Who can read my documents?
No one but you. Your files are encrypted in your browser, before they are sent, with a key derived from your password that never leaves your device. Our servers receive only unreadable binary data. Neither we, nor our host, nor anyone else can open your documents without your password. The code that performs this encryption is open and verifiable.
Where are my files stored?
With Infomaniak, an independent host whose datacenters are ISO 27001 certified. Your files are replicated there across several data centers, which protects them against any hardware failure. And because they are encrypted before they arrive there, even Infomaniak sees only unreadable data.
What happens if I forget my password?
Your data is permanently lost, and there is nothing we can do about it. This is the direct trade-off of our security: because the encryption key depends solely on your password and exists nowhere on our side, no one can reconstruct it. There is no recovery feature, because building one would amount to creating a backdoor. Write your password down and keep it somewhere safe.
Why don't you ask for an email or phone number?
Because the day your bag is stolen, your phone goes with it, and you may no longer have access to your email. A service that requires a code sent by SMS or email becomes inaccessible at the very moment you need it. Narvalio opens with an ID printed on a card and a password that only you know. Nothing else.
What happens to my data after 90 days?
It is deleted automatically. Narvalio is not permanent storage; it is a safety net for the duration of a trip. After 90 days, your space and its contents are erased from our servers. If you travel again, you create a new backup.
How is this different from Google Drive?
On two points. First, a conventional cloud can technically read your files; we cannot, because they are encrypted on your device before being sent. Second, a conventional cloud assumes you still have your email and your phone to log in. Narvalio is designed for the case where you have lost everything: access depends only on a card and a password.
How can I verify that you don't read my files?
The code that encrypts your documents in your browser is published openly. Any developer can examine it and confirm that the encryption key never leaves your device and is never transmitted to our servers. A privacy promise that cannot be verified is worthless: ours is open to inspection.
Do my copies have any official value?
No. They are personal copies, with no legal value, and they do not replace your original documents. They are meant to make things easier if your documents are lost or stolen — proving your identity to a consulate, retrieving a passport number, presenting a booking. For any official procedure, only the originals are valid.