Privacy Policy

Last updated: 2026-08-19

Draft template pending qualified legal review — not yet reviewed by a lawyer, and placeholders (e.g. company legal name, registration number, registered address, governing jurisdiction) still need to be filled in before this is published live to real users.

1. What we collect

Account details (email, hashed password — never plaintext), the country(ies) your estate touches, checklist status and any notes you add, next-of-kin contact details you provide, your About Me story content and any video links you add (the platform stores the link only, never the video itself), check-in timing preferences and history, and AI onboarding chat transcripts (logged for quality review and audit purposes per our disclaimer framework).

2. How we use it

To operate your account, checklist, and story page
To run the check-in mechanism and, if it completes, deliver the release package to your designated next of kin
To send account, verification, and check-in related emails
To improve the AI onboarding assistant (via logged transcripts)

3. Who we share it with

We don't sell your data. We share the minimum necessary with:

Your designated next of kin — but only the outstanding-items summary, pointer notes, and any story content you've set to be visible to them, and only once the check-in escalation completes
Service providers: our email provider, our AI provider (OpenAI, for onboarding chat only), and our hosting/database providers
Authorities, if required by law

4. Security

Passwords are hashed (never stored in plaintext). We use parameterized database queries, encrypt sensitive fields at rest where applicable, and apply rate limiting on public-facing endpoints. No system is 100% secure; report suspected issues to [contact email].

5. Your choices

You can edit or delete most of your data from your account, remove next of kin, change story visibility, and close your account at any time. Deleting your account removes your checklist, pointer, and story data (next-of-kin contact records and audit logs may be retained where required for legal or security purposes).

6. Data retention

We retain your data while your account is active, and for a limited period after account closure as required for legal, security, or dispute-resolution purposes.

7. Contact

[Company Legal Name], [Registered Address]. Privacy questions: [contact email].