Trust & Privacy

Plain language about
your data

Amaanat is built for families who are careful about what they share online. Here is exactly what the product does and does not do with your information — no legal language, no buried footnotes.

What we store

Your phone number

Used only for OTP sign-in. Never shared. Never used for marketing.

Property details you enter

Address, purchase price, loan details, tenant info — whatever you choose to add. All private to your account.

Documents you upload (optional)

Stored in private Supabase storage. Only you and family members you explicitly grant access to can see them.

Hidden notes (encrypted)

Encrypted with a passkey only you set. Even if someone accessed our database, they cannot read your notes without the passkey.

What we never require

Document uploads

You can use the full product without uploading a single file. Start by marking what documents you have and where they are kept.

Aadhaar, PAN, or government ID

We never ask for identity documents. The tenant ID fields are optional and stored only for your own records.

Email address

Sign-in is phone + OTP only. No email required, ever.

Family access

Read-only by default

Family members you add can view property details and documents. They cannot edit, delete, or add anything unless you grant it explicitly.

Property-level control

You choose which properties each family member can see. A person can have access to one property and not another.

Hidden notes stay hidden

Hidden Notes are encrypted with your passkey before leaving your device. Family members cannot read them without your passkey — even if they have full property access. Amaanat cannot decrypt them either.

What we never do

Sell or share your data

Your data is never sold, rented, or shared with any third party, advertiser, or broker. Ever.

Read your hidden notes

Notes are encrypted client-side with your passkey before they reach our servers. We cannot decrypt them even if we wanted to.

Show you advertisements

There are no ads. There is no ad tracking. No analytics pixels. No retargeting.

Keep data after deletion

Deleting your account removes all your data — properties, documents, notes, family links — permanently from our servers.

How it works technically

Authentication Supabase Auth — phone OTP only
Database Supabase (PostgreSQL) with Row-Level Security — your rows are invisible to other users
File storage Supabase Storage — private buckets, signed URLs, no public access
Hidden notes encryption AES-GCM, passkey-derived, encrypted in your browser before upload
Data hosting region South Asia (ap-south-1, Mumbai)
Transport security HTTPS only, HSTS enforced, TLS 1.2+
Third-party scripts Google Fonts (type only), Tailwind CSS (styling only). No analytics, no pixels.

Questions

If you have any questions about how your data is handled, write to us directly.

amaanat.app@gmail.com

Last updated June 2026 · Amaanat is built and operated by a small independent team in India.