Legal

Privacy Policy

Effective 17 August 2026

1. Introduction

This Privacy Policy explains how The Family Legacy ("we", "us") collects, uses, stores, and protects your information when you use our website and application (the "Service"). The Service lets you preserve family photos, videos, voice recordings, documents, stories, and messages in a private digital vault. We aim to be honest about what we do and do not do. Where we describe security, we describe the access controls and safeguards we actually use; we do not claim technical capabilities we have not implemented.

2. Information We Collect

Account information: your name, email address, and password (stored in hashed form by our platform). Content you add: photos, videos, voice recordings, documents, PDFs, letters, recipes, and written stories. Family information: family member names and email addresses you enter or invite, and relationships you record in a family tree. Time Capsule details: unlock dates, recipients, and personal messages. Will Vault information: solicitor and law firm details, funeral wishes, final instructions, and executor or authorised-person contact details. Family invitations: the email addresses and access levels you assign. AI / Ancestry information: names and details you submit for ancestry research, and the generated results. Usage information: how you interact with the Service, used to provide and improve it.

3. How We Use Your Information

We use your information to provide the Service, to operate and maintain your vault, to deliver time-capsule and reminder notifications, to process subscriptions and add-on purchases, to enable family invitations and shared access, to run AI/ancestry features you request, to provide account succession features, to communicate with you about your account, and to meet legal obligations. We do not sell your personal information or your content.

4. Sharing & Access

Your content is shared only as you direct. You invite family members and choose their access level (View Only, Contributor/Upload, or Administrator). Nobody gains access to your vault unless you invite them, or unless an emergency succession feature you have enabled triggers under its conditions. We use a payment provider (Stripe) to process payments and a cloud infrastructure provider to host the Service; these providers process data only as needed to deliver their services and under their own privacy and security standards.

5. Security

Access to the Service requires authentication. Your data is transmitted over encrypted connections (HTTPS). Access to your vault is controlled by your account and by the invitation and permission settings you configure. We restrict internal access to data on a need-to-know basis. We do not represent that the Service uses "bank-grade" or any specific encryption standard for stored content beyond the safeguards provided by our hosting platform. No system is perfectly secure, so we encourage you to keep your own backup copies of irreplaceable files.

6. Data Retention & Deletion

We keep your content for as long as your account is active. You can delete individual memories, time capsules, will vault entries, or your entire account at any time. Deleting your account removes your vault content. Some data may be retained after deletion where required for legal, accounting, or fraud-prevention reasons, or to complete pending notifications you scheduled. If you cancel a paid subscription, your content remains available subject to your plan’s features until you delete it.

7. Account Succession

The Service offers features that can grant trusted contacts or executors access to your vault after a period of inactivity that you configure. These features only activate if you have explicitly enabled them and set the relevant contacts. Activating succession is your choice and your responsibility. We use reasonable efforts to honour your settings but cannot guarantee that notifications reach contacts who are not registered users or whose details are out of date.

8. AI & Ancestry Features

AI and ancestry research features process the names and details you submit to generate possible records and insights. Results are estimates and hints, not guaranteed facts. You should verify any genealogical finding against primary sources before relying on it. Information you submit for these features is used to produce your results and is not shared publicly.

9. Your Rights — Access & Correction

You can view and correct your account information at any time in your account settings. You can view, edit, and delete the content in your vault at any time. You can manage or remove family invitations and access levels at any time. If you want a copy of your data or help correcting something you cannot change in the app, you can contact us through the support options in the Service.

10. Children’s Privacy

The Service is not intended for children under 16, and we do not knowingly collect their personal information. Content you add about younger family members is controlled by you as the account holder.

11. International Use

The Service is hosted on cloud infrastructure that may process data outside your country. By using the Service you acknowledge that your information may be transferred and stored in other jurisdictions that may have different data protection rules.

12. Changes to This Policy

We may update this Privacy Policy from time to time and will notify you of significant changes where reasonably possible. Continued use after changes take effect means you accept the updated policy.

13. Contact

If you have questions about this Privacy Policy or your data, contact us through the support options available in the Service.