Heritage Hub Privacy Policy

Last updated: 27 October 2026 Effective from: 2 October 2026

Who we are

Heritage Hub is operated by HeritageHub Technology Services Pte. Ltd., a company incorporated in Singapore (UEN 202547722D), with its registered office at 68 Circular Road, #02-01, Singapore 049422.

In this policy, Heritage Hub, we, us and our mean that company. You and your mean the person using Heritage Hub.

For any question about this policy, or about the information we hold about you, write to us at privacy@heritagehub.app. We aim to reply within seven days and will always reply within thirty.

Our Data Protection Officer can be reached at the same address, marked for the attention of the Data Protection Officer.

The promise this policy exists to keep

Heritage Hub is built on a simple commitment: your family's information belongs to your family.

We do not sell your personal information. We do not share it with advertisers or data brokers. We do not build advertising profiles from it. We do not use it to train advertising models, and we do not track you across other apps and websites. Heritage Hub is built to be paid for by families, not funded by selling their attention.

We have written the rest of this policy to be specific enough that you can hold us to that.

What we collect

Information you give us

Account information. Your name, email address and mobile number when you create an account. If you sign in with Google, we receive your name, email address and profile picture from Google.

Family tree content. The names, relationships, dates of birth, dates of death, places, photographs, documents, stories and notes that you or your family members add to a tree. Some of this is information about other people, including relatives who have died and relatives who have not joined Heritage Hub.

Media you upload. Photographs, videos, audio recordings and documents, along with any information embedded in those files, such as the date a photograph was taken.

Messages and posts. The content of messages, comments, event details and posts you create inside a family space. Private messages are end-to-end encrypted (see Security): we store them only in encrypted form and cannot read them — unless someone in the conversation reports a message to us, in which case that message's text is shared with us for review.

Support correspondence. What you write to us when you ask for help.

Information we collect automatically

Device and usage information. Device model, operating system version, app version, language, approximate region derived from your IP address, and a record of which screens you opened and when. We use this to fix crashes and understand which features families actually use.

Diagnostic information. Crash reports and performance data.

Authentication records. Sign-in times and the method used, which we keep for security.

What we do not collect

We do not collect your precise location. We do not collect contacts from your phone unless you specifically choose to invite someone, and in that case we use the contact only to send that one invitation. We do not use advertising identifiers. We do not embed third-party advertising or analytics trackers that follow you off Heritage Hub.

Why we use it, and on what legal basis

If you are in India, our processing is on the basis of your consent or, where the law allows, for certain legitimate uses. If you are in Singapore, we rely on your consent and on the deemed consent and legitimate interests provisions of the Personal Data Protection Act.

Information about other people

Heritage Hub is unusual among the services you use: much of what you enter is information about other people, including people who have not agreed to anything.

When you add a relative to a tree, you are asserting that you have a reasonable basis to record that information, and you remain responsible for what you record about living people. We ask you to be thoughtful. Do not record information about a living relative that you would not be comfortable showing them.

When a living person you have added later joins Heritage Hub, we give them control over their own profile, including the ability to correct it, restrict who can see it, or ask for it to be removed.

For people who have died, we keep the record as part of the family history, subject to any request from a close relative.

If you believe information about you has been added to Heritage Hub by someone else and you want it corrected or removed, write to privacy@heritagehub.app and we will act on it.

Family connection suggestions

Connecting relatives within a family, and families with each other, is what Heritage Hub is for. So, as part of the service, we look for records in different family trees that may be the same person — for example a daughter who appears in both her parents' tree and her marital family's tree.

• What we compare: names (including how they sound), birth year or full date of birth, and the names of close relatives (parents, partners and children). We do not compare photographs, contact details or messages.
• What others see before a connection is agreed: only a first name and a birth year, and a short reason such as "2 relatives with matching names". Nothing else from your tree is shown.
• Who is told: only when the evidence is strong (for example matching relatives, or the person confirming it is them) are the admins of both families told. If you have an account and a record in another tree may be you, we may ask you "Is this you?". Your answer helps the families decide; it does not connect anyone on its own.
• Nothing is connected automatically. An admin of each family must agree before two trees are connected, and either family can disconnect later.
• Children are never included. Living people under 18 are never suggested or used as a connection.
• Turning it off: this is on by default because it is the purpose of the service. You can turn it off at any time in Settings → Privacy → "Allow cross-family connections"; you are then left out of new suggestions.

