Security
Your home’s data, handled with care.
HTTPS everywhere
Every connection to the app, the website, and our API is encrypted in transit.
A code before anything drastic
Deleting, exporting, transferring, or restoring a home asks for a fresh one-time code.
Private files, expiring links
Invoices and photos sit in private storage and open through signed links that expire.
Nightly encrypted backups
The database is backed up every night, encrypted, and kept off-site.
Access per module
Owners choose See or See + Edit for each person on each module. Pay and notes can stay private.
30 days to undo
Deleted homes and items can be restored for 30 days, then they are permanently erased.
Your account
Sign-in and the actions that would hurt most if someone else did them.
One-time codes for risky actions
Deleting a home or account, exporting data, transferring ownership, and restoring all ask for a fresh code, even when you are already signed in.
Rate limits on sign-in
Repeated sign-in and code attempts are slowed down and blocked to stop guessing.
Sensitive actions are logged
Exports, deletes, invites, and permission denials are recorded with who did it and when.
Your data
Where your records and files live, and how they get back to you.
Encrypted in transit
HTTPS on every surface: kellexa.com, the web app, the mobile apps, and the API behind them.
Private file storage
Uploads are type- and size-checked, stored outside any public web root, and served through signed links that expire.
Backups
Nightly encrypted database backups kept off-site, with daily and weekly copies retained. Stored files are versioned.
Deletion you can undo, then can’t
Deleted homes, items, and accounts are recoverable for 30 days. After that they are permanently removed from our systems.
Export whenever you like
Download your records and files in the format you choose. There is no lock-in.
Inside your home
Sharing is how Kellexa works, so it is controlled closely.
Per-module permissions
Up to 10 members per home. The owner sets See or See + Edit on each module for each person.
Private stays private
Private notes are only ever visible to you. Pay and documents can be hidden from anyone you choose.
At Kellexa
What we do, and refuse to do, with access to the system.
Staff access is gated and recorded
Our internal console sits behind a zero-trust network gate and a separate staff sign-in with limited roles. Staff actions are written to an audit log with a reason.
No ads, no data sales
We don’t sell household data or run ad trackers. Your home is not inventory.
Crash reports without the personal bits
We use Sentry for crash diagnostics, with personal details removed.
Report a security problem
Found a vulnerability or think your account was accessed by someone else? Email us with as much detail as you can. Please don’t test against other people’s homes or accounts.
Give your home a memory.
Free for one home, with everything included. Add the people who live there when you’re ready.
- All seven modules
- Up to 10 members
- No ads, ever