1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide, including:

• Account Information: Name, email address, password, and family role (e.g., "Parent," "Grandparent").
• Payment Information: Subscription details (processed securely by third-party payment processors; we do not store full credit card numbers).
• Your Content: The photos, videos, audio recordings, documents, text, and family tree data you upload or create.
• Legacy Preferences: Information regarding your designated "Successor" or Legacy Contact (name, email) for account succession purposes.

1.2 Information Derived from Your Content (Metadata)

When you upload media files, we may extract and store metadata embedded within those files to help organize your archive. This includes:

• EXIF Data: Date created, camera model, and settings.
• Location Data: Geotags embedded in photos or videos (used to plot memories on a map).
• Inferred Data: We may process files to identify media types, visual characteristics (e.g., "black and white photo"), or dominant colors to improve search and display.

1.3 Information Collected Automatically

When you use the Service, we collect technical log data, including:

• IP address and device identifiers.
• Browser type and operating system.
• Usage metrics (e.g., storage used, bandwidth consumed, pages visited).
• Crash reports and performance logs.

1.4 Cookies and Tracking

We use cookies and local storage to maintain your login session, remember your preferences (such as sort order for albums), and measure Service performance. We do not use third-party advertising cookies or track your activity across other websites.

2. How We Use Information

We use your information to:

• Provide and Organize the Service: Storing, backing up, indexing, and displaying your family archive.
• Process Media: Generating thumbnails, transcoding videos for streaming, and optimizing images for web viewing.
• Manage Subscriptions: Processing payments and handling account upgrades.
• Ensure Security: Detecting unauthorized access or abuse.
• Communicate: Sending service updates, security alerts, and support responses.
• Facilitate Succession: Executing your Digital Legacy instructions in the event of your death or incapacity.

A Note on AI and Machine Learning: We do not use your private content (photos, videos, or journals) to train generative AI models for the general public. Any machine learning processing (such as optical character recognition for search or facial grouping) is performed solely to provide features within your private account.

3. How We Share Information

We do not sell your personal data. We share information only in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party vendors to perform critical functions. These providers have access to personal information only as needed to perform their services and are contractually obligated to protect it. These include:

• Cloud Infrastructure: For secure hosting and data storage (e.g., AWS, Google Cloud, Backblaze).
• Payment Processors: To handle billing (e.g., Stripe).
• Email Services: To send transactional emails (e.g., password resets).

3.2 Family and Invited Users

Content you upload is private by default. If you invite others to your "Family Space" or share links, those authorized users will have access to the content you have chosen to share. You are responsible for managing these permissions.

3.3 Digital Legacy / Successors

If you have designated a Successor or Legacy Contact under our Terms of Service, we may disclose your account credentials or grant data access to that individual upon verification of your death or incapacitation.

3.4 Legal Compliance

We may disclose information if required by law, such as in response to a subpoena or court order, or to protect the safety, rights, or property of Heritable, our users, or the public.

4. Data Retention

4.1 Active Accounts

We retain your personal information and content for as long as your account is active and compliant with our Terms.

4.2 Account Termination

If you delete your account, or if your account is terminated for non-payment:

• Your data is placed in a "pending deletion" state for 90 days to allow for recovery or error correction.
• After this period, your content and personal information are permanently deleted from our live databases. Backups may retain residual copies for a limited time strictly for disaster recovery purposes before being overwritten.

5. Your Rights & Choices

Subject to your local laws (such as GDPR or CCPA), you have certain rights regarding your data:

• Access & Portability: You can download a copy of your uploaded archives.
• Correction: You can edit your profile and metadata within the app.
• Deletion: You can request the deletion of your account and data.
• Withdraw Consent: You can revoke invitations sent to family members at any time.

To exercise these rights, please use the settings in your account or contact us at the email provided below.

6. Children's Privacy

6.1 Service Eligibility

The Service is not intended for use by children under 13. We do not knowingly collect account information directly from children.

6.2 Content Depicting Children

We recognize that Heritable is used to store family memories, which often include photos or records of children. By uploading such content, you represent that you are the parent or legal guardian, or have obtained the necessary consent to store and share that data within your family circle.

7. International Data Transfers

Heritable is operated from the United States. If you are located outside the U.S., please be aware that your information will be transferred to, stored, and processed in the United States or other jurisdictions where our cloud providers operate. By using the Service, you consent to this transfer.

8. Data Security

We employ industry-standard security measures to protect your family archive, including:

• Encryption of data in transit (TLS/SSL).
• Encryption of data at rest (where supported by our storage infrastructure).
• Strict access controls for our employees.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. If we make material changes, we will notify you via email or a prominent notice within the Service.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Heritable
Email: hello@heritable.cloud