Privacy Policy

What we collect

• Account information — your name and email address when you create an account.
• Recordings — the video, audio, and written responses you create inside the app.
• Family information — names and relationships you add to your family tree, including any GEDCOM files you import.
• Trusted contacts and next-of-kin — names and email addresses you designate to receive your legacy recordings.
• Delivery preferences — dates, recipients, and delivery conditions you set for your recordings.
• Lists and recipes — any personal lists (favorites, memories, etc.) or recipes you save.
• Payment information — handled entirely by Stripe. We never see or store your card number.
• Usage data — basic app activity (screens visited, recording counts) used only to improve the product. We do not sell or share this.

How we use your information

• To store and play back your recordings.
• To deliver your recordings to the recipients you designate, on the schedule you set.
• To send periodic check-in emails if you have legacy recordings — confirming you are still with us. If we don't hear back after multiple reminders, your trusted contacts are notified per your instructions.
• To send transactional emails: delivery notifications, account confirmations, receipts.
• To process your subscription payments.
• We do not use your recordings or family data to train AI models. We do not sell your data. We do not show you ads.

How your data is stored

We use the following trusted third-party services to operate The Attic:

• Supabase (supabase.com) — database, authentication, and real-time features. Data stored in the United States.
• Cloudflare R2 and Stream (cloudflare.com) — video and audio file storage and delivery. Cloudflare R2 stores data with 11 nines of durability. Data stored across Cloudflare's global network.
• Resend (resend.com) — transactional email delivery.
• Stripe (stripe.com) — payment processing. Stripe is PCI-compliant and handles all payment data directly.

Your recordings are encrypted in transit (HTTPS) and at rest. We do not share your recordings with anyone other than the specific recipients you designate.

How we protect your recordings

A recording in The Attic may be the only copy of an irreplaceable moment. We treat it that way. The precautions we take include:

• Encryption everywhere — all data is encrypted in transit using TLS/HTTPS and encrypted at rest on our storage providers.
• Durable, redundant storage — recordings are stored on Cloudflare R2, which replicates every file across multiple facilities and is designed for 99.999999999% (11 nines) durability. A single hardware failure cannot lose your recording.
• No lost uploads — while a recording is being uploaded, the app keeps a local copy on your device until durable storage confirms the file is safe. Interrupted uploads (a dropped call, low battery, a backgrounded app) resume rather than lose footage.
• Strict access controls — every recording is protected by row-level security tied to your account. Other users — including family members — can only see a recording if you have explicitly shared it with them.
• Least-privilege staff access — Attic staff cannot browse your recordings. Access is limited to what is strictly necessary to resolve a support issue you have initiated, or where required by law, and is logged.
• Isolated payment handling — card details go directly to Stripe and never touch our servers.
• Verified legacy scheduling — scheduled and legacy deliveries are recorded server-side and confirmed, so a delivery you set up is not silently dropped.

No online service can promise perfect security, but we design every part of The Attic around the assumption that what you have entrusted to us cannot be replaced.

Data breach notification

If we ever discover a security breach that affects your personal information or recordings, we will notify affected users by email without undue delay, and comply with applicable breach-notification laws in your jurisdiction.

International data transfers

The Attic's providers store and process data primarily in the United States. If you access The Attic from outside the United States, you understand your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

Who can see your recordings

• Private recordings are visible only to you.
• Family recordings are visible to members of your family plan.
• Scheduled recordings are delivered to specific recipients on the date you set.
• Legacy recordings are locked until your trusted contacts activate delivery after your passing.
• Attic staff do not routinely access your recordings. We may access or review content only to resolve a support issue you initiated, to comply with the law, or to investigate a report or signal of prohibited use (see "Content moderation" below).

Content moderation

Your recordings are private by default and we do not routinely monitor them. To keep The Attic lawful and safe, we may use automated scanning and periodic spot checks, and we act on reports, to detect content that is illegal or violates our Terms — such as child sexual abuse material, which we report to the National Center for Missing & Exploited Children (NCMEC) and law enforcement as required by law. When we act on content, we may remove it, hold a delivery, or suspend an account, and we may preserve related data as the law requires. You can report content in the app or at abuse@intheattic.space.

Your rights

You can, at any time:

• Export your data — from Account settings, request a full export of your profile, recordings, lists, and family data. You'll receive a download link by email.
• Delete your account — from Account settings. This permanently deletes your recordings, profile data, and all scheduled deliveries. This action cannot be undone.
• Correct your information — update your name, email, and contact details in Account settings at any time.
• Opt out of check-in emails — you can disable the dead man's switch check-in system in Account settings if you prefer to document your wishes elsewhere.

EU residents have rights under the GDPR including access, rectification, erasure, and data portability. California residents have rights under the CCPA. To exercise any of these rights, email privacy@intheattic.space.

Children

The Attic is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at privacy@intheattic.space and we will delete the account promptly.

Data retention

We retain your data as long as your account is active. If your subscription lapses, your recordings are moved to a read-only archive state — they are not deleted. You will receive email notice before any data is deleted due to inactivity. You can request deletion at any time.

Changes to this policy

If we make material changes to this policy, we'll notify you by email and update the date at the top of this page. Continued use of The Attic after changes take effect constitutes acceptance.

Contact

Questions about this policy: privacy@intheattic.space