Who has whose data.
Every kind of thing the Hartwells keep, everyone who could see it, and why. The family owns the record. Their advisor's firm sees only what they switch on, kind by kind, and every look is written down where the family can read it.
Comes in
portfolAIosample
The companies they own a share of, and the share
$ manAIgersample
Kinds of accounts, values rounded to $1,000
The firm's custodianplanned
The same summary, from where the accounts are held
iCloud, Facebook, Google, Apple
Photos, once, when the family chooses
Library of Congress
Newspaper pages someone says are theirs
Nothing goes back to any of them.
The family's record
Owned by the family
fAImily holds it for them: never sold, and nothing trains on it today. Every item knows whose it is. The memories live here; the voice that speaks from them is swappable.
People and memories
The tree, photos, stories, recipes, journal, capsules
Calendar
Birthdays, anniversaries, gatherings
Estate record
Which documents exist, where the paper is, wishes
Asset register
What they own, values, beneficiaries, who keeps the details. Account references encrypted.
Holdings
Summaries only: never account numbers or transactions
Vault
Sealed on each owner's own device. fAImily holds no key that opens it.
Who sees what
The family
What each item was shared with them
People named for when something happens
Only what the owner's rules name, after a confirmed life event and its delay
Their advisor's firm
Only the kinds the family switches on:
PeopleEstate recordAsset registerHoldings (ranges)Life events
Never memories, the calendar, or what's in the vault. Every view and export is logged.
vacAItion
Only a trip the family hands off: the dates and how many are going
Nothing goes out on its own. Family data leaves only when a family member starts it (a question to a family voice, a newspaper search, a trip handed to vacAItion), and then only what that one thing needs.
Every look from outside the family is written down where the family can read it, and the family can change any of this at any time.
Square by square
Each kind of data, each party, and exactly what that party can see.
| Whose data | The family Members of this family circle | People named in the vault Spouse, proxy, executor, guardian, heir | Their advisor's firm Your advisor's firm, by your switches | fAImily ImaginAItion runs the service | Connected apps portfolAIo, $ manAIger, vacAItion |
|---|---|---|---|---|---|
People Names, dates, relationships | Sees itEveryone in the family circle | No— | Sees a summaryNames, relationships, who has an account | Keeps itStores it to run the service. Never sold. | Only whenA newspaper search sends the Library of Congress only the words a family member typed |
Memories Photos, stories, recipes, journal, capsules | Sees itWhoever each item was shared with | No— | NoNever offered to a firm | Keeps itStores it. Never sold; nothing trains on it today. When a family member asks a family voice something, its model gets only what that answer needs. | No— |
Calendar Birthdays, anniversaries, gatherings | Sees itThe family | No— | NoNever offered to a firm | Keeps itStores it to run the service. Never sold. | Only whenvacAItion gets only a trip you hand off: the dates and how many are going |
Estate record Which documents exist, where the paper is, whom they appoint, wishes, and the papers if attached | Sees itThe family; attached papers open for its adults only | No— | Sees a summaryWhich documents exist, when signed, where kept, and whom they appoint. Never the papers or the wishes. | Keeps itStores it. Attached papers are encrypted before they're written. Never sold. | No— |
Asset register What the family listed, values, beneficiaries, who keeps the details | Sees itThe family | No— | Sees itEvery asset listed, its value, beneficiaries, and who keeps the details. Never account numbers. | Keeps itStores it. Account references and access notes are encrypted before they're written. | No— |
Prep kit answers Decisions for the attorney, in the family's own words | Sees itThe family's adults | No— | Only whenA kit a family member sent, until they stop sharing it | Keeps itStores them, encrypted before they're written. Never sold. | No— |
Holdings Summaries from connected apps, as of a date | Sees a summaryKind, label, rounded value. Never account numbers or transactions. | No— | Sees a summaryValue ranges by kind | Sends it inReceives a summary from each app a person connected | Sends it in$ manAIger and portfolAIo send it; all they get back is who connected |
Vault Accounts, passwords, papers | SealedOnly each item's owner. Sealed on their own device. | Only whenWhat the owner's rules name, after a confirmed life event and its delay | NoNever the contents | SealedSealed. Holds no key that opens it. | No— |
Life events and rules Reports, confirmations, who gets what when | Sees itThe family | Only whenWhat opens for them, and when | Sees a summaryEach report and confirmation, and the rules | Keeps itStores it to run the service. Never sold. | No— |
People
Names, dates, relationships
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Memories
Photos, stories, recipes, journal, capsules
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Calendar
Birthdays, anniversaries, gatherings
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Estate record
Which documents exist, where the paper is, whom they appoint, wishes, and the papers if attached
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Asset register
What the family listed, values, beneficiaries, who keeps the details
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Prep kit answers
Decisions for the attorney, in the family's own words
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Holdings
Summaries from connected apps, as of a date
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Vault
Accounts, passwords, papers
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Life events and rules
Reports, confirmations, who gets what when
The family
People named in the vault
Their advisor's firm
fAImily
Connected apps
Their money, summarized
What portfolAIo and $ manAIger send in: kind, a plain label, a rounded value, as of a date. The firm sees only the ranges. This is the family's own view.
