The short version
- We collect what you and your family share, and what we need to run your account.
- Your family’s space is seen by your family and by the Our Legendry team working on its history. A story shared by link can also be read by anyone who has the link.
- Our research and storytelling is AI-led. We ask for your permission before sharing family information with third-party AI providers.
- We never sell your information. We publish your family’s material online or use it to promote Our Legendry only with your family’s permission.
- You can delete your account at any time in the app, and ask us for a copy of your information or to correct or remove it.
In this policy, “we” means Our Legendry LLC, based in New York, which is responsible for your information.
What we collect
Your account
Your email address and name, and how you sign in. Sign-in uses a code we email you, which works once and expires after 15 minutes. If you add a password, we keep only a scrambled form of it that cannot be turned back into the password. A passkey’s private part never leaves your device.
Your place in a family
The name your family knows you by, your relationship, your role, and, if you choose, which person in the family tree is you. If your family gives us a phone number for you, we keep it to reach you.
What you share
Memories, stories, questions and comments; photographs, letters, documents and family trees; voice recordings and their transcripts. Your iPhone writes a recording’s transcript itself, before the recording is sent to us. The app also keeps a copy of each recording you make, for you, in the Files app: in Legendry’s folder in your iCloud Drive, or on your iPhone if you don’t use iCloud. That copy is yours, and we can’t see it. If you allow it, photographs and scans taken with the app’s camera are also saved to your Photos library. These personal copies are separate from what you share with your family, and we cannot see them. Photographs can carry details such as where and when they were taken. We keep those with the photograph, because they help place your family’s history.
What we make for your family
The research, stories, family tree, maps and editions we prepare, with the sources behind them.
Notifications, feedback and messages
If you turn on notifications, we keep the code Apple uses to deliver them to your device. When you send feedback from the app, we receive your message, your name, the app version and which screen you were using. A screenshot is included only if you add one. If you write to us, we keep the conversation.
The waiting list
If you join the waiting list, we keep the name and email address you give us and the date you joined, so we can email you when there’s room for your family to begin. We use them for nothing else, and we don’t add you to any newsletter. They are stored with Cloudflare. To be taken off the list, write to us.
Purchases and gifts
What was bought, when, and for which family. For a gift, the recipient’s name and email address, your message, and the day it should arrive. Card details go straight to our payment processor; we never see or keep your full card number.
Technical records
Our servers keep short-lived technical logs, which include IP addresses, to run and protect the service. We use no analytics, advertising or tracking tools, in the app or on this website.
People in your family’s history
Family history is about people who never signed up: ancestors, and often living relatives. When you share about them, your family sees it, as it would around the table.
Old records can hold sensitive details, such as someone’s religion, health, or how they died. We use them only to tell your family’s history. If those details appear in a story shared by link, anyone with the link can read them.
If you appear in a family’s history and want something corrected or removed, write to us, and we will work it out with that family.
How we use it
- To run your account and your family’s space: sign-in, invitations, sharing, notifications, and the emails you need, such as sign-in codes, invitations, gifts and receipts.
- To research and write your family’s history as part of early access, without a purchase.
- To make the books and prints you order.
- To answer you when you write to us, to fix problems, and to keep the service secure.
We never sell your information or use it for advertising. Your family chooses which stories to share by link.
Who can see it
Your family
Everyone in your family’s space can see what is shared there, including what relatives share about living people.
Shared story links
A family member can share a released story by link. Anyone with the link can read that story and see its pictures without an account. The link does not open the rest of your family’s space. The person who made the link or a family owner can turn it off.
Our team
Every family’s member list includes an account called “Legendry staff”. Our researchers use it to work with your family’s material and check the stories, tree, maps and books we prepare.
Companies that work for us
We use these providers to operate the service:
- Fly.io runs our servers and stores your family’s space, in the United States.
- Cloudflare hosts this website and the waiting list, and keeps our encrypted backups.
- Anthropic and OpenAI provide the AI services described below.
- Resend sends our emails.
- Apple delivers the app and your notifications, and handles sign-in if you choose Sign in with Apple.
- Our payment processor takes payments, and our printing partner makes and ships the books and prints you order, using the name and address for delivery.
Archives and records
When we research, we search archives, libraries and genealogy websites using the names, dates and places of the people we are researching. We never send them your contact details, or your family’s photographs, recordings or documents.
