Privacy Policy

Welcome to My Heirloom (the "App"). We respect your privacy and are committed to protecting it. This App is available on iOS (Apple App Store) only.

1. Information We Collect

The App and our website may collect limited personal and technical information needed to provide core functionality.

Information you provide:
- Email address when you subscribe on our website (for billing, receipt, and linking your subscription to the App).
- User content such as optional photos and heritage-related inputs you choose to share. Photos for AI features are processed by us and OpenAI, Inc. via our backend to generate the feature you requested. Family Tree photos are stored for display and sync only and are not sent to AI providers. We do not use user content for unrelated profiling.

We do not use email-and-password registration in the App. We do not require you to create or store an app login password.

If you install from the App Store without a web purchase, we do not collect your email. We assign an anonymous Firebase user ID to provide core App functionality.

Account and identity (Firebase Authentication):
- We use Google Firebase Authentication to assign a unique user identifier to your account.
- Your email (from web checkout or prior account linking) is associated with that identifier in our backend (Firestore) to store subscription status, heritage report metadata, and app settings.
- Sign-in to the App after a web purchase uses secure, short-lived tokens and install-matching signals—not a reusable password.

Account deletion:
- You can delete your account at any time in the App under Settings → Delete Account. This removes your Firebase account and associated app data on our servers (subject to legal retention).

Install and activation (web to app):
- When you tap Download after checkout, we may record limited device signals (such as screen size, time zone, language, and a pseudonymous install intent) to help match your web purchase to your App install. We do not use this for unrelated profiling.

Automatically collected:
- Device and diagnostics data (app version, device model, OS version, crash logs).
- Basic usage data (feature usage, interactions, timestamps).
- Purchase and subscription state via Apple App Store, Stripe (website), and RevenueCat.
- Attribution and analytics data via AppsFlyer, including advertising attribution and marketing measurement.

2. Push Notifications

We may offer push notifications in a future update for reminders, updates, and product messages. If enabled, you can disable notifications at any time in your device settings.

3. Purchases and Payments

Premium access is available via auto-renewable subscriptions through the Apple App Store:

- Weekly Subscription: $9.99 USD/week, with a free trial or introductory price where offered (as shown in the App before purchase).

Actual prices may vary by country/region, local currency, taxes, and App Store pricing rules. Final price is shown before purchase confirmation.

Payments on the website are processed by Stripe. In-app purchases are processed by the Apple App Store. We do not directly collect or store full payment card details.

Subscription status and purchase entitlement are managed via RevenueCat and our backend (Firebase / Firestore). RevenueCat may process pseudonymous user identifiers, purchase metadata, and limited device-level data for purchase validation, fraud prevention, analytics, and service reliability.

4. How Heritage Data Is Stored

- Heritage preview results and related metadata are stored on our server-side infrastructure (api.heirloomfamily.us, EU).
- In the App, we store references and metadata for your reports and saved content.
- Retention varies by feature; see Section 5. Most AI-generated results and stored photos remain until you delete your account in Settings → Delete Account.
- Ethnicity analysis does not permanently store the uploaded photo on our servers.
- Results are AI-estimated previews for reflection and entertainment—not DNA, genetic, or genealogical records.

5. Photos, Face Data, and AI Processing

My Heirloom does not collect face data as a separate biometric category. We do not create or store face embeddings, face templates, or other biometric identifiers.

When you choose to upload or take a photo for an optional feature, the image may contain facial features. That photo is used only for the feature you selected.

AI features (Ethnicity, Photo Restoration, AI Colorization, Baby Generator, Generations, Faith Hero Match): Your photo is sent to our secure backend at api.heirloomfamily.us (hosted in the EU) and then to OpenAI, Inc. for automated processing to generate your requested result. For Faith Hero Match, your quiz answers are also sent to our backend; quiz matching runs on our server and is not sent to OpenAI. We do not sell your photos. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, unless longer retention is required by law.

Family Tree photos: Member photos you choose to save are uploaded to our backend and may also be stored in Google Firebase Storage. These photos are used only to display and synchronize your family tree. They are not sent to OpenAI or any other AI provider, and we do not perform facial recognition on them.

Retention: AI-generated results and stored photos are kept while your account is active and are deleted when you delete your account in Settings → Delete Account, except where law requires limited retention. Ethnicity analysis does not permanently store the uploaded photo on our servers.

Third-party AI provider: OpenAI, Inc. (AI features only). All AI requests are routed through our backend; the app does not contact OpenAI directly.

6. Data Security

We use industry-standard safeguards, including encryption in transit and access controls, to protect data.
No method of transmission or storage is 100% secure.

7. Sharing Your Information

We do not sell your personal data.
We may share limited data with service providers strictly to operate the App and website, including:
- Google Firebase (Authentication, Firestore database, and related infrastructure)
- Stripe (website payments)
- OpenAI, Inc. (AI photo processing, via our backend api.heirloomfamily.us)
- Infrastructure, analytics, and monitoring providers
- RevenueCat for subscription state management
- AppsFlyer for analytics, fraud prevention, advertising attribution, and marketing measurement
- Authorities where required by law

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your data, and to withdraw consent where applicable.

You can delete your account in the App under Settings → Delete Account, or contact us at info@maverix.agency.

9. Children's Privacy

The App is not intended for children under 13.
We do not knowingly collect personal data from children under 13.

10. Third-Party Services

The App integrates with third-party services such as OpenAI, Inc. (for optional AI photo features, routed through our backend), RevenueCat, and AppsFlyer.
These services may process data under their own terms and privacy policies.

11. AppsFlyer Attribution and Tracking

We use AppsFlyer to measure installs, campaign performance, and in-app events. AppsFlyer may process device identifiers and event data for analytics, fraud prevention, and advertising attribution. Where required by applicable law (including on iOS), tracking is only performed where user consent has been granted.

12. International Data Transfers

Your data may be processed in countries other than your country of residence.
Where required, we apply appropriate safeguards under applicable data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Updates become effective when posted at https://heirloomfamily.us/privacy/ or in the App.

14. Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: info@maverix.agency
Company: Maverix Agency OÜ
Registered office: Katusepapi tn 6-502, Tallinn, Estonia 11412