These Terms govern your access to and use of finilog and help ensure a secure and reliable experience for all users.
Use finilog responsibly and only for lawful purposes.
Keep your vault password and credentials secure — if you lose them, we cannot recover them for you.
We aim to operate finilog in a fair, transparent, and reliable way.
These Terms of Service ("Terms") govern use of the finilog website and application (the "Service"). The contracting party is the person named in the imprint. By registering an account or otherwise using the Service, you agree to these Terms. Any conflicting terms proposed by you do not apply unless we expressly agree to them in writing.
finilog is an encrypted digital vault for documenting credentials, documents, crypto information, and personal messages, and a tool to prepare your digital legacy. A core part of the Service is a mechanism you configure yourself ("check-in", see Section 7) that, after sustained inactivity on your account, unlocks technical access to the still-encrypted content you previously assigned to designated recipients ("legacy contacts"). You can organise your content into folders and decide, for each folder, which person it should reach when the time comes. A person may also be designated as a message-only recipient: they then receive solely the personal message stored for them, with no access to vault entries. For people who cannot or would rather not create an account, you can generate a printed access code (a "paper kit"). It only takes effect once the legacy case has been established, and it replaces the sign-in route rather than the account. You hand it to the intended person yourself; we do not transmit it. finilog is purely a technical data-distribution service. The exact feature set, included storage, and number of possible legacy contacts depend on your chosen plan; details are available on our pricing page.
finilog is not a law firm, notary, financial institution, tax advisory, or any official or judicial body. We do not provide legal, financial, or tax advice; content on our platform, including any planning templates or informational pages, does not replace individual legal advice or notarization where legally required. In particular, finilog is not, and does not replace, an official certificate of inheritance, a probate court, or any other legally regulated handover process. We act solely as a technical data-distribution service: at no point do we verify, determine, or confirm who is actually entitled to inherit under applicable inheritance law. Access is unlocked only for whoever you, as the account holder, previously assigned to a given entry — regardless of whether that person is also substantively entitled to it under the law applicable to you. Resolving questions of inheritance law remains solely the responsibility of the parties involved and, where relevant, the competent courts, notaries, or lawyers.
Use of finilog requires registering an account and having unlimited legal capacity; the Service is not directed at minors. The contract for use of your chosen plan is concluded upon confirmation of your registration, or upon completion of the respective order process. You must provide accurate information when registering and keep it up to date. You may create the account either with an email address and password or by signing in through an external sign-in provider (currently Google and Apple). If you use such a provider, it transmits to us the information required to create the account, as a rule your email address and an identifier; we receive no password and no access to your account with that provider. The provider's own terms and privacy notices apply in addition. The sign-in provider concerns access to your account only. It has no bearing on your vault password and therefore none on the decryption of your content; Section 6 continues to apply unchanged. If the external provider fails or you lose access to it, you can set your own account password for the same email address via the forgotten-password function.
You are responsible for the confidentiality of your credentials (account password, second factors, passkeys) and for all activity that occurs under your account. If you suspect unauthorized access to your account, you must notify us without undue delay and change your password.
The content of your vault is encrypted exclusively on your own device with a key derived from your vault password (see our Privacy Policy and security pages). Your vault password is never transmitted to us and is not known to us. This necessarily means: We cannot reset, view, or recover your vault password. If you lose it and none of the recovery paths you set up (recovery kit, passkey) are available, the affected vault content is unrecoverably lost. We accept no liability for this. The security and choice of your vault password are entirely your responsibility. We accept no liability for damages arising from third parties decrypting your vault content because you chose a weak vault password, one already compromised elsewhere, or reused it, or because you shared it with a third party or stored it insecurely. We have no technical influence over the choice, use, or storage of your vault password outside our systems.
After registering, you can choose a check-in interval (currently 14, 30, 60, or 90 days; default 30 days) within which you must confirm activity with finilog ("check-in"). If no confirmation is received, our system automatically sends a series of reminder emails. If you still do not respond, the system notifies your designated legacy contacts and asks them to briefly confirm whether everything is fine with you. If neither you nor your legacy contacts respond, or a legacy contact explicitly confirms that you have passed away, a final, also configurable waiting period (12 to 72 hours, default 24 hours) starts, and you are sent a "last chance" email containing a cancellation link. If you do not respond to this, the system unlocks technical access for the respective assigned legacy contacts to the still-encrypted entries designated for them. This entire process is fully automated. At no point do we verify your actual death, for example via a death certificate; the only determining factors are deadlines and the response of the people you yourself designated. You can fully reset the process at any time — even after it has been triggered — via the cancellation link or directly in your account, as long as you still have access to your account or your email.
