Trust, in plain words
You are considering giving us the most irreplaceable thing your family has. That deserves clearer language than a privacy policy. Here is the deal, in human terms; the formal version exists too, and it says the same thing.
- Your family owns its memories. Export everything, any time.
- Private to the people you invite. No public profiles, nothing searchable.
- No ads. Your memories are never sold and never used to train AI models.
- Delete your account and everything goes with it, from one place.
- Stored in the European Union, encrypted in transit and at rest.
Your family owns its memories
Every recording, photo and note your family adds belongs to your family. Not to us. You can export the lot whenever you like, in ordinary formats: audio files, images, text. Leaving must always be possible and easy, because an archive you cannot take with you is not a keepsake, it is a trap.
Private to your family, and only your family
Each family archive is an island. The only people who can see it are the people your family invites, each with their own sign-in. There are no public profiles, nothing appears in search engines, and nothing is ever shared between families.
Nobody at Moments browses your archive. Administrative access is restricted to a single named account and is used only to help when you ask for support or when the law genuinely requires it. We do not yet keep a record of what that account looks at; we are building one, and until it exists we would rather say so. The privacy policy covers this in section 11.
No ads. Never sold. Never used to train AI.
Families will pay for Moments. Ads never will. That settles most privacy questions before they are asked: we have no reason to profile you, sell your data or show you anything except your own memories.
The AI features work for your archive, they do not learn from it for anyone else's benefit. Transcription and the Navigator's answers use AI providers under contracts that forbid training on your data. Your grandmother's stories will never make a chatbot smarter.
Encryption, in human terms
Your memories travel over encrypted connections, the same padlock your bank uses, and they are stored encrypted on disk in the data centre. In practice: someone snooping on cafe wifi sees nothing readable, and someone who stole a physical drive would hold scrambled noise.
One honest limit: Moments is not end-to-end encrypted, because our servers need to process your recordings to transcribe them and to let the Navigator answer questions. Services that claim end-to-end encryption and searchable AI answers at the same time are stretching one of the two. We choose to say it straight and to protect the processing side with strict access control instead.
Export and deletion are real, not buried
Export lives in the app, not behind a support ticket. Deletion is the same: one place in settings removes your account, your memories, your media and your entries in the AI index. The steps and the timeline are public on the delete your account page.
Stored in the European Union
Family memories are stored in EU data centres and protected by the GDPR, for every family, wherever in the world you live. If any of this ever changes, we will say so before it happens, not after.
Questions we still owe you
Pricing during the pilot, and the formal audit trail as we grow, are still being settled. We would rather tell you that than imply everything is finished. The FAQ holds the current answers, and info@myfamilylegacy.ai reaches people who reply.