How your information is protected
What you keep in Rundown is personal. Here's exactly what Rundown does with it, in plain words.
Everything is encrypted
Every name, note, document and date is encrypted before it's saved. Files are encrypted before they're uploaded, and open only for signed-in members of your household.
Your household is walled off
The database itself keeps each household's information apart — not just the app on top of it.
A key for each household
Each household's information is locked with its own key, held in a separate key service (AWS KMS) rather than beside the database. One household's key opens nothing of anyone else's.
Each piece bound to its household
Every encrypted value is sealed to its own household, so one that somehow ended up in the wrong place would fail to open rather than show.
A copy of the database isn't enough
Someone with the database and its backups, but not the key service, still has nothing readable.
Face ID guards the sensitive things
Full ID numbers, where originals are kept, and everything about a document marked Private need Face ID (or your password), for five minutes at a time.
You decide what AI sees
Documents marked Private or Keep away from AI are never sent to it. Everything AI proposes waits for your approval before it's saved.
AI that doesn't learn from you
Rundown reads documents with Anthropic's Claude through its business service, which doesn't use what's sent to it to train its models.
Nobody browses your life
The people running Rundown see counts, like “3 uploads this week”, and who signs in to your household so they can help you get in — never what's in your records.
Leaving is real
You can export everything, and delete your household. Deleting waits 30 days in case you change your mind; then its key is destroyed, and a month after that nothing left behind, backups included, can ever be read again.
What we say honestly
Rundown isn't end-to-end encrypted. Rundown's servers can unlock your household's key, which is what lets search look inside your documents and lets Rundown read a flyer for you. It's a trade we made on purpose, and we'd rather you knew.