MiShadow LLC Privacy Policy

1. Our Approach to Your Family's Data

MiShadow stores the family context needed to make your vault useful: account details, vault membership, family relationships, family member profiles, stories, transcripts, thumbnails, media references, interview responses, time capsule metadata, and settings. Where possible, your original photos and videos can remain in storage you control, such as your own connected cloud provider.

We build MiShadow around a few promises: your media stays yours, you can export your data, we avoid lock-in, and we support family continuity over long timescales. This Policy describes the data we hold in order to deliver on that.

2. The Difference Between Your Media and MiShadow Data

MiShadow uses a hybrid storage model, and it matters for your privacy:

• Media you upload directly is stored in our first-party cloud storage (Google Cloud Storage) so we can display it, generate thumbnails, and help preserve it for you.

• Media you connect from an external provider, such as Google Photos or Dropbox, generally stays in that provider's storage. For connected media we store a reference and metadata — for example an identifier, a link, and a thumbnail — rather than necessarily holding the original file ourselves.

In all cases we store the surrounding context — names, dates, relationships, stories, transcripts, tags, and thumbnails — in our database, so your vault remains meaningful even as the underlying media moves or providers change.

3. Information We Collect

• Account data: your name, email address, and authentication identifiers. We use Firebase Authentication; you may sign in with email or with Google.

• Billing data: your subscription status and the customer and subscription identifiers from our payment processor, Stripe. Stripe processes your card details directly; we do not store full payment card numbers on our servers.

• Vault and family data: your vaults and their membership, family member profiles (such as names, dates, gender, biography, and profile photos), and the relationships between family members.

• Memories and media references: photos, files, and recordings you upload or connect; thumbnails; tags; titles, descriptions, and dates; and references to media held in your connected storage.

• Stories, transcripts, and search data: written stories, AI-assisted transcripts of recordings, and the search embeddings we generate from your content so you can find it again.

• Interviews: recorded interview sessions and the responses captured in them.

• Time capsules: time capsules and their attachments, including scheduled release information. Time capsule contents can be encrypted on your device before they reach us — see Section 6.

• Invitations and people: the invitations you send to family members and related contact details.

• Beneficiary and estate-planning data: beneficiaries, estate-planning status, and proxy-access designations you choose to record.

• Connected-storage data: when you connect an external provider, the connection metadata and access credentials we need to index your media on your behalf. We never publish or sell these credentials.

• Support and contact data: messages you send us, including the contents of contact forms.

• Usage and device data: basic information about how the Service is used, which may include your IP address, device or browser type, and pages viewed, used to keep the Service reliable and secure.

4. How We Use Your Information

• To create and operate your vault and provide the features you use.

• To transcribe recordings, generate descriptions and stories, detect faces (where enabled), and power search across your content.

• To process subscriptions and payments through Stripe.

• To send service messages, family invitations, and account or security notices.

• To secure the Service, prevent abuse, debug problems, and improve reliability.

• To respond to your support requests.

• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your family's private vault content to target advertising.

5. Service Providers and Third Parties

To run MiShadow we share data with service providers who process it on our behalf, only as needed to provide the Service:

• Google Cloud, for hosting and first-party media storage.

• Firebase (Google), for authentication.

• Stripe, for subscription billing and payment processing.

• OpenAI, for transcription and search embeddings.

• Anthropic, for AI-generated text such as story drafts and historical descriptions.

• Google Cloud Vision, for face detection, where that feature is enabled.

• Resend, for sending email.

• Any external storage provider you choose to connect, such as Google Photos or Dropbox, which holds the connected media you index.

We may also disclose information when required by law, to respond to lawful requests, or to protect the safety, rights, or property of our users, the public, or MiShadow. If MiShadow is involved in a merger, acquisition, or sale of assets, we will continue to protect your information and will notify you of any change in how it is handled.

6. How We Protect Your Information

We use industry-standard measures to protect your data, including encrypted connections (TLS) for data in transit and access controls that limit who can reach your information.

Payments are handled by Stripe, and we do not store full payment card numbers on our servers.

Time capsule contents and attachments can be encrypted in your browser before they are uploaded, using AES-256 encryption with a key derived from a password you choose. When you use this, MiShadow stores only the encrypted data — we cannot read the contents, and we cannot recover them if you lose the password. Please keep your time capsule passwords safe.

No method of electronic storage or transmission is perfectly secure, so while we work hard to protect your information, we cannot guarantee absolute security.

7. Family Members, Living People, and Children

MiShadow vaults often contain information about living relatives, including children, and about relationships that can reveal sensitive details about other people. You are responsible for having an appropriate basis to add information about other people and for respecting their wishes. If you believe information about you or your child has been added without an appropriate basis, contact us at support@mishadow.com and we will work with the vault owner to address it.

MiShadow accounts are intended for adults, and the Service is not directed to children. We do not knowingly collect account information directly from children.

8. Your Choices: Access, Export, and Deletion

• Export: A vault owner can export vault data — including the family tree, memory details, interviews, albums, and time capsules — as a structured JSON file. Original photos and audio are not embedded in that file; instead, the export can include temporary download links so you can save the underlying media yourself. This supports our no-lock-in promise. Because those links are time-limited, you should download your media promptly after exporting.

• Access and correction: You can view and edit much of your data directly in the Service, and you can contact us to request access to or correction of your information.

• Deletion: You can delete content and request deletion of your account and associated data. Some information may be retained where reasonably necessary for legal, security, or legitimate business reasons, and residual copies may persist in backups for a limited time before being overwritten.

• Connected storage: You can disconnect an external provider at any time. Media that lived in that provider remains under your control there.

9. Data Retention

We retain your information for as long as your account or vault is active, or as needed to provide the Service, and afterward only for as long as reasonably necessary for the purposes described here or as required by law. Because MiShadow is built for long-term preservation, vault content is kept until you delete it or close your account.

10. International Users

MiShadow is operated from the United States, and your information may be processed and stored in the United States or in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to facilities and service providers in those locations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Updated on” date above, and we will provide additional notice for material changes where appropriate. Your continued use of the Service after an update means you accept the revised Policy.

12. Contact Us

If you have any questions about this Privacy Policy or your data, you may contact us using the following information:

• MiShadow LLC

• Email: support@mishadow.com

• Mailing Address: 7533 S Center View CT, Ste N, West Jordan, UT 84084