Builds on the encryption foundation from 1.7.0. No new IAP products, no new permissions. One new SDK added: @sentry/react-native for crash reporting (no user PII collected, DSN-only telemetry). --- USER-VISIBLE CHANGES --- 1. Vault Data Isolation (all task screens) Every vault storage path is now scoped to the authenticated user's ID. Previously, some paths used a shared prefix — now each user's financial, property, professional, utility, funeral, membership, document, and portal credential data is stored under their own namespace. Existing data was migrated automatically. 2. Keyholder Access Controls Keyholders can no longer access passwords, loyalty points, documents, or portal credentials. Access is gated through the unified_access_grants table. Successor access is unchanged. 3. End-of-Life Unlock Flow Single terminal unlock transition that honors the requireSecretCodeValidation policy. Prevents duplicate grants and ensures the death verification flow completes atomically. 4. Invitation Acceptance Improvements - Terminal screens (accepted/expired/error) now have properly sized buttons and clear stale invitation tokens - Invitation lockout UX improved for beta testers - Final Wishes "view-as" access now works for all 18 categories 5. Successor Prompt Banner Dashboard banner now correctly recognizes pending successor invitations and drives users to complete the trusted-party handshake. 6. Feedback Button → Modal The floating feedback tab replaced with a bottom-sheet modal, eliminating overlap with navigation elements. 7. Idle Lock Overlay Improved auto-lock behavior when app is backgrounded. 8. Dashboard Full-Screen Scroll Entire dashboard (header + cards) now scrolls as one view. --- SECURITY FIXES --- - PBKDF2 key derivation: length parameter corrected from bytes to bits per react-native-aes-crypto API (was producing 256-bit keys from a 32-bit derivation — now correctly derives 256-bit keys) - Atomic master-key enrollment with native CSPRNG for trusted-party wrapping - Vault keychain unlock cache no longer gated behind biometric check - Duplicate trusted-party grants prevented - Owner-only access enforced on /api/vault/sensitive-data/:userId - Profile image cache namespaced per userId --- CRASH REPORTING --- @sentry/react-native added for production crash monitoring. No user PII collected. Only crash stack traces and device metadata (OS version, app version) are transmitted to Sentry. DSN configured server-side. --- REVIEWER TEST FLOW --- Same test accounts as previous submissions: Account #1 (Owner): appreview-owner@myfinalkey.com / Review2026! Account #2 (Spouse): appreview-spouse@myfinalkey.com / Review2026! Key flows to verify: 1. Log in → Dashboard scrolls fully (header + cards) 2. Settings → Recovery Code (set/change code flow) 3. Settings → Add Successor → send invitation 4. Accept invitation from Account #2 5. Verify keyholder cannot access passwords/documents 6. Family Plan and Refer a Friend flows unchanged from 1.6.0 --- PRIVACY --- No new user data collected. Sentry receives only crash telemetry (stack traces, device model, OS version). Recovery Code never leaves the device. All vault data encrypted with AES-256-CBC + HMAC-SHA-256.

This release hardens MyFinalKey's encryption and adds new tools for keeping your vault under your control. NEW: Recovery Code Open Settings → Recovery Code to set a code that becomes the ONLY key to your vault. Once enabled, even MyFinalKey cannot unlock your vault without that code. Write it down somewhere safe — we cannot recover it for you. NEW: Pending Connections banner If you invite a Successor or Keyholder who has already set up their own Recovery Code, your Dashboard shows a banner asking you to finalize the connection with one tap. This is what links their access to your vault in a way that keeps everything encrypted end-to-end. Also in this version: - Streamlined Add Successor screen (removed an unused field) - Small copy updates for accuracy - Backend and encryption hardening behind the scenes

We polished Refer a Friend and Family Plans with a handful of fixes and quality-of-life improvements: - Back navigation buttons now appear correctly on every task screen (they were occasionally hidden behind the on-screen feedback tab) - Family plan invites sent to an existing member's email now accept automatically the next time that person signs in — one less tap - The Family Plan screen now displays every member reliably, even for large households - Hardened the subscription receipt matching flow so a receipt can never be attributed to the wrong account Also in this version: - Refer a Friend — share your code, earn subscription time for each friend who subscribes - Family Plans — one subscription for your spouse, or a Family Bundle that covers two adults plus unlimited kids under 18