Otherwise, only when we must
We share information when the law requires it, or to protect someone’s safety. If Our Legendry is ever merged or sold, your information would pass on under this policy.
How Our Legendry uses AI
Your permission is required before we share family information with third-party AI providers. The app asks for it when you first sign in.
What is shared
We send family stories, names, dates, relationships, research questions, and the photographs and documents you choose to share to Anthropic’s Claude API. We may also use OpenAI’s API for the same work.
Why
AI leads the research and storytelling: organizing family material, researching the record and developing narratives from evidence and family contributions.
How the providers handle it
Provider policies describe how these services handle inputs and outputs, including retention and model training. Read Anthropic’s API data policy and OpenAI’s API data policy.
Apple Intelligence
Some features in the app, such as Discover, use Apple’s AI on your iPhone. For larger requests, it can use Apple’s Private Cloud Compute, which Apple says uses your information only to answer the request and does not store it.
If you would rather not
AI is part of how we organize, research and write, so Our Legendry has no version without it. If you choose “Not now”, you cannot continue into the app unless you agree. There is no setting to withdraw that agreement later. If you no longer want to use the service, you can delete your account. This does not automatically remove material you have already shared with your family; see How long we keep it.
Keeping it safe
- Your family’s space is stored on our servers in the United States, on encrypted disks, and travels over encrypted connections.
- While we research, a copy of your family’s folder is kept on our dedicated research computers. They are used only for this work, and their disks are encrypted.
- On those computers, Apple’s photo analysis can group your family’s photographs by the faces in them, so we can see which pictures show the same person. The groups have no names, stay on those computers, and are deleted with your family’s folder.
- Encrypted backups are kept with a second company, Cloudflare, so nothing is lost if a server fails.
- Each family’s material is kept apart from every other family’s.
- Sign-in codes work once and expire; passwords are kept only in scrambled form; and a sign-in ends after 90 days.
- If you live outside the United States, your information is stored and handled in the United States.
How long we keep it
- Your account stays until you delete it.
- When you delete your account, we remove straight away your sign-in, email addresses, password, passkeys, phone number, notification codes and pending invitations. What you shared stays in your family’s history, shown as from “A family member”. If you would like something removed first, ask us.
- Feedback and messages: we keep the notes you send us, including your name, after your account or family’s space is deleted.
- Your family’s space: A family’s space is kept for a year from the day it starts, and for each year a purchase or renewal covers. A month before a year ends, we write to remind you. If it ends without a purchase or renewal, we delete the space 90 days later, just as if your family had asked us to; each person’s own account stays. To ask about your family’s stored material or request deletion, contact us.
- Backups: deleted material leaves our encrypted backups within 40 days.
- What was already delivered to your family, such as downloads, emails and printed books, stays with them.
- Your own copies of recordings in Files, and photographs and scans in Photos, stay with you. Deleting your account does not delete these copies.
Your choices
- See and correct: most of what you share can be seen in the app. For anything else, or for a copy of your information, write to us.
- Delete: delete your account at any time in the app, in your account settings.
- Notifications: turn them off in the app or in your iPhone’s settings.
- AI: you must agree before continuing into the app. There is no setting to withdraw that agreement later; you can delete your account if you no longer want to use the service.
Wherever you live, you can ask us to see, correct, delete or copy your information, and we will answer within 30 days. We will never treat you differently for asking. If you live where a data-protection authority oversees privacy, such as the European Union or the United Kingdom, you can also complain to it.
We do not sell personal information or share it for advertising, as California law defines those terms.
Children
Our Legendry is not meant for children under 13, and we do not knowingly collect information from them. If we learn that a child under 13 has an account, we will delete it. Relatives may share about children in the family, such as a grandchild’s photograph; if it appears in a story shared by link, anyone with the link can see it.
This website
This website uses no analytics or advertising cookies. Cloudflare hosts and protects the site and processes technical connection information, such as your IP address, browser information and requested pages, to deliver and secure the site. Its security features may use necessary cookies. We do not track your activity across other websites, so your browser’s “Do Not Track” setting does not change how this site works.
Changes and contact
If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.
Questions, or a request about your information? Write to us at hello@ourlegendry.com or call (518) 219-7653.