Privacy policy

Last updated: 25 October 2026

Expino is a Morrow4 service that helps families keep track of the expiry dates of their documents, events and subscriptions. This policy explains what information Expino keeps, why, who can see it, and the choices you have. In short: your documents are yours. We use them only to run Expino for your family; we never sell them, never use them for advertising, and never use them to train AI.

1. Who we are

Expino is provided by Morrow4 ("we", "us"). For any question about this policy or your data, use Help & support in the app or email support@expino.app.

2. What we keep

Information	Examples	Why
Your account	Name, email address, password (stored only as a one-way hash), language, time zone, notification choices	To let you sign in and to send reminders the way you chose
Your household and family members	Household name; each member's name, relation and (optionally) date of birth; who signs in and with which access	To organise documents by person and decide who sees what
Items	Document type, title, number, issuer, country, issue and expiry dates, notes; subscription provider and cost; reminder settings	To show what is expiring and remind you in time
Files you add	Photos and PDFs of documents (for example a passport page or an insurance card), only if your household chooses to keep copies. New households don't keep them unless they turn it on, and it can be chosen per item.	So your household can open the copy later
Notifications	Reminders sent, in-app alerts, the browser push subscription of each device you enable, your private calendar-feed link	To deliver reminders by email, push and calendar
Support requests	Your message, an optional screenshot, and technical context added automatically: the page you were on, app version, language, browser type, and account and item identifiers (never document contents)	To answer your request and fix problems
Invitation requests	Name, email address and the note you send when you ask for an invitation	To decide on and send your invitation
Technical data	Short-lived error logs on our server; a sign-in cookie and a language cookie in your browser	To keep the service running and secure

We don't use advertising, analytics or tracking tools, and we don't set tracking cookies. The two cookies we use are needed for signing in and for remembering your language.

3. How documents are read

When you scan or upload a document, an AI model reads the details (dates, numbers, names) to fill in the form for you. That model runs on Morrow4's own server. Your documents are never sent to outside AI services such as ChatGPT, Gemini or Claude, and they are never used to train any AI model. You always check and confirm what was read before it is saved. While a document is being read it is held only in memory; unless your household chose to keep a copy, the photo or PDF is discarded as soon as it has been read and only the details you save are kept.

4. Who can see your information

People in your household. The main admin and household admins can see and manage all of the household's items, files and members. Members with personal access see only their own items. Everyone who signs in to the household receives its reminders.
Morrow4. We don't look at your documents. A small number of people may access data only to keep the service running, to fix a problem you reported, or when the law requires it.
Service providers who run parts of Expino for us, only as needed:
- Hetzner Online GmbH (Germany) hosts our server; all Expino data, files and backups are stored in their data centres in Germany.
- Resend delivers our emails. To send a reminder or invitation, it receives the recipient's address and the email's contents (for example an item title and its expiry date).
- If you turn on push notifications, the push service of your browser or phone (for example Google, Apple or Mozilla) delivers them. The contents are encrypted end to end.
Nobody else. We never sell or rent your information, and we don't share it for marketing. We would disclose information only if the law requires it.

5. How long we keep it

We keep your information while your household's account is active.
When you remove an item, file or family member, it is deleted from the app straight away.
When the main admin deletes the account, the whole household is frozen for 30 days (so it can be cancelled), then permanently deleted, including every login, item, file and support request.
Deleted data can remain in our server backups for up to 14 more days before it is overwritten.
Invitation requests are deleted 12 months after they were sent.

6. Security

Expino is only reachable over encrypted connections (HTTPS). Passwords and one-time links are stored only as one-way hashes. Files can be opened only by signed-in people of the household they belong to. Our server is kept up to date, protected by a firewall and accessible only with security keys. No system is perfectly secure, so please use a strong password and tell us straight away if you notice anything suspicious.

7. Your choices and rights

You can see and correct your information in the app at any time.
You can remove items, files and family members, change your notification choices, and reset your calendar link.
Members can leave a household; the main admin can delete the whole account (see section 5).
You can ask us for a copy of your information, or ask questions about how it is used, through Help & support or by email.

8. Children

Accounts are for adults (18 or older). Parents and guardians may add their children as family members and keep their documents; they are responsible for doing so with care.

9. Information about other people

When you add family members or their documents, please make sure you are allowed to do so, for example because you are their parent or guardian, or they agreed. The same protections in this policy apply to their information.

10. Changes

If we change this policy, we will update the date at the top. For important changes we will tell you by email or in the app before they take effect.