Heiro Privacy Policy

Effective date: 13 October 2026

Heiro is a private family memory app that helps people build family trees, save photos and voice memories, invite relatives, and use AI-assisted tools to explore family stories. This Privacy Policy explains what information we collect, why we use it, who may receive it, and the choices you have.

Who We Are

Heiro is operated by Ross Strauss. For privacy questions, data requests, or safety concerns, contact us at linebreakers@outlook.com.

Information We Collect

We collect information that you provide, information created through your use of the app, and limited technical information needed to operate and secure Heiro.

• Account information, such as your email address, authentication user ID, sign-in status, and password reset events. We do not store your plain-text password.
• Profile and family tree information, such as names, display names, profile photos, relationships, family groups, home family selection, invite codes, invite status, and family membership records.
• Family memory content you choose to add, including written memories, answers, captions, dates, photos, audio recordings, voice notes, transcripts, vault details, and related metadata.
• AI interaction data, such as prompts, selected memory context, generated responses, transcripts, embeddings, usage counters, and technical logs needed to provide and monitor AI features.
• Media and file information, such as file names, file type, file size, upload path, storage bucket, timestamps, and access permissions.
• Device and technical information, such as app version, platform, session state, error logs, security events, usage limits, and diagnostic information.
• Subscription, entitlement, and beta access information, such as whether a family has free, beta, or paid access. Apple processes App Store subscription payments. We do not receive your full payment card details.
• Safety information, including reports you submit, their reasons and details, member blocks, review decisions and records needed to prevent abuse.

Sensitive Family Content

Heiro may contain highly personal family information, including photos, voice recordings, stories about living or deceased relatives, family relationships, and memories involving children. You should only upload content that you have the right to use and share. You are responsible for choosing who you invite into a family space and for making sure uploaded content is appropriate for those family members.

How We Use Information

• To create, authenticate, and manage user accounts.
• To create and manage vaults, family trees, family groups, invites, relationships, memories, and family feeds.
• To store, display, organize, and share family content with the family members who are allowed to access it.
• To provide AI-assisted features, including memory chat, suggested prompts, transcription, search, summaries, and family context.
• To enforce free, beta, and paid usage limits, including storage, photo, voice note, memory, invite, and AI usage limits.
• To process subscriptions and restore access to paid features when App Store billing is enabled.
• To protect the app, prevent abuse, investigate errors, detect misuse, improve reliability, and maintain service security.
• To comply with legal obligations, enforce our terms, and respond to lawful requests.

Family Sharing And Invites

Heiro is designed for private family sharing. If you create or join a family group, authorized family members may be able to see family tree information, vault content, memories, photos, voice notes, AI-assisted content, and related details depending on their access. Invite codes and family links should be treated as private. If an invited person joins a family, they may see information already shared in that family space.

AI Features

Heiro uses AI services to help with memory conversations, transcription, search, and related features. AI output may be inaccurate, incomplete, or inappropriate. Do not rely on AI responses for legal, medical, financial, safety, or emergency advice.

AI processing is optional. Before enabling it, Heiro asks for your explicit permission to send relevant content to OpenAI. This may include your questions, saved profile and family memory text, transcripts, and audio recordings for transcription. The server checks your account's permission before processing an AI request. You can continue saving and reading memories and recordings without enabling AI.

You can withdraw permission in the app's Settings under AI data permission. Withdrawal prevents future AI requests; it cannot recall content already processed. We retain your permission choice and policy version. We try to limit the information sent to what is needed for the feature. Only use AI with family content you are entitled to share for this purpose.

For voice transcription, we also retain a fingerprint of the audio, its measured duration, processing status and transcription result to avoid submitting the same recording repeatedly. These processing records are removed when the requesting account is deleted; transcripts deliberately saved to shared legacy profiles follow the shared-content retention rules below.

Safety Reports And Review

Authorized support reviewers may inspect reported content and relevant records to investigate abuse. Reports and review records are not shared with other family members. A report does not automatically delete a memory. We may restrict content or an account following review; this cannot recall copies already downloaded by someone else.

To request a review of a restriction or removal of personal information, contact linebreakers@outlook.com. Please provide a report reference if available, rather than emailing private family media. Report-alert emails sent to our support inbox contain only a report reference and review instructions, not the report narrative, photos or recordings.