Who we share it with

We share your personal information with three categories of recipient, and no others.

Other members of your family spaces. This is the point of the service. What you share inside a family space is visible to the members of that space, according to the privacy settings on that space and on individual items. We give you controls; please use them.

Service providers who help us run the service — cloud hosting and storage, signing in, notifications, crash and error reporting, email delivery and network delivery. Our main host is Google Cloud, in India. Providers process your information only on our instructions and may not use it for their own purposes. A current list of them is available from privacy@heritagehub.app.

Among those providers is an AI service, used only when you use an AI feature. Some optional features use it: adding relatives from a description or a photo of an old document, the life-story interview, reading a story in another language, and the tree check's review of people who may be the same. We send only what that feature needs — the words or photo you give it, or, for the tree check, names, gender, years, parents and partners — so the service can return a draft or an answer. The AI service may not use it to train its models. We keep only what you choose to save, and a story's translations (so the next family member who reads it in that language need not ask again); nothing is added to your family until you confirm it.

Where the law requires it. We will disclose information if compelled by a valid legal order. We will tell you unless we are legally prohibited from doing so, and we will push back on requests that appear overbroad.

We do not share your information with advertisers, data brokers, social networks or analytics companies for their own use.

Where your information is held and moved

Your family's information — your family tree, profiles, photos, videos, stories, events and messages — is stored on Google Cloud infrastructure in India, in Google's Mumbai region. We chose India deliberately rather than by default, because most Heritage Hub families have their roots there.

Some providers process a limited part of your information — such as sign-in details, crash and error reports, the emails we send you, and what you send to an AI feature — outside India, including in the United States.

Because families are spread across countries, your information may be accessed from, or transferred to, countries other than the one you live in, including Singapore, where our company is based.

If you are in the European Economic Area or the United Kingdom, this means your personal data is transferred to India, which has not been the subject of a European Commission adequacy decision. We make those transfers under the European Commission's Standard Contractual Clauses and the equivalent United Kingdom provisions, together with technical measures including encryption in transit and at rest. You may ask us for a copy of the safeguards we rely on by writing to privacy@heritagehub.app.

If you are in India, your family's information is stored in India. The limited processing outside India described above is made in accordance with the Digital Personal Data Protection Act and the rules made under it.

How long we keep it

Heritage Hub keeps a family's history across generations, so closing your account ends your account, not your place in that history: your entry in the family tree and what you shared stay with your family. We tell you clearly, at the point of closing, what will be removed and what will remain.

Your rights

Whatever country you are in, you can ask us to:

• give you a copy of the personal information we hold about you
• correct information that is wrong
• delete your account and your personal information
• export your family tree in a portable format
• stop sending you optional communications
• restrict or object to particular uses of your information

If you are in the European Economic Area or the United Kingdom, these are your rights under the GDPR, and you also have the right to complain to your national data protection authority.

If you are in India, these are your rights under the Digital Personal Data Protection Act, including the right to nominate another person to exercise your rights in the event of your death or incapacity. You may complain to the Data Protection Board of India.

If you are in Singapore, these are your rights under the Personal Data Protection Act, and you may complain to the Personal Data Protection Commission.

To exercise any of these, use the controls in the app under Settings, or write to privacy@heritagehub.app. We will not charge you and we will not make it difficult.

Deleting your account

You can delete your Heritage Hub account at any time:

• In the app: Settings, then Account, then Delete account.
• On the web: at https://www.heritagehub.app/delete-account

Your account is closed after a 30-day grace period, during which you can sign in and cancel. Closing ends your sign-in, your settings and your access to your messages; your entry in the family tree and what you shared stay with your family. Removed data is purged from our backups within 35 days.

Your account and the family record.

• Your username, email address and phone number stay reserved for you, so you can come back later. If your phone company gives your old number to someone else, they can ask for it; we tell you first and give you 14 days to object.
• You can pause your account instead of closing it: no notifications, nothing deleted.
• You can name a legacy contact who can tell us if you pass away; your account then becomes a memorial and is never treated as a deletion of the family record. Your legacy contact never sees your private messages.
• For 15 minutes after you share something you can change or remove it yourself; after that your family's admins decide. Anything they remove can be restored for 30 days.
• When someone leaves your family or is removed from it, or your family stops being connected to another, we change the links to the photos and videos they could see, so links they kept stop working. Photos or videos they already saved to their own device cannot be taken back.

