Your trust matters more than anything else here. This Privacy Policy explains what we collect, why, and what you can do about it.
1. What we collect
- Account data: name, email, password hash, sign-in provider.
- Profile data: people you add (living or deceased), relationships, nicknames, photos, voices, faith/beliefs (optional).
- Uploaded materials: photos, videos, audio, documents, messages, message archives.
- Generated content: AI conversations, narrations, transcripts, summaries, films, books, embeddings.
- Safety data: emergency contacts you choose, consent records, crisis incident logs.
- Usage data: device, browser, IP address, pages visited, actions taken, error logs.
2. How we use it
We use your data to operate AncestLore for you: to build people profiles, generate Memory Conversations, narrate keepsakes, create legacy books and films, run safety systems, and improve reliability. We do not sell your personal data.
3. AI processing
To generate AI outputs we send the minimum necessary content to trusted AI model providers acting as our processors. Providers are contractually prohibited from using your content to train their general-purpose models.
4. Storage
Photos, videos, audio, and other media are stored in our secured media storage and content-delivery network. Database records live in our managed application backend. Backups are encrypted at rest.
5. Third-party providers
We use specialist providers for AI generation, voice synthesis, transcription, video rendering, SMS for safety alerts, and infrastructure hosting. Each provider is bound by data-processing agreements consistent with this policy. We never expose provider names inside the product, but we will disclose them on request.
6. Data sharing
Materials you mark as private stay private to you. Materials you explicitly share with family members are visible to those people. We do not share your data with advertisers.
7. Your rights
- Access and export the data we hold about you.
- Correct inaccurate data.
- Delete individual memories, profiles, or your whole account.
- Withdraw consent for optional processing (e.g., safety alerts).
- Object to processing or request restriction where the law allows.
8. Retention
We keep your data while your account is active. After deletion we remove personal data within 30 days, except where we are legally required to retain limited records (for example, financial logs or crisis incident records mandated by law).
9. Contact
For privacy questions or to exercise your rights, contact us via the Contact Us link in the footer.