, members, and contacts with that snapshot's contents, and it will ask for the master password that was active at the time, same as a manual backup. This list keeps the most recent 15 snapshots automatically.

Your data is encrypted on this device with your master password, and exported backups are encrypted too — safe to store on a cloud drive or external disk. You'll need the master password that was active at export time to restore a backup. Export a backup after every update session.

Permanently erase every account, document, member, and contact from this browser. This cannot be undone — export a backup first. A safety-net snapshot is still taken automatically right before this runs, recoverable under Automatic backups & recovery below.

Erase everything, including automatic backups. This does everything the button above does, and also permanently deletes all automatic backup snapshots under Automatic backups & recovery below. There is no safety net after this — nothing on this device can be restored afterward, unless you have a manual export saved elsewhere. Use this only when you're certain, for example before discarding, wiping, or selling this device.