The reliability of the mechanism described in Section 7 depends directly on you choosing a check-in interval suited to your circumstances, keeping your email address and your legacy contacts' contact details current, and being able to respond to our emails regularly. We accept no liability for consequences arising from an unsuitable check-in interval, outdated or incorrect contact details, reminder emails not being delivered (e.g. due to spam filters), or your failure to adjust your settings ahead of a foreseeable absence (e.g. travel without email access). You can undo a release to legacy contacts that was triggered by such a misconfiguration at any time while you are still alive and have access to your account.
finilog may not be used for illegal activities, unauthorized access attempts, abuse of the platform, or any activity that could compromise the security or availability of the Service. In particular, you may not use the Service to store content whose possession or distribution is unlawful. Abuse also includes systematically obtaining paid features without paying for them. This covers in particular filling a paid storage allowance and then stopping payment, as well as repeatedly paying for single billing periods in order to make use of the periods provided for in Section 14 in between. What matters is a recognizable pattern, not a single failed collection: an expired card, a changed bank account or an overlooked invoice is not abuse, and we do not treat it as such.
Current prices, billing cycles, and the features included in each plan are shown on our pricing page and displayed to you transparently before you conclude a contract. Paid plans can be billed either monthly or annually; annual billing is cheaper. Paid extra storage is offered on an annual or one-off basis only, not monthly. In addition there is the one-off payment model described in Section 12. All amounts shown are final prices. As a small business within the meaning of section 19(1) of the German VAT Act (§ 19 Abs. 1 UStG) we do not charge VAT and therefore do not show any. Should this status cease to apply in future, we will notify you in advance, the amounts will then be adjusted where necessary and will be understood to include applicable statutory VAT. Payments are processed by an external, specialized payment provider; we do not ourselves store full payment card data. Price changes for existing, already-running contracts are announced to you in advance and do not apply retroactively. If a payment fails, we withhold part of our performance: creating new entries, changing existing ones and uploading files are then blocked. Content you have already stored remains readable, and the check-in monitoring including the legacy process continues unchanged. We remind you of the outstanding payment and recommend exporting your vault during this time. After 30 days without payment, your account falls back to the free plan. Your content is not deleted by this: anything beyond the free storage allowance stays readable and exportable at first, but cannot be extended while you are above it. What happens to such a storage overhang in the long run is governed by Section 14. If you resume a paid plan later, a new billing period begins at the moment of reactivation; the lapsed time is neither credited nor charged retroactively. If a check-in escalation or a legacy process is already running when a payment fails, that process takes precedence: blocks arising from a payment failure do not apply. The reason is the very case this service exists for — someone who stops paying because they have died must not fail on that account. Deleting your content because of an outstanding payment alone is not intended. As far as your usage fits within the free storage allowance, it is retained; we then reserve the right to delete only where all three of the following apply: the contract has ended, at least twelve months have passed since both the last payment and the last sign-in, and we have notified you beforehand at the email address you provided and granted you at least a further 30 days to export. Storage beyond the free allowance is a different matter. It is a paid feature. There is no claim to keep occupying it indefinitely and free of charge once the paid term has ended — regardless of whether that term ended through your cancellation, through expiry, or through a failed payment. How we handle this is governed conclusively by Section 14; there too, we delete nothing without prior notice, without a period to act, and without the opportunity to export first. Where the Service is used systematically so as to obtain paid features on a lasting basis without paying for them, this constitutes abuse within the meaning of Section 9. The measures set out in Section 20 then apply. While a check-in escalation or a legacy process is running, we never block and never delete.
Paid subscriptions (other than the Lifetime plan, see Section 12) automatically renew for the chosen term unless cancelled before the end of the current term. You can cancel your subscription at any time via your account settings or your payment provider's customer portal, effective at the end of the current billing period. Cancelling does not automatically delete your account or data; use the separate account-deletion feature for that. Upon the user's death, a running subscription ends without needing to be cancelled. Your legacy contacts' access to the released content is then no longer tied to the subscription; it follows Section 12 and the deletion concept described in Section 21.