Children

Heritage Hub accounts are for people aged 18 and over, and, with a parent's consent, for people aged 15 to 17. No one under 15 can have an account.

A 15-, 16- or 17-year-old can create an account only from an invitation to their family that one of their parents on the family tree, someone with their own adult Heritage Hub account, has made or approved in the app. That approval is the parent's verifiable consent, and we keep a record of who gave it and when. The parent can withdraw their consent at any time, which closes the account. A parent does not get access to their child's messages, which are end-to-end encrypted. When the young person turns 18, the account becomes an ordinary adult account.

Families do record information about children in their family trees, because a family tree without children would not be a family tree. When you add a child to a tree, you are recording information about that child, and you should do so only if you are that child's parent or guardian, or you have their parent or guardian's agreement.

We treat information about children with particular care:

• we do not use it for any advertising or profiling purpose, and we do not permit behavioural tracking or targeted advertising directed at anyone under 18, anywhere, regardless of local law
• we do not make children's profiles discoverable outside the family spaces they belong to
• a parent or guardian can ask us at any time to remove information about their child, and we will do so

India's Digital Personal Data Protection Act treats anyone under 18 as a child and requires verifiable parental consent before their personal data is processed. The parent's approval described above is how we obtain that consent for a young person's own account.

If you believe someone under 15 has an account, or someone aged 15 to 17 has one without a parent's consent, write to privacy@heritagehub.app and we will close it.

Security

We protect your information with encryption in transit and at rest, access controls that limit which of our systems can read what, authentication through established providers, and logging of administrative access.

Private messages are end-to-end encrypted. A message is encrypted on the sender's device and can be decrypted only on the devices of the people in that conversation. The keys that open messages are created and kept on your devices; we never hold them, so we cannot read your messages, and neither can anyone who obtains a copy of our data. The one exception is a report: when someone in a conversation reports a message, its text is sent to us so our team can review it. One honest limit: someone who took control of our systems, or of a member's account, could quietly replace that member's encryption keys and so receive messages sent to them afterwards — never the messages sent before. Some information is still visible to us because the service needs it to deliver messages: who is in a conversation, when messages are sent, and how many there are.

To read your messages on another phone or computer, you either link it from a device you already use (Settings, then Link a device, and scan the code it shows), or, if you chose to, use your fingerprint, face or screen lock. In that case we store a copy of your message key that only your passkey can open; the passkey itself is kept by your phone's or computer's password manager (for example Google Password Manager or iCloud Keychain), never by us. If you lose every device and have no passkey, nobody, including us, can recover your earlier messages. When you download your data, your messages are decrypted on your device, not by us.

On a phone, the app also keeps a copy of your messages on that phone, locked with a key that never leaves it, so chats open quickly and can be read without a connection. On Android that copy is left out of your phone's backups; on an iPhone a backup may hold it, but still locked — its key never leaves the phone, so the copy cannot be opened anywhere else. It is removed when you sign out, and you can remove it at any time in Messaging preferences; your messages stay on our servers in encrypted form either way. The website keeps no such copy.

Photos and videos you share in a chat are not copied into it: the message carries an encrypted link to the item in your family's Memories, and the people in that chat can view that one item for as long as they stay in the chat. If the item is deleted or its privacy is narrowed, it stops showing in the chat. The item itself is protected like the rest of Memories, as described below.

End-to-end encryption covers private messages. Your family tree, profiles, photos, stories and events are protected by encryption in transit and at rest and by the access and privacy controls described in this policy, but they are not end-to-end encrypted, because the service has to process them to show them to your family and to suggest connections between trees.

No service can promise perfect security, and we will not pretend otherwise. What we can promise is that if a breach occurs that is likely to affect you, we will tell you promptly and tell you plainly what happened, in line with our obligations under the PDPA, the GDPR and the DPDP Act.

Changes to this policy

If we change this policy in a way that materially affects you, we will tell you in the app and by email at least 14 days before the change takes effect, and we will summarise what changed rather than just posting a new version and hoping you read it.

Contact us

HeritageHub Technology Services Pte. Ltd. 68 Circular Road, #02-01, Singapore 049422 privacy@heritagehub.app

For European Union users, our trader contact details as published on the App Store are: support@heritagehub.app and +65 9395 1670.