Service Providers

We use service providers to operate Heiro. These providers may process information on our behalf as needed to provide, secure, and improve the app.

• Supabase provides authentication, database, storage, Edge Functions, logs, and related backend services.
• Resend sends account emails and report-reference alerts. It processes the recipient address, email content and delivery records needed to send those messages.
• OpenAI provides AI-assisted chat, embeddings, transcription, and related AI processing.
• Apple provides TestFlight, App Store distribution, subscriptions, purchases, crash/feedback tools, and app review services.
• Google Firebase provides Cloud Messaging for push notifications and may host our web pages. When notifications are enabled, we store a device notification token associated with your account and send notification content through Firebase and Apple's notification service.

We do not sell your personal information.

TestFlight Beta

During TestFlight beta testing, Heiro is still being evaluated. Beta builds may include temporary beta access, diagnostic behavior, incomplete subscription flows, or features that change before public release. TestFlight itself is operated by Apple, and Apple may collect information under its own terms and privacy policies, including installation, crash, and tester feedback information.

Please do not upload content during beta testing that you would not be comfortable losing, changing, or re-uploading later. We aim to protect beta content, but beta software can contain bugs.

Legal Bases For Processing

Where privacy laws require a legal basis, we process information because:

• It is needed to provide the Heiro service you request.
• It is needed for legitimate interests such as security, abuse prevention, product improvement, and service reliability.
• It is needed to comply with legal obligations.
• You have given consent, where consent is required, such as choosing to upload content or use optional device permissions.

Device Permissions

Heiro may ask for access to your photo library or microphone only when you choose to add photos, save media, or record voice memories. You can control these permissions in your device settings. If you deny permission, some features may not work.

Security

We use technical and organizational measures intended to protect information, including authentication, access controls, private storage, database security policies, usage limits, and operational monitoring. No system is perfectly secure. Use a strong password, keep your device secure, and only invite people you trust.

Retention And Deletion

Account deletion removes your personal vault and its memories and media. Contributions you deliberately add to shared legacy profiles, including photographs, stories and recordings about relatives, remain in those profiles for the remaining authorized family members. This also applies when you created the legacy profile. This does not give family members access to your deleted personal vault. Contact us if you need help removing personal information from a shared legacy contribution.

We keep information for as long as needed to provide Heiro, maintain security, comply with legal obligations, resolve disputes, prevent abuse, and maintain backups.

You can delete certain content inside the app where deletion tools are provided. You can also request account deletion from inside the app. When an account or content is deleted, we will delete or de-identify the relevant information where reasonably possible, subject to backup retention, legal requirements, fraud prevention, dispute resolution, and technical constraints.

Backups and logs may persist for a limited period before deletion. Some information may remain visible to other family members if they created, copied, downloaded, or independently control that content.

Your Privacy Choices And Rights

Depending on where you live, you may have rights to access, correct, delete, export, object to, restrict, or withdraw consent for certain personal information. You can contact us at linebreakers@outlook.com to make a privacy request.

We may need to verify your identity before acting on a request. Some requests may be limited where we need to protect other people's privacy, preserve security, comply with the law, or maintain family content controlled by another user.

Children And Family Content

Heiro is not directed to children under 13 and is not intended for use by children without appropriate parent or guardian involvement. Adults may add family tree information, photos, memories, or voice notes that include children or relatives. If you upload information about another person, including a child, you are responsible for having an appropriate right or permission to do so.

If you believe a child's information has been added improperly, contact us at linebreakers@outlook.com.

International Transfers

Heiro may be used from, and information may be processed or stored in, countries other than where you live. Privacy laws may differ between countries. We rely on service providers and safeguards intended to protect information according to this policy.

Payment Information

Purchases are handled through Apple's App Store payment system. Apple controls the payment transaction and may provide us with subscription status, product identifiers, renewal status, transaction identifiers, and entitlement information. We do not receive your full card number or full payment credentials.

Links To Other Services

Heiro may link to external services, such as Apple, TestFlight, or support resources. Their privacy practices are governed by their own policies.

Changes To This Policy

We may update this Privacy Policy as Heiro changes. If we make important changes, we will update the effective date and may provide additional notice in the app, through TestFlight, or through App Store updates.

Contact Us

For questions, requests, or concerns about this Privacy Policy or your information, contact:

Ross Strauss
Email: linebreakers@outlook.com