How your data is protected

Overview

Personal360 holds passports, IDs, bank details and medical history for a whole family. It protects them in layers, so no single mistake exposes everything. This article explains each layer in plain terms.

Before you start

• You don't need to set anything up. These protections are on for every household by default.
• The one choice you make is where files live — see Choose where files live.

Steps

Here is what happens to your data, layer by layer.

1. Encrypted field by field. Government IDs, phone numbers, account numbers, lab values and medical notes are each encrypted with AES-256-GCM before they are saved. Anyone looking at the raw database sees scrambled text, not your numbers.
2. Masked by default. Sensitive numbers show as •••• 1234 everywhere in the app. Seeing the full value is a deliberate reveal action. It needs a role that allows it, and it is written to the Activity log. See Reveal masked values.
3. Four roles, checked everywhere. Owner, Adult, Limited and Member decide who can read, edit, reveal, export and manage. The same checks apply to pages, downloads and the assistant. | Role | Read | Edit | Reveal | Export | Manage | |---|---|---|---|---|---| | Owner | Yes | Yes | Yes | Yes | Yes | | Adult | Yes | Yes | Yes | Yes | No | | Limited | Yes | Yes | No | No | No | | Member | Yes | No | No | No | No |
4. New accounts see nothing. A new account has no household access until it creates a household or is invited into one.
5. An audit trail you can read. Views, reveals, downloads, exports, changes, sign-ins and assistant questions are recorded. Open Activity in the sidebar to see them.
6. Files where you choose. Connect your own Google Drive, OneDrive or Synology NAS and Personal360 reads files in place, read-only, without keeping a second copy. Or upload into Personal360's own storage, where files are encrypted.
7. AI sees only what a task needs. The assistant receives ID and account numbers masked, never in full — but names, dates of birth, addresses, lab values and short scanned-text excerpts are sent readable. Scanning or reading a file sends that file. See What the AI can see.
8. Strong sign-in. Passwords must meet a strength policy and are stored only as a secure hash. Sessions last eight hours.

Example

Kavya, a Limited member of the Rao household, can keep her own college ID and exam records up to date. She does not see her parents' records at all, and even on her own record full ID numbers stay masked — her role cannot reveal them or export the household.

FAQs

Can Personal360 staff read my passport number?

Values are encrypted in the database and masked in the app. Master admins have owner-level access for running the service, and any reveal or export they make is recorded in the audit trail like anyone else's.

Is my data used to train AI models?

Personal360 sends an AI provider only what a specific request needs — see What the AI can see for exactly what that includes. Whether a provider retains or trains on requests is governed by that provider's terms; which providers are used is set by your administrator.

What happens to my data if I leave?

An Owner can export the household's data and delete it in full. See Export your data and Delete data.

Troubleshooting

I can't reveal a value I need

Your role may not include reveal. Ask a household Owner to change your role or reveal it for you. See Roles and permissions.

I see activity I don't recognise

Check Activity for who did it and when. If something looks wrong, change your password and contact Support. See Account security tips.

Related articles

• What the AI can see
• The Activity log
• Roles and permissions
• Reveal masked values