Privacy policy
What we keep, why we keep it, and how your family’s memories are processed.
1. Scope and responsibility
This notice describes Heirloom, a private family archive with email registration and optional paid subscriptions. Heirloom is owned and operated by Recursiv LLC. Contact support@myheirloom.life with privacy or access questions.
2. Information you provide
We store your email address, first and last names, a salted password hash, email-verification and account-recovery records, and your family preferences. We also store uploaded documents, photographs, recordings, filenames, file sizes, dates, author details, captions, names you add, extracted metadata, transcripts, translations, and generated PDFs. These may contain information about relatives and other people. Avoid uploading information you do not have permission to share.
3. How we use information
We use account information to authenticate you, send verification and reset emails, and protect access. We use uploaded content and preferences to provide storage, search, downloads, thumbnails, and requested AI features. Usage counters help enforce processing and storage limits. We do not sell your information or use archive contents for advertising.
4. Cloudflare and AI processing
Cloudflare provides application hosting, D1 database storage, R2 file storage, account email delivery, AI inference, and browser-based PDF rendering. Document suggestions send extracted opening-page text, images, and available metadata to Workers AI. Story preparation sends the recording for transcription and the transcript for bilingual text generation. Generated stories are passed to the PDF renderer. Ordinary photo uploads are not sent for AI analysis. The migrated version does not call the OpenAI API or require a personal API key; Whisper is an OpenAI-developed model hosted by Cloudflare. Older stories may have been processed using the previous OpenAI integration.
5. Model training and provider policies
Heirloom does not use your archive to train AI models. Cloudflare states that Workers AI customer content is not used to train models or improve its or third-party services without explicit consent. This app stores your originals and generated results in its database and file storage. Provider processing remains subject to Cloudflare’s applicable terms and privacy policy; this notice is not a promise of zero provider retention or processing only in your country.
6. Cookies and this device
A necessary session cookie keeps you signed in for up to seven days. The browser stores whether you have seen the guided tour and may temporarily keep your selected plan and coupon while you register. Unfinished audio recordings may be stored in IndexedDB on your device to recover an interrupted recording, and remain until saved, discarded, or browser data is cleared. Downloaded files remain on your device under your control. We do not add advertising cookies or third-party advertising trackers.
7. Access, security, and logs
Archive endpoints require authentication and are scoped to the family archive you may access. Invited family members can view and change shared content. We record the account responsible for supported changes, and the archive owner manages membership and billing. Passwords are stored as salted hashes, not readable passwords. This is not end-to-end encryption: authorized operators and infrastructure providers can technically access stored data for operation, troubleshooting, security, or lawful requests. Cloudflare receives technical request information such as network address and browser information. The app uses hashed network identifiers for authentication rate limits and sampled operational logs for errors and service activity. We avoid intentionally logging passwords or archive contents, but no online service is risk-free.
8. Retention and deletion
Saved archive content is retained while the archive is in use unless deletion is requested or removal is required. There is currently no automatic expiration for uploaded memories and no self-service account deletion. Expired sessions and verification records are cleaned up during account activity; this is not an immediate deletion guarantee. Contact support@myheirloom.life to request correction, an export, account closure, or deletion. We may need to verify account ownership. Provider recovery copies, security records, or records needed for legal obligations may remain after active content is removed, according to applicable retention requirements. We will explain any retention needed when responding to a deletion request.
9. Your choices and rights
You can change supported archive details and preferences, download original files and available story outputs, and decline microphone permission. Document uploads currently request automatic suggestions when AI is available; saving a story currently starts AI preparation. If you do not want that processing, do not submit the relevant material. Depending on where you live, you may have rights to access, correct, erase, restrict, or object to processing, obtain a portable copy, or complain to a regulator. Contact support@myheirloom.life to make a request; applicable rights are not waived by using the app.
10. Children, payments, and updates
Accounts are intended for adults aged 18 or over. Adults should have appropriate authority before adding information or recordings about children. Stripe hosts payment checkout and the billing portal. We send Stripe the billing owner’s email address, account identifier, selected plan and any promotion code. Stripe handles payment-card details; Heirloom stores Stripe customer and subscription identifiers, plan status, payment-period dates and processed webhook identifiers. Invoice and receipt links are available through billing controls. Stripe processes payment and fraud-prevention data under its own privacy policy. This notice will be updated for materially different data uses.