With a "Lifetime" plan, a one-time payment gives you permanent access to the feature tier and storage allotment chosen at the time of purchase, with no recurring cost for that plan. "Lifetime" is bounded by two circumstances and ends with whichever occurs first: your lifetime and the continued existence of finilog. Upon your death, Lifetime access ends as a personal right of use. It does not pass to your heirs and is not continued as a subscription; it is replaced by the legacy process you set up. Your legacy contacts receive the released content and can save it within the grace period you chose yourself in the settings; if you chose no period, a default deletion period applies. Section 21 and the deletion concept referred to there set out the details. If operation of finilog is permanently discontinued, access ends at that point. The provisions on insolvency or discontinuation in Section 25 then apply, in particular the period of at least 90 days provided for there to save your data via the export function. In neither case do you have a claim to continued operation of the Service beyond its actual existence, nor to financial compensation for a remaining, originally expected usage period.
Consumers who conclude a contract with us via distance communication (in particular through our website) have a statutory right of withdrawal. Right of withdrawal: You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period is fourteen days from the day the contract was concluded. To exercise your right of withdrawal, you must inform us (contact details in the imprint, or support@finilog.de) of your decision to withdraw from this contract by an unambiguous statement (e.g. by email). To meet the withdrawal deadline, it is sufficient for you to send your notice of withdrawal before the withdrawal period has expired. Effects of withdrawal: If you withdraw effectively, we will reimburse all payments received from you without undue delay, and no later than fourteen days from the day we receive notice of your withdrawal. If you requested that use of the Service begin during the withdrawal period, you must pay us a reasonable amount corresponding to the proportion of services already provided up to the point you notify us of withdrawal, compared to the total scope of services provided for in the contract. Expiry of the right of withdrawal: Your right of withdrawal expires early if we have fully performed the Service and only began performing it after you expressly consented to this and simultaneously confirmed your knowledge that you lose your right of withdrawal upon full performance of the contract by us. Model withdrawal notice: If you wish to withdraw from the contract, you may send the following to support@finilog.de: "I/we hereby give notice that I/we withdraw from my/our contract for the use of finilog ordered on [date], name of consumer(s), address of consumer(s), date." Use of this template is not required.
The storage allotment included in your plan, any paid storage extensions, and permitted file formats follow the specifications on our pricing page. We reserve the right to apply technical limits on individual files or overall usage to maintain the stability of the Service for all users. Storage is the only part of this Service that costs us money continuously for as long as it is occupied — whether or not it is still being paid for. This section therefore governs what happens when a paid term ends and your actual usage exceeds the allowance you are entitled to afterwards. That situation is referred to below as a storage overhang. It does not matter how the term ended: cancellation, expiry and failed payment are treated alike. In the case of a storage overhang we proceed in three steps. First, we notify you at the email address you provided and tell you by how much your usage exceeds the allowance. Second, from that notice you have 90 days to reduce the overhang yourself or to secure your content; export, viewing and the deletion of individual entries and files remain available to you unchanged during this time, and you alone decide what to keep. Third, once that period has passed we may remove the overhang, having reminded you again at least 30 days beforehand. In doing so we delete only as much as is necessary to bring your usage back within the allowance you are entitled to, starting with the largest uploaded files. Content that fits within that allowance is left untouched. The 90-day period is granted once within any twelve months. If a storage overhang arises again within those twelve months after a paid feature was only temporarily paid for again, a notice and a period of 30 days apply instead. Without this limitation, paying for single billing periods would make it possible to permanently occupy a multiple of the storage actually paid for; that is the purpose of this rule and equally its limit — it applies only on repetition within twelve months and never the first time. While a check-in escalation or a legacy process is running, all periods and all deletions under this section are suspended until it has concluded. That case always takes precedence.
You remain the sole owner, at all times, of all data and content you store with finilog itself. By storing content within the Service, you grant us only the rights necessary to technically process, store, and — in the release scenario you configured — unlock the still-encrypted content. You alone are responsible for ensuring you are authorized to store the content you upload and that doing so does not infringe any third-party rights.
We strive to provide a highly reliable Service but cannot guarantee uninterrupted availability, error-free operation, or permanent access under all circumstances, for example during maintenance, force majeure, or disruptions at service providers we rely on.
