Skip to content

Trust Center

Your archive stays under your control

Who owns the data, who sees the material, how AI works, what happens when you delete something, and which export features already exist — no legal fog.

  • The data is yours

    Heritage stores and structures your family archive but never becomes the owner of your photos, documents, stories, or recordings.

  • Private file storage

    Files are stored in a private storage bucket. There are no direct public links to private photos or documents — only members of the family space can access them.

  • Access within the family

    Owner, Admin, Member, Viewer, and Invitee each get different permissions. Medical information is restricted more tightly than regular family material.

  • AI isn't the source of truth

    AI produces drafts and suggestions. Facts only enter the archive once a person confirms them.

  • Medicine, handled carefully

    Heritage doesn't diagnose, prescribe treatment, or replace a doctor. The medical AI stays a cautious, clearly-labeled suggestion.

  • Deletion, export, and an activity log

    Deleted data disappears from the app immediately; backups are cleared according to retention rules. Important actions are recorded in a log.

Who sees family material

Family tree
Family members
Viewing and editing depend on the assigned role.
Media
Members with access
Access is determined by the role in the family space.
Health
Restricted access
Not a diagnosis and not medical advice.
Personal sections
Owner only
The personal vault is separate from the family space.
  • Deletion and export

    Deleted data stops being accessible in the app immediately. Backups are cleared according to retention policy. Archive data can be downloaded in Settings (ZIP or GEDCOM); photo and document files are exported as a separate one-time service; requests are logged.

  • AI and your data

    We don't use family data to train AI models. When a request is handled by an external AI provider, Heritage sends only the data the request needs, and applies masking/redaction wherever that's implemented.

    Go to the AI assistant
  • How your data is protected

    Your password is stored as a bcrypt hash, never in plain text. Your two-factor authentication (2FA) secret and sensitive medical records are encrypted with AES-256-GCM. The connection to the site runs over TLS. You can turn on 2FA in your account settings.