Privacy

Pre-launch data-handling summary

This draft describes the current development build. It is not a finalized release privacy policy. The previous policy address is unavailable; a release review is still required.

Your collection

Belonging descriptions, stories, photos, attachments, connections, and journey records are stored in the app’s local collection. The collection is not automatically synchronized to CloudKit. On-device speech recognition is used for supported story transcription; microphone audio is not stored.

Optional transfers through iCloud

If you choose to send a Piece to another person, the transfer feature creates an encrypted package for that selected Piece in a private Apple CloudKit share addressed to the recipient’s iCloud account. The rest of your collection is not included. The package includes the selected Piece and records marked to travel with it; private notes, current location, and private records are excluded.

The recipient’s email address or phone number is used to look up their iCloud account. The local transfer record keeps a masked address, not the full lookup address. Cleanup is designed to remove the temporary share after acceptance, decline, cancellation, or expiry; failed cleanup may require a retry. Apple processes the iCloud transfer under its own policies.

Exports, backups, and access

You can choose to export PDFs or create an encrypted backup and save it to a location you select. Copies you export are controlled by you and any storage provider you use. Keep your backup password safe: the app cannot recover it.

The private word controls access inside the app; it is not the encryption key for the collection. Device file protection and separately encrypted backup files have different roles.

Apple services and purchases

The app uses Apple system features for camera and photo selection, on-device speech, biometric access, and StoreKit purchases where enabled. Apple handles purchase processing. Device backups and exported files may exist outside the app according to your settings.

Before release

The release policy must confirm the final transfer configuration, retention and cleanup behavior, permissions, and purchase disclosures. Until then, this page is a pre-launch summary rather than a claim that those release checks are complete.