We do not operate finilog on our own hardware but use specialized service providers for operation, delivery and payment processing. Where personal data is processed in the course of this, it happens on the basis of data processing agreements; our Privacy Policy sets out the details, legal bases and locations. Currently in use: Supabase — database, account and sign-in management, and file storage. Your vault content is held here, and only in the form encrypted on your own device. Cloudflare — delivery of the website, protection against attacks, and domain management. Resend — sending our emails, in particular the proof-of-life reminders and the notifications to legacy contacts. Stripe — processing of payments and subscriptions including invoicing. Full payment card data never reaches us. Google and Apple — only if you choose to sign in through one of these services (see Section 4). This list describes the position at the time the contract is concluded. We may replace or add a service provider, in particular for reasons of security, availability or economy. Where a change means that personal data is processed in a different country, or that a substantially different provider is used, we will notify you in advance in text form; Section 22 remains unaffected. Our use of service providers does not alter our responsibility towards you: we are liable for their conduct by the same standards as for our own, subject to Sections 18 and 19.
finilog is not a law firm, financial institution, notary, or investment advisor (see also Section 3). Information provided through the platform, including any estate-planning or legacy checklists, does not constitute legal, financial, or tax advice and makes no claim to completeness or accuracy in any specific case.
We are liable without limitation for intent and gross negligence, for injury to life, body or health, for the fraudulent concealment of a defect, to the extent of any guarantee we have given, and under the German Product Liability Act. Where we slightly negligently breach a material contractual obligation (a "cardinal obligation") — one whose fulfilment makes proper performance of the contract possible in the first place and on whose observance you may regularly rely — our liability is limited in amount to the foreseeable damage typical for this type of contract at the time the contract was concluded. Liability for slightly negligently caused damage is otherwise excluded. For loss of data our liability under the preceding paragraphs is limited to the amount that would have been required for restoration had the data been backed up properly and in a manner appropriate to the risk. We provide an export function for this purpose and recommend that you use it regularly; you are responsible for keeping your own backups and your recovery kit. The following circumstances lie outside our sphere of control, so that no breach of duty on our part arises in that respect: that encrypted content of your vault could be decrypted by third parties because your vault password was weak, already compromised elsewhere, reused or stored insecurely (see Section 6); that you have lost your vault password together with all recovery routes; and any misconfiguration by you of the proof-of-life check under Section 8, such as an incorrect recipient address or a period unsuited to your circumstances. Our liability under paragraph 1 remains unaffected. The above limitations of liability apply to claims of any kind and on any legal basis, in particular also to claims in tort, and for the benefit of our legal representatives, employees and vicarious agents.
We may temporarily suspend accounts or terminate them without notice for good cause, in particular in the event of a breach of these Terms, applicable law, or reasonable suspicion of abusive use of the Service. Where legally permitted and technically feasible, we will notify you before taking such action and give you the opportunity to export your data.
After termination or deletion of your account, your data is deleted in accordance with our Privacy Policy. For data remaining as part of an already-triggered legacy contact release, the separate deletion approach described there applies.
We may update these Terms from time to time, for example due to changed legal requirements or new features of the Service. We will notify you of material changes in advance, generally by email. If you do not object to a material change within six weeks of receiving the notice, the change is deemed accepted; we will specifically draw your attention to this in the notice. If you object, you retain the option of extraordinary termination.
These Terms are governed by German law, excluding the UN Convention on Contracts for the International Sale of Goods (CISG). For consumers habitually resident in another European Union member state, this applies only to the extent that it does not deprive you of protection granted by mandatory consumer-protection provisions of that state's law. If the user is a merchant, a legal entity under public law, or a special fund under public law, the exclusive place of jurisdiction for all disputes arising from or in connection with this contract is the provider's place of business.
Should any provision of these Terms be or become invalid or unenforceable, the validity of the remaining provisions shall remain unaffected. The invalid provision shall be replaced, to the extent it exists, by the applicable statutory provision.
Should the operator of finilog become insolvent or permanently cease operations, registered users will be notified by email as early as legally permitted and given a period of at least 90 days to secure their data via the export feature provided in the application. Encrypted user data will not be sold or transferred to third parties as an asset; it will be deleted after this period, or as part of insolvency proceedings, in accordance with applicable legal requirements.
Questions about these Terms can be directed to support@finilog.de or the contact details provided in the imprint.
Our Commitment
finilog exists to help users protect their digital legacy. Security, transparency, and long-term trust remain at the core of every decision we make.