Legal

Privacy Policy

Effective Date: April 25, 2026 · Ulivo

Ulivo is built around the most personal thing there is — your family's story. We take that seriously. This policy explains what information we collect, how we use it, and the choices you have. We've written it to be readable, not just legally complete.

1. What Information We Collect

Account information. When you sign up, we collect your name, email address, and a password (stored as a secure hash — we never store your password in plain text).

Family tree data. Information you add about family members — names (including maiden names), approximate birth years, countries and regions of origin, and relationships. This is the core of the product.

Voice recordings. When you record a memory, that audio file is stored on our servers. We also generate a text transcription of each recording.

Photos. Photos you upload to your family archive.

Payment information. When you subscribe to a paid plan, payment is processed by Stripe. Stripe receives and stores your card details — we do not. We receive only a transaction confirmation and the last four digits of your card for display purposes.

Usage data. Standard analytics information: which features you use, how long you spend in the app, error logs. This helps us improve the product.

Device and technical data. Device type, operating system, browser version, and IP address, collected automatically when you use the service.

2. How We Use Your Information

To create and manage your account
To build and display your family tree
To search historical archives for records matching your family members
To generate AI-powered candidate rankings and narrative summaries
To store and play back your voice recordings
To process your subscription payments
To send you service notifications and account updates
To respond to support requests
To improve the product based on how it's being used

We do not use your family data to train AI models. We do not sell your information. We do not serve you advertising.

3. AI Processing

When you add a family member and request a genealogical search, Ulivo sends a research query to Anthropic's Claude API. That query includes the information needed to find records: typically a name, approximate birth year, and country or region of origin.

We do not send your full family tree, voice recordings, or photos to Anthropic. Only the specific search query for each research request is transmitted. Anthropic processes this data as a service provider under their own Privacy Policy.

AI-generated narratives and record rankings are returned to you within the app. They are not shared with other users or third parties.

4. Historical Record Research

To find records, Ulivo queries third-party public archives. These services receive only the search query needed to return matching records — name, approximate dates, and region. They do not receive your account information or full family tree.

FamilySearch

Census, vital records, immigration

Ellis Island Foundation

Immigration manifests 1892–1957

National Archives / Fold3

Military service records

Library of Congress

Historical newspapers

FindAGrave

Cemetery and obituary records

5. Our Service Providers

We work with a small set of trusted service providers who help us operate Ulivo. Each receives only the data necessary to perform their function:

Anthropic — AI processing for record ranking and narrative generation
Supabase — Database storage and authentication infrastructure
Stripe — Payment processing
Netlify — Web hosting

We do not share your data with advertisers, data brokers, or other third parties for their own purposes.

6. Information About Other People

Ulivo is designed for preserving family history, which means you'll naturally add information about others — including family members who may not be using the product themselves. You're responsible for having appropriate permission to add information about living individuals.

We recommend being thoughtful about what details you include about living people, and obtaining their consent when practical. For deceased family members, reasonable use of historical and personally-remembered information is inherent to the product's purpose.

7. Voice Recordings

Voice memories are stored securely on our servers and are accessible only to you and anyone you've explicitly invited to your family tree. We transcribe recordings to make them searchable and to support future features like AI-powered family story generation.

You can delete any recording from your account at any time. Deletion removes the audio file and its transcription from our active systems within 30 days, subject to backup retention described below.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or compliance purposes (such as payment records, which we retain for 7 years as required by financial regulations).

Backup systems may retain deleted data for up to 30 days after deletion from active systems.

9. Your Choices and Rights

You have meaningful control over your information:

Access and export. You can access and download your family tree data, recordings, and photos from your account settings.
Correction. You can update your account information at any time.
Deletion. You can delete individual recordings, photos, or family members, or delete your entire account. To request complete data deletion, email hello@ulivo.family.
Opt out of emails. You can unsubscribe from marketing emails at any time. Transactional emails (account confirmations, payment receipts) cannot be opted out of while your account is active.

10. California Residents (CCPA)

If you are a California resident, you have the right to: know what personal information we collect and how we use it; request deletion of your personal information; and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at hello@ulivo.family.

11. Children's Privacy

Ulivo is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly. If you believe we may have information from a child under 13, please contact us at hello@ulivo.family.

12. Security

We use industry-standard security measures to protect your information, including encryption in transit (TLS) and encryption at rest for sensitive data. Access to personal data is limited to team members who need it to operate the service.

No security system is perfect. We cannot guarantee that your information will never be accessed without authorization. If we become aware of a security breach affecting your data, we will notify you in accordance with applicable law.

13. Changes to This Policy

We may update this Privacy Policy as the product evolves. When we make significant changes, we'll notify you via email or an in-app notice before the changes take effect. The effective date at the top of this page reflects the most recent update.

14. Contact Us

We're a small team and we read every email. If you have questions about how we handle your information, want to exercise any of your rights, or just want to understand something better, reach out:

hello@ulivo.family