Data as amanat — how user information is handled