Security & privacy

The book is private property.

Every trail in it — audit, corrections, approvals, seals — exists for one relationship: you, trusting the people who help you keep it. Nothing is for authorities, regulators or anyone’s accountant. Here is what that means in practice, and what we refuse to build.

9:41▂▄▆ ◠ ▮

‹

Who can see your book

Right now

You owner

Everything · the only person who manages sharing, beneficiaries, plan

Meera Sharma co-owner

Whole book · signs with her own name

Revoke

Rashid Kamal bookkeeper

Marina Tower, Shop 4 Karama · money and papers, never worth

Revoke

Nobody else

Not support. Not a tax office. Not an AI, unless you send a document to be read. Not the people you named as beneficiaries — until the day the life check hands over, and never before.

The privacy constitution

Six sentences we hold ourselves to.

Who sees the book is decided by you alone.

Through invitations you can withdraw — a bookkeeper on chosen assets, a co-owner across the book, a viewer with eyes only. Pending is not access: nothing is visible until they accept.

No authority integrations. Ever.

No compliance reporting, no standing third-party access. Exports and the year book are tools you generate for your own use, on your own action. Our copy never implies obligation.

Nobody at Alpha Wealth reads your book.

Support can see that a book exists, who holds access, and whether a month is sealed — never an amount, a letter or a document. A test asserts it.

Documents go to AI only when you ask.

The phone reads receipts on the device, free. A page goes to a cloud model only on your explicit tap, under a no-training, no-retention agreement, in a stated data region.

No selling or sharing of your data.

Analytics minimal and anonymous. No advertising, no financial products, no “partners”. It is a book, not a bank — and not a marketplace either.

Every trail is for you.

Who changed what, when, and with whose approval — recorded so that two people can write in one book and both trust it. That is the whole reason it exists.

Under lock

Your account, harder to get into.

All of it is yours to turn on, in Settings — nothing here is imposed, and nothing here can be quietly turned off.

Two-step sign-in — an authenticator code on every new device; email or SMS if you prefer.
App lock — your face or fingerprint, a PIN behind it, an auto-lock timer.
Every signed-in device, listed — and any of them endable from your phone. Changing your password ends all the others at once.
New sign-in alerts — push and email, on by default, and one of the few things no setting can silence.
Rate limits on sign-in, codes and bookkeeper-code lookups; uploads scanned before they earn the backed seal.

9:41▂▄▆ ◠ ▮

‹

Security

Sign-in

⚿

Two-step sign-inAuthenticator app · required on new devices

☺

App lockFace ID · PIN behind it · after 1 minute

🔔

New sign-in alertsEmail and push · cannot be muted

Signed-in devices

▯

iPhone 15 ProThis phone · Dubai · now

▭

iPad AirDubai · 3 days ago

End

Alerts

New sign-in · Samsung S24 · Mumbai

Yesterday, 22:14 · not you? End it above and change your password.

Sensitive changes

Weakening a protection takes seven days.

Beneficiaries, two-step, the life check, your email: changing any of them asks for your password and a code, notifies every device and every co-owner, and then waits a week, during which anyone told can stop it with one tap. A borrowed phone cannot decide who inherits.

Support can cancel a change in flight and can never accelerate one. There is no apply, approve or shorten route — a test asserts those paths do not exist. The wait is the whole protection.

0You ask to remove a beneficiary. Everyone is told.

1Still stoppable

2Still stoppable

3Reminder to everyone

4Still stoppable

5Still stoppable

7Applies — if nobody stopped itany of them can

Changing your sign-in email is the same, with a 48-hour undo that needs no access to the old inbox — because whoever caused it may be reading it.

What we refuse to build

The list that will not grow.

Bank feeds — nothing here connects to an account, ever. Nothing here moves money.
Tax-authority or regulator integrations — the year book is yours; where it goes is your business.
Public links to documents — papers are served only through Alpha Wealth, to people with access. Viewers read; only the owner exports.
Shared logins — attribution is the product. Every person has their own account, their own name on every line.
Silent edits — after thirty minutes, every change to somebody else’s entry is a request, and every decision is in the history. Deletion is a request too; nothing vanishes.
Reading your book from support — the console shows metadata: that a book exists, who holds access, whether a month is sealed. Never a number, a letter or a file.
Selling, sharing, advertising — analytics minimal and anonymous. No partners, no products, no feeds.
Automatic AI — a document goes to a model only on your explicit tap, under a no-training, no-retention agreement, and it says so before you spend a credit.

Closing your account removes your name, email, phone, password and photograph and destroys your documents. The entries themselves stay, anonymised — because if a bookkeeper recorded them, they are that bookkeeper’s working records — but they no longer point at a person. It asks for your password and a code, and it cannot be undone. Your data export is offered first.

Legal review for India’s DPDP and the UAE’s PDPL is a launch precondition, not a footnote. Questions: support@alphawealth.app.