Family Vault

The documents a family needs most are the ones that are never where they are needed: a parent asks for your Aadhaar while you are on a flight, and the answer is a photo in a chat thread. The convenient fix (a shared drive, a gallery album, a cloud locker) leaves the most sensitive identity documents a family owns sitting in plaintext on somebody else’s server.

Make the backend untrusted by design. Every field and file is encrypted on the device with AES-256-GCM before upload, under a key hierarchy that runs from a BIP39 recovery phrase through Argon2id to an X25519 identity keypair, a per-family group key, and a per-document key. Sharing re-wraps only that document key for the recipient, so access is granted and revoked without re-encrypting anything, and row-level security enforces the same boundary in the database and in storage. On-device OCR reads a card without the image ever leaving unencrypted, and a biometric app-lock re-arms every time the app is backgrounded.

A wallet a family can genuinely rely on: documents available to every trusted member from any device, recoverable on a new phone from twelve words, and unreadable by the operators, the database, or anyone who breaches either. In development. The crypto core, family sharing, recovery and store readiness are done; full document sync and launch are the remaining work.