VaultedByU
Back to VaultedByU
VaultedByU

Privacy Policy

Last updated: August 16, 2026

VaultedByU ("we," "us," "our") provides a sovereign digital archive that lets you preserve your family's voice, history, stories, and heirlooms with absolute privacy. This Privacy Policy explains what we collect, how we use it, and the rights you have over your data.

1. Information We Collect

  • Account information: your name, email address, and authentication credentials when you register.
  • Vault content you upload, such as voice memories, family trees, biographies, recipes, documents, photos, and heirloom records.
  • Payment information: when you purchase a subscription, payment is processed securely by Stripe. We do not store your full card number on our servers.
  • Beneficiary information: names, emails, phone numbers, and relationships that you designate to access your vault.
  • Usage data: device type, IP address, and interaction logs that help us operate and secure the service.

2. How We Use Your Information

  • To create and maintain your private family archive and the features within it.
  • To process subscription payments and manage your plan, including enforcing plan-specific limits.
  • To authenticate beneficiaries and, when lawfully requested and verified, release the content you designated to them.
  • To send service-critical notifications (such as a data-retrieval PIN to a beneficiary) and to respond to support requests.
  • To detect fraud, abuse, and security incidents, and to comply with legal obligations.

3. Third-Party Services

  • Stripe — payment processing. Stripe handles your card data under its own PCI-compliant standards; we receive only confirmation of the transaction.
  • Twilio — used to deliver one-time PIN codes to your beneficiaries during the verified data-retrieval process.
  • Cloud storage and infrastructure partners who host encrypted backups of the service.
  • These providers process data only as needed to deliver the service on our behalf and under their own privacy and security policies.

4. Sovereignty & Beneficiary Access

  • Your vault contents remain yours. We do not sell your data and we do not use your personal content to train any external model.
  • Upon your passing, a verified beneficiary may request access by providing a death certificate number and state of issue, and by confirming the one-time PIN sent to them.
  • Access is logged, capped to a limited number of uses, and time-bound. We may, at our discretion, extend access for a short period when a beneficiary requests reactivation and provides verifiable information.

5. Data Retention

  • We retain your vault content for as long as your account is active, and for a reasonable period afterward to fulfill your legacy instructions to beneficiaries.
  • You may delete specific records at any time; deletion is permanent and cannot be undone.
  • If you cancel your subscription, your data will be retained in line with your selected plan's grace period, after which it may be permanently removed.

6. Your Rights

  • Access and export: you can view and download your vault content at any time from within the app.
  • Correct and delete: you can edit or remove records individually or close your account.
  • Withdrawal of consent for any optional communications, by following the unsubscribe instructions in those messages.
  • If you are located in the EU, UK, California, or another jurisdiction with data-protection laws, you may have additional rights to object to or restrict certain processing — contact us to exercise them.

7. Security

  • We use encryption in transit and at rest, strict access controls on our internal systems, and continuous monitoring for unauthorized access.
  • No method of transmission or storage is fully immune to breach, but we apply industry-standard safeguards and respond quickly to any security incident.
  • Beneficiary access requires multi-step verification to prevent unauthorized retrieval of a deceased member's data.

8. Children's Privacy

  • VaultedByU is intended for adults creating and managing their family's legacy. We do not knowingly collect data from children, and a parent or guardian should contact us immediately if they believe a minor has registered.

9. Changes to This Policy

  • We may update this policy as our service evolves. When we make material changes, we will post the revised version here and update the 'last updated' date at the top of this page.
  • Continued use of the service after a change takes effect constitutes acceptance of the updated policy.

10. Contact Us

  • If you have questions about this policy or would like to exercise any of your rights, contact us through the in-app Support link or email our privacy team directly.
  • We aim to respond to verified requests within thirty (30) days.