Privacy Policy — Heirloom

Effective date: October 25, 2026 Pin Oak Partners LLC ("we," "us") — operator of the Heirloom app and website

Heirloom is a private archive for a family's keepsakes and the stories behind them. We collect the minimum needed to run it, your family's archive is visible only to the people you let in, and you can delete your account yourself, in the app, at any time.

What we collect

Account information. Your email address and a password. The password is stored only as a secure hash by our authentication provider, Amazon Cognito — we never see or store it in plain text. Email is used to sign you in, reset your password, and contact you about your account. You also choose a nickname for each family you belong to (for example "Mom," "Pop," "Uncle Greg"); it is shown to the members of that family on the heirlooms you add.

Your family's archive. The photos you upload and the titles, stories, rooms, holidays, and tags you write. This is the product. Photos are stored privately and are visible only to members of the family they belong to. Our systems enforce this on every request: before any heirloom or photo is read, written, or deleted, the server checks that you are a member of that family and that your role allows the action.

Family membership. Which families you belong to, your role in each (Admin, Editor, or Viewer), and when you joined. Invitations work by code; we do not import your contacts and we do not send invitations on your behalf.

Purchases. Subscriptions are processed entirely by Apple. We never see or store your payment details. We store only the plan your family is entitled to, an Apple transaction identifier so we can honor the purchase, and the expiry date. If your family's plan was a gift redeemed by code, we store the code, which family redeemed it, and when.

Device token (optional). If you allow notifications, we store a push-notification token for your device so we can tell you when a family member adds an heirloom. Signing out removes the token. Turning notifications off in iOS Settings stops its use.

Diagnostics. Our servers keep standard operational logs (request timing, errors) for a short period to keep the service running. These do not include the content of your heirlooms.

What we do NOT do

We do not sell your data. To anyone, ever.
We do not use your data for advertising, and we do not use third-party advertising or tracking SDKs.
We do not use your photos or stories to train AI models.
We do not read your family's archive. Access is by your family members, through the app, under the rules above.
We do not share your data with third parties except the service providers below.

Who can see your data

Members of a family can see that family's heirlooms and photos, and each other's nicknames and roles. Nothing in one family is visible to another family, even when the same person belongs to both. Admins of a family can invite members, change roles, remove members, and rename the family.

Service providers

Your data is stored and processed on Amazon Web Services (Cognito for sign-in, DynamoDB for records, S3 for photos, SNS for push notifications) in the United States. Purchases are processed by Apple.

Retention and deletion

We keep your family's archive while the family exists — that is the point of Heirloom. A lapsed subscription never deletes anything; the family becomes read-only above the free limits until it is renewed.

You can delete your account yourself, in the app: Profile → Delete Account. This removes your sign-in account, your memberships, and your device tokens immediately and permanently. Heirlooms you added to a family remain in that family's archive, because they belong to the family; an Admin of that family can delete them. If you are the only Admin of a family, the app will ask you to promote another member first so the family is not left without one.

If anything fails during deletion, contact us at the address below and we will complete it manually.

Children

Heirloom is intended for adults. You must be 18 or older to create an account. We do not knowingly collect data from children under 13; if you believe a child has created an account, contact us and we will delete it. Family members may of course add heirlooms about children — a christening gown, a Little League trophy — and those belong to the family's archive like anything else.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. The app's Delete Account feature satisfies deletion directly; for anything else, email us and we will respond promptly.

Changes

If we change this policy, we will update the effective date here and, for meaningful changes, note it in the app.

Contact

Pin Oak Partners LLC contact@pinoakpartners.co