Skip to content

How it works

Three steps. The whole product.

Restkin does three things, in this order: it captures a record, it reminds you before it lapses, and it lets the right trusted person find it when they need it. Here's what each step actually feels like.

Step 01Capture

Point your phone. We extract the dates on-device.

Snap a passport, insurance card, or vehicle title. Restkin extracts expiry dates, document numbers, and the issuing authority — all on your device, before encryption. You confirm the fields, then the record is sealed. No file ever leaves your phone as plaintext.

Passport
Exp 12/2029
BD-GOVT
Concept

Step 02Renew

A reminder arrives when you can still act on it.

Lead times are matched to the document — 9 months for a passport, 60 days for an insurance policy. The reminder is a guided workflow, not a notification: prep checklist, link to the official portal, deadline countdown. You always submit yourself; we prepare, you decide.

T-9mo

Passport

T-60d

Insurance

T-14d

Registration

Today

Lead time per document
Concept

Step 03Share

One trusted person, when they need it, on your terms.

Invite a spouse, parent, or advisor by email. Grant access category-by-category. They never see what they don't need. Every view is logged to you. Revoke anytime. If something happens to you, the time-lock or veto-based release opens the door without you having to be there.

You

Spouse

Co-owner

Parent

Viewer

Advisor

Scoped

Concept

What we see vs. what you see

Trust, line by line.

Every row of data in your vault has a user-side view and a server-side view. The server-side column is shorter than the user-side column. By design.

What kind of data
What you see
What we see
Document content
Plaintext on your device, while unlocked.
Encrypted XChaCha20-Poly1305 ciphertext we cannot unwrap.
Expiry dates / metadata
Structured fields you can edit and search.
Encrypted blob. We run no server-side processing on your data.
Trusted contact list
Names, emails, permission grants, audit log.
Same encrypted blob. We never see who you invite.
Sharing requests
Read-only, scoped, time-limited, fully revocable.
A token we route. We cannot decrypt the underlying record.
Recovery
A 12-word phrase generated once, saved by you.
Nothing. We never see your recovery phrase.
Audit log
Every view, share, export — exportable as JSON.
Encrypted. We can't read your log.

For the cryptographic detail — keys, KDFs, audit log, sharing handshake — read the full trust model.

The first record

Start with one record. The rest follows.

The first action should be low risk: one passport, one reminder, one trust proof. Restkin meets you there, then grows with you.