Privacy & POPIA

How Book of Life handles your personal information under the Protection of Personal Information Act (POPIA).

What we store

Only what you choose to add: your profile (name, email, cellphone, province), the records you create in each life area, and documents you upload.

How it is protected

• Record details and uploaded files are encrypted with AES-256-GCM before being saved.
• Passwords are hashed with bcrypt and never stored in readable form.
• All traffic uses HTTPS. Sessions expire after 30 minutes of inactivity.
• Optional 2-step verification with an authenticator app.
• Accounts lock for 15 minutes after 5 wrong passwords.
• Administrators can manage accounts but cannot view the contents of your vault.

Your rights

• Access: download everything we hold about you from My profile → Export my data.
• Correction: edit any record or your profile at any time.
• Deletion: permanently delete your account and all its data from My profile.

Sharing

We never sell or share your information. The only thing that can be seen by someone else is your emergency card, and only if you switch on its link yourself.

Good practice

Please do not store PINs, passwords or full card numbers in Book of Life. Record where to find them instead.

Back