Trust Center
Your archive stays under your control
Who owns the data, who sees the material, how AI works, what happens when you delete something, and which export features already exist — no legal fog.
The data is yours
Heritage stores and structures your family archive but never becomes the owner of your photos, documents, stories, or recordings.
Private file storage
Files are stored in a private storage bucket. There are no direct public links to private photos or documents — only members of the family space can access them.
Access within the family
Owner, Admin, Member, Viewer, and Invitee each get different permissions. Medical information is restricted more tightly than regular family material.
AI isn't the source of truth
AI produces drafts and suggestions. Facts only enter the archive once a person confirms them.
Medicine, handled carefully
Heritage doesn't diagnose, prescribe treatment, or replace a doctor. The medical AI stays a cautious, clearly-labeled suggestion.
Deletion, export, and an activity log
Deleted data disappears from the app immediately; backups are cleared according to retention rules. Important actions are recorded in a log.
Who sees family material
- Family tree
- Family members
Viewing and editing depend on the assigned role. - Media
- Members with access
Access is determined by the role in the family space. - Health
- Restricted access
Not a diagnosis and not medical advice. - Personal sections
- Owner only
The personal vault is separate from the family space.
Deletion and export
Deleted data stops being accessible in the app immediately. Backups are cleared according to retention policy. Archive data can be downloaded in Settings (ZIP or GEDCOM); photo and document files are exported as a separate one-time service; requests are logged.
AI and your data
We don't use family data to train AI models. When a request is handled by an external AI provider, Heritage sends only the data the request needs, and applies masking/redaction wherever that's implemented.
Go to the AI assistantHow your data is protected
Your password is stored as a bcrypt hash, never in plain text. Your two-factor authentication (2FA) secret and sensitive medical records are encrypted with AES-256-GCM. The connection to the site runs over TLS. You can turn on 2FA in your account settings.
The legally binding terms are described in the Personal Data Processing Policy and the Terms of Service.