The short version: your family's memories are yours. We use them to provide Narratrace, never sell them, and do not use private family content to train AI models. Closed accounts lose ordinary access and enter restricted pseudonymized archival retention as described below.
When you use Narratrace, we collect:
We do not collect payment information directly. Payments are handled by a third-party processor (Stripe) and we receive only a confirmation token.
We use the data you provide to:
We do not use your family's memories, voice recordings, photographs, or personal stories to train any AI model — ours or anyone else's. This is a firm commitment, not a policy that may change with a terms update.
All data stored in Narratrace is encrypted at rest and in transit using industry-standard encryption. Access to your data is restricted to you and members of your family you explicitly invite.
Narratrace is built on Supabase for data storage and uses row-level security plus server-side authorization and family roles to restrict access. Voice recordings and photographs are stored in private, access-controlled buckets.
Team access to private content is not part of ordinary support or product operation. Exceptional access, if required for security, legal, or recovery purposes, must be restricted, authorized, and audited. Automated systems process content only for requested product functions.
We share data with a small number of third-party services necessary to run Narratrace:
We do not sell, rent, or share your personal data with advertisers, data brokers, or any third party for commercial purposes.
You have the right to:
If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR, including the right to data portability and the right to object to processing. Contact us to exercise these rights.
Narratrace is designed for long-term preservation. Lapsed and Vault accounts retain read-only archive access while new creation is paused, subject to platform availability and the applicable plan terms.
Closing an account starts a 30-day grace period. After that period, ordinary sessions, invitations, public sharing, family access, and AI processing are revoked; direct account identifiers are replaced with restricted pseudonymous identifiers; and memories are scheduled for restricted archival storage. Because memory content may still identify people, we do not call this anonymous or deleted.
Exact backup, audit-log, and long-term archive retention schedules—and any legally required deletion exception—are governed by the approved retention policy for the user's jurisdiction. Contact us to exercise applicable privacy rights.
Time-locked letters scheduled for future delivery are retained and delivered on their scheduled date regardless of subscription status.
Narratrace is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. Memories about children (e.g. baby photos, letters to grandchildren) may be uploaded by adult account holders as part of family archives — this is governed by the same protections as all other data.
If we make material changes to this Privacy Policy, we will notify you by email at least 30 days before the changes take effect. Continued use of Narratrace after that date constitutes acceptance of the updated policy.
We will never change our commitment that your memories are never used to train AI. This commitment is not subject to revision.
Questions about this policy or your data can be submitted through our contact form. We respond to all privacy-related inquiries within 5 business days.