Security and privacy

The history of your home is valuable and personal. This is how we protect it.

Updated 23 October 2026

In short

Where your data is
In the EU. The database and files are in Stockholm, the app runs in Stockholm and email is sent from Paris. Error reports go to Frankfurt and are stripped of personal data before they are sent.
Who can see your data
The members of your household, and anyone you share a link with yourself. Each household is kept apart in the database itself, not only in the app, and this is tested automatically with every change.
Signing in
Passwords of at least 12 characters, and passwords known from data breaches are refused. Two-step sign-in with an app, checked in the database too. Bot protection at sign-up.
Photos and documents
Uploaded through our server, which checks that a file is what it claims to be and removes location data from photos before they are stored.
Backups
The database is backed up every day, and photos and documents every night to separate storage in the EU.
Deletion
What you remove disappears from the app straight away and can be restored for 30 days, or 90 days with Plus. After that it is deleted for good, with its photos and documents. If you delete your account, the app first shows which households are deleted with it.
Your data is yours
Everything in your household, with photos and documents, can be downloaded at any time under Settings.
Review
Security tests were carried out several times in October 2026, most recently before the opening. The findings have been fixed or are followed up as their own tasks.
No selling
We do not sell your data and show no ads.

Found a security problem?

Please tell us as soon as possible and we will fix it. Email security@villalog.app