MiShadow LLC Privacy Policy

1. Our Approach to Your Family's Data

MiShadow stores the family context needed to make your vault useful: account details, vault membership, family relationships, family member profiles, stories, transcripts, thumbnails, media references, interview responses, time capsule metadata, and settings. Where possible, your original photos and videos can remain in storage you control, such as your own connected cloud provider.

We build MiShadow around a few promises: your media stays yours, you can export your data, we avoid lock-in, and we support family continuity over long timescales. This Policy describes the data we hold in order to deliver on that.

2. The Difference Between Your Media and MiShadow Data

MiShadow uses a hybrid storage model, and it matters for your privacy:

• Media you upload directly is stored in our first-party cloud storage (Google Cloud Storage) so we can display it, generate thumbnails, and help preserve it for you.

• Media you connect from an external provider, such as Google Photos or Dropbox, generally stays in that provider's storage. For connected media we store a reference and metadata — for example an identifier, a link, and a thumbnail — rather than necessarily holding the original file ourselves.

In all cases we store the surrounding context — names, dates, relationships, stories, transcripts, tags, and thumbnails — in our database, so your vault remains meaningful even as the underlying media moves or providers change.

3. Information We Collect

• Account data: your name, email address, and authentication identifiers. We use Firebase Authentication; you may sign in with email or with Google.

• Billing data: your subscription status and the customer and subscription identifiers from our payment processor, Stripe. Stripe processes your card details directly; we do not store full payment card numbers on our servers.

• Vault and family data: your vaults and their membership, family member profiles (such as names, dates, gender, biography, and profile photos), and the relationships between family members.

• Memories and media references: photos, files, and recordings you upload or connect; thumbnails; tags; titles, descriptions, and dates; and references to media held in your connected storage.

• Stories, transcripts, and search data: written stories, AI-assisted transcripts of recordings, and the search embeddings we generate from your content so you can find it again.

• Interviews: recorded interview sessions and the responses captured in them.

• Time capsules: time capsules and their attachments, including scheduled release information. Time capsule contents can be encrypted on your device before they reach us — see Section 6.

• Invitations and people: the invitations you send to family members and related contact details.

• Beneficiary and estate-planning data: beneficiaries, estate-planning status, and proxy-access designations you choose to record.

• Connected-storage data: when you connect an external provider, the connection metadata and access credentials we need to index your media on your behalf. We never publish or sell these credentials.

• Support and contact data: messages you send us, including the contents of contact forms.

• Usage and device data: basic information about how the Service is used, which may include your IP address, device or browser type, and pages viewed, used to keep the Service reliable and secure.

4. How We Use Your Information

• To create and operate your vault and provide the features you use.

• To transcribe recordings, generate descriptions and stories, and power search across your content.

• To detect and group faces (biometric processing) only after the vault owner turns on face recognition. Face recognition is off by default for every vault, is never applied without the owner’s explicit, recorded opt-in, and the owner can turn it off at any time. When it is turned off, new face processing stops and existing face-derived data enters our biometric deletion process. Turning it off does not delete your source photos or non-biometric family history.

• To process subscriptions and payments through Stripe.

• To send service messages, family invitations, and account or security notices.

• To secure the Service, prevent abuse, debug problems, and improve reliability.

• To respond to your support requests.

• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your family's private vault content to target advertising.

5. Service Providers and Third Parties

To run MiShadow we share data with service providers who process it on our behalf, only as needed to provide the Service:

• Google Cloud, for hosting and first-party media storage.

• Firebase (Google), for authentication.

• Stripe, for subscription billing and payment processing.

• OpenAI, for transcription and search embeddings.

• Anthropic, for AI-generated text such as story drafts and historical descriptions.

• Google Cloud Vision, for face detection — used only for vaults whose owner has explicitly turned on face recognition.

• Resend, for sending email.

• Any external storage provider you choose to connect, such as Google Photos or Dropbox, which holds the connected media you index.

We may also disclose information when required by law, to respond to lawful requests, or to protect the safety, rights, or property of our users, the public, or MiShadow. If MiShadow is involved in a merger, acquisition, or sale of assets, we will continue to protect your information and will notify you of any change in how it is handled.

6. How We Protect Your Information

We use industry-standard measures to protect your data, including encrypted connections (TLS) for data in transit and access controls that limit who can reach your information.

Payments are handled by Stripe, and we do not store full payment card numbers on our servers.

Time capsule contents and attachments can be encrypted in your browser before they are uploaded, using AES-256 encryption with a key derived from a password you choose. When you use this, MiShadow stores only the encrypted data — we cannot read the contents, and we cannot recover them if you lose the password. Please keep your time capsule passwords safe.

