Privacy Policy
Last updated: [DATE] · Operated by [COMPANY], [ADDRESS]. Contact: [PRIVACY@EMAIL].
1. What we do NOT collect
- We never collect a username, login email, password, PIN, or full account number for any account you map — the app has no field for them. Those live only in your chosen password manager ("locker").
- We cannot read the contents of your asset map. It is end-to-end encrypted with a key derived from your passphrase, which we never receive.
2. What we store
- If you use the app without an account: your map stays only in your browser's local storage. We store nothing.
- If you create an account (to back up / sync / set up inheritance): we store your email address, a one-way verifier of your login credential (never your password), and an opaque encrypted blob of your map (ciphertext we cannot decrypt). For inheritance, we store the encrypted key material needed to deliver your map to the heir you designate — still unreadable by us.
- Sign in with Google/Apple: we receive your email and a provider account identifier to sign you in. We still require a separate encryption passphrase, so the provider (and we) cannot read your map.
- Operational data: standard security logs (e.g., IP address for rate limiting) and, if you join a waitlist, the email you provide.
3. How we use it
To operate the service: authenticate you, store and sync your encrypted map across your devices, deliver the emergency-access handoff to a designated heir, send account emails (verification, security), and protect the service from abuse. We do not sell your personal information or use your map for advertising.
4. Affiliate links
Some links to password managers are affiliate links; if you sign up through them we may earn a commission at no extra cost to you. See our Terms for details. Clicking an affiliate link may share standard referral data with that provider.
5. Cookies & local storage
We use browser local storage to hold your map on your device and a session token to keep you signed in. We do not use third-party advertising cookies.
6. Your choices & rights
You can export or delete your map at any time from the app, and request deletion of your account and stored ciphertext by contacting [PRIVACY@EMAIL]. Because your map is encrypted with your passphrase, if you lose both your passphrase and your recovery key, no one — including us — can recover it. Depending on where you live, you may have rights under laws such as GDPR or CCPA; contact us to exercise them.
7. Children
LegacyMap is not intended for anyone under 18.
8. Changes
We'll post changes here and update the date above. Material changes will be communicated to account holders by email.
This document describes a prototype and is provided as a template; it is not legal advice. LegacyMap is not a law firm and does not provide legal or financial advice.