Privacy Policy
What this policy covers
This policy explains what HeirloomFile collects, why, and the choices you have. Last updated September 8, 2026.
Information we collect
Account information: your email address and, if you sign in with a provider such as Google, the profile data that provider shares (name and avatar). Content you enter: the asset references, notes, wishes, contacts, and check-in history you choose to store. Usage basics: standard server logs such as IP address and pages visited, used to keep the service secure and reliable.
- We do not collect or store passwords, private keys, recovery phrases, or credentials. The product is designed so these are never entered.
- We do not collect or store your card details. Payments are handled by Creem.
How we use information
We use your data to provide the Service: to keep your file accessible to you, to send check-in reminders, to notify contacts only in the way you have configured, and to respond to support requests. We do not sell your personal information.
Who processes data on our behalf
Hosting and database: Supabase (data stored in the United States region you selected). Deployment and edge delivery: Vercel. Payments: Creem (our merchant of record; Creem has its own privacy policy). Email delivery: a provider such as Resend, used only when you enable and receive transactional emails.
Cookies and local storage
We use essential cookies and local storage for sign-in sessions and to remember your language and login state. We do not use third-party advertising cookies on this site.
Security
Traffic is encrypted in transit (TLS). Data at rest is protected by our hosting providers. Because HeirloomFile does not hold credentials, a breach of our systems does not expose your passwords, because they are never stored. You are responsible for protecting your own account sign-in and for the safe storage of any access details you reference in your file.
Retention and deletion
We keep your data while your account is active. You can export your data at any time from your profile and delete individual entries. To delete your account and associated data, contact [email protected] from your registered email address; we handle deletion requests with verification to protect your file.
Your rights
Depending on where you live (including under the GDPR and CCPA), you may have rights to access, correct, export, and delete your personal data, and to object to or restrict processing. To exercise these rights, contact [email protected].
International transfers
HeirloomFile operates globally; your data may be processed in the United States and other locations where our providers operate. By using the Service you consent to this processing.
Changes and contact
We will update this policy as the Service changes and post the date of the latest revision. Questions: [email protected].