- Business interests · 2 holdings: Hartwell Properties LLC · 50%, Hartwell Millwork · 100%value not recorded
- Cash · 1 holding$64,000
- Investments · 1 holding$905,000
- Retirement · 2 holdings$1,836,000
- Education savings · 1 holding$97,000
- Property · 1 holding$2,900,000
- Debt · 1 holding$420,000 owed
From portfolAIo and $ manAIger, as of 2026-10-01. Values rounded to the nearest thousand. No account numbers, positions or transactions ever come in.
Who looked from outside the family
Every view by the firm, every summary that came in, every switch flipped.
- Oct 23, 4:56 PMTheir advisor's firmlooked at the household: in the firm view: People, Estate record, Asset register, Holdings (ranges), Life events and rules
- Oct 6, 1:39 AMTheir advisor's firmlooked at the household: in the firm view: People, Estate record, Asset register, Holdings (ranges), Life events and rules
- Oct 4, 12:39 AMTheir advisor's firmlooked at the household: in the firm view: People, Estate record, Asset register, Holdings (ranges), Life events and rules
- Oct 3, 4:51 PMTheir advisor's firmlooked at estate: the prep kit for Frank Hartwell
- Oct 3, 4:50 PMTheir advisor's firmlooked at the household: in the firm view: People, Estate record, Asset register, Holdings (ranges), Life events and rules
- Oct 3, 4:41 PMFrank Hartwellhanded off estate: sent the prep kit to their advisor's firm
- Oct 3, 3:11 PMTheir advisor's firmlooked at estate: the incapacity plan for Frank Hartwell
- Oct 3, 3:11 PMTheir advisor's firmlooked at the household: in the firm view: People, Estate record, Asset register, Holdings (ranges), Life events and rules
- Oct 1, 8:17 PM$ manAIgersent in holdings: 7 summaries as of today (sample delivery)
- Oct 1, 8:17 PMportfolAIosent in holdings: 2 summaries as of today (sample delivery)
How it's kept
Where each promise on this page lives in the system.
- family_circles.shared_with_firm + firm_access
- The family's switches for its advisor's firm: shared at all, then kind by kind. Every firm screen reads them before it shows anything.
- vault_items, vault_grants, access_rules, life_events
- Each vault item is sealed on its owner's device. A grant is that item's key wrapped for one named person; the server hands it over only when the rule is met.
- assets.account_reference, assets.access_instructions
- Encrypted (AES-256) before they're written, with a key kept outside the database. A copy of the database alone holds only ciphertext.
- holding_connections
- A person's own say-so for one app to send in a summary of their money. Nothing arrives without one.
- holding_summaries, holding_batches
- What arrived: kind, a plain label, a share for a company, a value rounded to the thousand, as of a date. Never an account number or a transaction. Every delivery is counted, including what was refused.
- data_access_log
- Every look from outside the family, every summary that came in, every switch flipped. Kept for the family and for the firm's own records.
- assets.account_owner_individual_id, holding_summaries.individual_id
- Whose it is: each row knows which person it belongs to.
Rehearse the hard day with the same family →← Back to fAImily for families