What we collect, why, who else can see it, and how to get it all back. This describes the service as it is actually built.
We do not collect payment card numbers. A payment provider handles those and we never see them. We do not use advertising trackers, and there is no third-party analytics script in the app.
If you choose Continue with Google, Google shares your name, your email address and your profile picture with us, and confirms that the email is yours. That is all we ask Google for. We do not request access to your Gmail, Drive, Calendar, Contacts or any other Google data through sign-in.
We use those three things only to create and identify your account, to show your name and picture in the app, and to let you sign back in. They are not used for advertising, not sold, not shared with anyone except the hosting providers named below, and not used to train AI models.
Legacy Lifestyles's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time from your Google Account under Security, Third-party apps. Deleting your account here removes the copy we hold.
To show your archive back to you, to sync it between your devices, to generate the prompts and summaries you asked for, to let the people you invited contribute, and to hand it to your executors when the conditions you set are met. That is the whole list.
Your archive is stored server-side. Your device keeps a copy so the app works offline; signing out erases that copy from the device.
The vault sits in a separate, private area of the database that the public API cannot reach at all, it is only accessible through functions that enforce the executor rules.
Until you delete it, or in perpetuity by design after activation. That is the point of the product. Deleting your account removes your rows and files. Backups roll off on their own schedule, normally within 30 days.
Accounts for under-13s may only be created and operated by a parent or guardian, whose email we record. Prompts and AI features are filtered by life stage so a child is never asked about work, mortality, or regret.
Recordings of your face and voice are treated as the most sensitive thing here. They are used to build an avatar only with your explicit, separate consent, given while you are alive. Voice cloning and freeform speech (an avatar saying words you never said) require their own grants on top of that.
Anything generated from your likeness is watermarked as synthetic.
No executor, family member, or employee of ours can grant these permissions in your place after you die. If the consent is not on file, the feature stays off. Permanently.
Access is scoped per account at the database level rather than in application code, so a bug in the app cannot hand one user another user's rows. Files are served through short-lived signed URLs rather than public links.
Vault contents are not yet encrypted on your device before upload. We are telling you that plainly rather than implying more protection than exists; it is on the roadmap and the app flags it in-place.
Material changes are announced in the app before they take effect.