Privacy Policy

Draft — pending legal review

This is a plain-language draft. It has not yet been reviewed by a lawyer and may change.

The short version

Your letters and health notes belong to you. Nothing is shared unless you choose to share it, and you can change your mind at any time.

What we keep

• Your name, email and date of birth, so you can sign in and we can confirm you are 18 or older.
• Letters, videos and photos you create.
• Health notes about you or relatives, and your family tree.
• Messages, comments and reactions you send to linked relatives.
• Reminders you set (they're off unless you turn them on).

Health information and your consent

Health notes are sensitive. By adding them, you agree that MISLU stores them for you. Every health note starts hidden. It is only shown to someone if you press Share, and only to the linked relatives you choose. You can switch any note back to Hide, or opt out of family health entirely, at any time. When you opt out, nothing about your health is shown to anyone — including notes other relatives wrote about you.

MISLU may point out topics that appear more than once in a family as "worth discussing with your doctor". This is never a diagnosis or medical advice.

Sharing controls

• Relatives are only linked when both of you accept an invitation.
• Linked relatives see only what has been shared with them.
• Whoever adds a detail about an ancestor decides who sees it.
• Letters stay private unless you choose to send one.
• You can block, mute or report anyone, and leave the family tree quietly at any time.

Photos

Photos are made smaller on your device before upload, and we don't keep the full-size original. Every photo is private until you choose which linked relatives can see it; photos are never public. Only you can set your own profile photo. Photos you mark as under 18 always stay private. You can delete any photo you added at any time.

Legacy contacts

You can choose trusted people, 18 or older, to receive your keepsakes if you pass. You choose exactly what each person gets — letters, voice and video recordings, photos, and optionally health notes you've already shared — and you can write a final letter only she will read. You can change or remove these at any time.

To ask for access, a legacy contact must upload proof of passing, such as a death certificate. Your account is told, and there is a 14-day wait during which you can cancel. A MISLU administrator then reviews the proof. Only administrators see that proof. If approved, she gets a read-only space with only what you chose; nothing else is ever shared, and nothing can be changed.

Your rights: export and delete

In Settings you can download everything you've added (Export my data) or permanently remove your account and everything in it (Delete my account). Deleting cannot be undone.

What we don't do

We don't sell your information and we don't show ads based on it.

Questions

Contact details will be added before this policy is final.