Heirloom Privacy Policy

Effective date: November 7, 2026
Developer: The Uncharted Co.

Heirloom is designed to help keep your family's memories private. Your saved content remains yours.

Storage And Icloud

Heirloom stores your journal content on your device. If you enable iCloud synchronization or accept a shared journal, relevant content is also processed and stored through Apple's CloudKit service. Private journal content is kept separate from content you choose to share. The Uncharted Co. cannot view private CloudKit journal records through the developer console. This restriction does not apply to the optional developer-accessible records described below.

Imported photos, videos, audio, text, links and documents are handled like other saved content. They may be included in private or shared iCloud synchronization and in exports you choose to create. We do not sell your information or use it for advertising or cross-app tracking. We do not use third-party advertising or analytics SDKs.

Optional Roadmap And Invitation Records

If you use Roadmap Voting or submit a feature request, Heirloom sends your votes, priorities, request text and a CloudKit account identifier to a developer-accessible CloudKit database. We use these records for app functionality and to understand feature interest. Roadmap votes and feature requests are stored in a public database and may be read by other app users, including the text of feature requests. Do not include private family information in a request. Records are retained while useful for planning unless deleted earlier; contact us about deletion.

Legacy invitation links and short codes can use a public CloudKit registry containing invitation routing information, such as the family display name, creator's CloudKit identifier, share links, zone references, invitation dates, status and usage counts. These are not memory or media records. Public-database records are developer-accessible and may be readable by other app clients according to the configured CloudKit permissions. Native CloudKit sharing still determines who can access the linked journals. Do not treat a family display name or an invitation code as secret personal storage.

Shared Journals And Exported Copies

Shared child journals contain the content authorized for that journal. Locked memories are excluded from child sharing, and accepting a journal does not by itself expose the owner's private Recipe Box or full private family tree. Existing public invitation links provide their disclosed access to anyone able to use the link; named invitations are restricted to the invited iCloud accounts. The journal owner manages access, and permissions determine what participants can change.

When you export or send a memory, book, backup or other file, the recipient or destination service receives the selected content. Copies already saved or forwarded outside Heirloom cannot be recalled by revoking journal access. Review the contents before sharing. Destination services have their own privacy policies.

Upcoming App Update — Not Yet Released

Household-tree publication has a separate review and explicit approval covering structural person and relationship fields. Private notes, contact details, photos and face descriptors are not included in that household projection. Recipe-copy sharing creates an independent private import rather than a live shared Recipe Box. A shared household Recipe Box is not yet available.

Face Matching, Speech And Maps

Family-photo matching runs on your device using saved family-member reference photos and mathematical face descriptors. These references are part of your stored private app data and can be included in your private iCloud synchronization and backups. They are not sent to an external face-recognition service or included in household-tree records. Removing the reference photo clears the associated enrollment in the profile editor; previously exported backups or copies are separate. Matching can be wrong; you can review and change suggested tags. This feature does not authenticate your identity.

If you choose audio transcription, Apple's Speech service may process audio on Apple's servers; the current app does not require on-device-only transcription. Maps, address/place searches and reverse geocoding use Apple services and may send the search text or relevant location to Apple. Manual location selection does not require permission to read your current GPS location. Apple's policies govern its service processing.

Reminders, Diagnostics And Deletion

Personal reminders are scheduled on your device. Apple push notifications may also signal iCloud changes so the app can refresh shared content. Heirloom keeps local operational diagnostics; if you deliberately export diagnostics or send them to support, review them before sending.

You can delete content using Heirloom's controls and manage synchronized data using the available in-app and Apple account tools. Removing the app does not necessarily delete iCloud content, recovery copies or files already shared elsewhere. Separate saved exports remain under the control of their holder. Contact hello@theunchartedco.studio for questions about developer-accessible roadmap or invitation records and deletion requests.

Purchases

Apple processes purchases and manages billing. Eligible customers may receive the introductory free trial configured for their selected recurring subscription; the App Store purchase sheet shows the applicable offer and renewal terms. Monthly and Annual currently have a one-week free introductory offer configured. Lifetime is a one-time purchase and has no recurring trial. Subscription expiry changes access to applicable paid capabilities, not ownership of previously saved memories.

DEVICE PERMISSIONS
Heirloom may request access to your camera, photo library, microphone, speech recognition, contacts, location, notifications, or Face ID when needed for a feature you choose. Granting a permission does not itself send information to The Uncharted Co. Saved content and Apple service processing are described above.

Children'S Privacy

Heirloom is intended for parents, guardians, and other adults preserving family memories; it is not directed to children. We do not knowingly collect personal information directly from children. Adults should not include information about a child or other sensitive information in Roadmap feature requests.

Contact

If you have questions about privacy, please contact us at hello@theunchartedco.studio. We are happy to assist.

Changes To This Policy

We may update this policy as Heirloom changes. We will revise the effective date when we do. Material changes will be communicated through the App or another appropriate channel.