Security and privacy
The history of your home is valuable and personal. This is how we protect it.
Updated 23 October 2026
In short
- Where your data is
- In the EU. The database and files are in Stockholm, the app runs in Stockholm and email is sent from Paris. Error reports go to Frankfurt and are stripped of personal data before they are sent.
- Who can see your data
- The members of your household, and anyone you share a link with yourself. Each household is kept apart in the database itself, not only in the app, and this is tested automatically with every change.
- Signing in
- Passwords of at least 12 characters, and passwords known from data breaches are refused. Two-step sign-in with an app, checked in the database too. Bot protection at sign-up.
- Photos and documents
- Uploaded through our server, which checks that a file is what it claims to be and removes location data from photos before they are stored.
- Backups
- The database is backed up every day, and photos and documents every night to separate storage in the EU.
- Deletion
- What you remove disappears from the app straight away and can be restored for 30 days, or 90 days with Plus. After that it is deleted for good, with its photos and documents. If you delete your account, the app first shows which households are deleted with it.
- Your data is yours
- Everything in your household, with photos and documents, can be downloaded at any time under Settings.
- Review
- Security tests were carried out several times in October 2026, most recently before the opening. The findings have been fixed or are followed up as their own tasks.
- No selling
- We do not sell your data and show no ads.
Found a security problem?
Please tell us as soon as possible and we will fix it. Email security@villalog.app