No method of electronic storage or transmission is perfectly secure, so while we work hard to protect your information, we cannot guarantee absolute security.

7. Family Members, Living People, and Children

MiShadow vaults often contain information about living relatives, including children, and about relationships that can reveal sensitive details about other people. You are responsible for having an appropriate basis to add information about other people and for respecting their wishes. If you believe information about you or your child has been added without an appropriate basis, contact us at support@mishadow.com and we will work with the vault owner to address it.

MiShadow accounts are intended for adults, and the Service is not directed to children. We do not knowingly collect account information directly from children.

8. Your Choices: Access, Export, and Deletion

• Export: A vault owner can export vault data — including the family tree, memory details, interviews, albums, and time capsules — as a structured JSON file. Original photos and audio are not embedded in that file; instead, the export can include temporary download links so you can save the underlying media yourself. This supports our no-lock-in promise. Because those links are time-limited, you should download your media promptly after exporting.

• Access and correction: You can view and edit much of your data directly in the Service, and you can contact us to request access to or correction of your information.

• Deletion: You can delete content and request deletion of your account and associated data. Some information may be retained where reasonably necessary for legal, security, or legitimate business reasons, and residual copies may persist in backups for a limited time before being overwritten.

• Connected storage: You can disconnect an external provider at any time. Media that lived in that provider remains under your control there.

9. Data Retention

We retain your information for as long as your account or vault is active, or as needed to provide the Service, and afterward only for as long as reasonably necessary for the purposes described here or as required by law. Because MiShadow is built for long-term preservation, vault content is kept until you delete it or close your account.

10. Keepsakes

Keepsakes is a separate app at https://keepsakes.mishadow.com, also operated by MiShadow LLC. A Keepsakes account is separate from a MiShadow family vault account. Sections 1 through 9 describe the family vault and do not apply to Keepsakes, except that Section 7 (family members, living people, and children) applies to both. Sections 11 through 13 apply to both.

Information Keepsakes collects:

• Account data: your name, email address, and password — or, if you choose to sign in with Google, the name, email address, and profile image Google shares for sign-in. Keepsakes uses Google only to sign you in and does not access other Google data.

• Items you catalog: photos of belongings and the descriptions, histories, stories, and other details you record about them.

• Recipients and family: the people you note as intended recipients of items, and the family members you invite, including their names and email addresses.

• Billing data: your subscription status and the customer and subscription identifiers from Stripe. Stripe processes your card details directly; we do not store full payment card numbers.

• Support and technical data: messages you send us, and basic technical information such as error reports, device or browser type, and IP address, used to keep Keepsakes working and secure.

How Keepsakes uses this information:

• To provide Keepsakes, including your catalog, family sharing, and exports.

• To help catalog items with AI. When you add a photo, the photo and related details may be processed by AI to suggest descriptions or categories. Suggestions can be wrong, so please review them.

• To process subscriptions through Stripe, send invitations and service messages, respond to support requests, secure the app, and meet legal obligations.

Service providers for Keepsakes:

• Abacus.AI, which hosts Keepsakes, stores its data and photos, and provides the AI features used for cataloging. Abacus.AI may use third-party AI model providers to perform that processing.

• Stripe, for subscription billing and payment processing.

• Google, if you choose to sign in with Google.

• Network and content-delivery providers used to serve the Keepsakes website, such as Cloudflare.

Your choices in Keepsakes:

• Export: You can export your Keepsakes catalog as a PDF or spreadsheet from within the app.

• Access and correction: You can view and edit most of your information in the app, or contact us for help.

• Deletion: To delete your Keepsakes account and its data, email support@mishadow.com from the address on your account. Residual copies may persist in backups for a limited time before being overwritten, and some information may be retained where reasonably necessary for legal, security, or legitimate business reasons.

We keep Keepsakes information while your account is active and afterward only as long as reasonably necessary for the purposes described here or as required by law. Keepsakes uses encrypted connections (TLS), but no method of electronic storage or transmission is perfectly secure. We do not sell your personal information, and we do not use your Keepsakes content to target advertising.

11. International Users

MiShadow is operated from the United States, and your information may be processed and stored in the United States or in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to facilities and service providers in those locations.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Updated on” date above, and we will provide additional notice for material changes where appropriate. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact Us

If you have any questions about this Privacy Policy or your data, you may contact us using the following information:

• MiShadow LLC

• Email: support@mishadow.com

• Mailing Address: 7533 S Center View CT, Ste N, West Jordan, UT 84084