Everyone keeps their own login

There is no shared password in a household VAULT. Every member signs in as themselves — that's the only way privacy can hold.

Pick a privacy preset on day one

Fully Shared Couple, Balanced Privacy or Private First. Presets set defaults for new records; existing records keep their labels until you change them explicitly.

Ownership + visibility, per record

Each record can be Personal, Partner, Joint, Household or Unassigned — and Private, Shared Summary, Shared Full or Selected Members. VAULT enforces this on every read.

Review before you invite

The Privacy Review card shows exactly what a new member will see, per module, before you send the invite. There are no surprises.

Departure is calm too

When a member leaves, personal records are exported to them, joint records reassign with the owner's confirmation, and private records never transfer to anyone.