Push Notifications — Get reminders for important tasks, trial expiration alerts, and encouragement to keep your planning on track • Smart Email Updates — Receive helpful onboarding tips, progress reports, and re-engagement reminders via email • Gold Star Families Program — Free 1-year premium access for Gold Star family members via QR code registration • App Download Landing Page — New QR code landing page for easy app sharing • Fixed notification bell icon being hidden behind Orion assistant button • Fixed skip button overlap on AI onboarding screen • Fixed promo registration system for automatic premium upgrades • Logo added to all email communications • Performance and stability improvements

Improved layout on locked screens for better readability Moved AI assistant button to avoid overlapping navigation controls Fixed UI scaling and layout issues across various screens Bug fixes and performance improvements

What's New in Version 1.5 iPad Layout Optimization: Improved responsive scaling across all screens for iPad compatibility. Fixed-dimension elements (logos, icons, cards, buttons) now use moderate scaling instead of full-width scaling, preventing oversized UI elements on iPad while maintaining the same appearance on iPhone. Dashboard screen: properly scaled logo, profile images, side menu, navigation icons, and category cards for iPad Checklist screens: category cards and logos now scale appropriately on iPad without pushing content off-screen Lock/Unlock screens: button icons and profile containers properly sized so the white modal no longer overlaps the blue header text on iPad Scrollability & Accessibility: All intro screens (76 screens) now wrap content in a ScrollView, ensuring the "Get Started" button is always reachable on all device sizes including iPhone 12 Pro Max with larger text settings iPad App Icon & Multitasking Support: Added all required iPad app icon sizes (20px, 29px, 76px, 152px, 167px) to the asset catalog Added UIInterfaceOrientationPortraitUpsideDown to supported orientations for iPad multitasking compliance No Functional Changes: No changes to subscription logic, IAP flow, or backend services All changes are UI/layout only — zero impact on existing iPhone behavior Demo Account: Email: appreview@myfinalkey.com Password: Review2024!

What's New in This Version Bug Fixes & Improvements: Fixed an issue where the unlock button on the Personal Information screen was not navigating correctly after tapping Added an "Add Successor" button on all unlocked task screens when no contacts are assigned, making it easier to add successors or key holders directly from any task Fixed back arrow positioning on lock/unlock screens so it is no longer obscured by other UI elements Fixed navigation for the Add Successor button to correctly open the successor management screen from any task category

What's New in This Build (v1.1, build 7.0.3): 1. Removed Face ID Toggle from Login Screen The Face ID / biometric toggle on the login screen has been removed. iOS Keychain AutoFill already provides seamless credential filling via Face ID at the system level, so the in-app toggle was redundant and potentially confusing. Users still benefit from Face ID through the native iOS AutoFill experience. 2. Improved Session Persistence Fixed an issue where users were unexpectedly logged out after approximately 24 hours. The app now automatically refreshes authentication tokens in the background using the existing 30-day device trust mechanism, so users who choose "Remember this device for 30 days" during two-factor authentication will stay logged in as expected. 3. Added Founding Member Subscription A new limited-edition "Founding Member" annual subscription ($29.99/year) has been added to the Subscription Management screen. This tier provides Premium-level features at a discounted rate for early adopters, limited to 50 members. The product ID is com.myfinalkey.subscription.v2.founding.annual and has been configured in App Store Connect within the existing subscription group. Demo account credentials remain the same as previously provided.

- Redesigned TOTP (authenticator) setup screen into a step-by-step wizard for non-technical users, with links to download authenticator apps from the App Store - Added contextual help explaining what two-factor authentication is and why it's required - Added 3-skip grace period so new users aren't forced into authenticator setup on first login - Fixed security issue where closing and reopening the app during authenticator setup could bypass 2FA - Fixed keyboard covering the submit button on the Sign Up screen