Your story belongs to you
Privacy Policy
This notice explains how Héritage uses the data needed for your account, your memories and your book, and for your sign-up to news of the launch.
Data controller
QUALIA LP, an Ontario limited partnership, 2967 Dundas Street West, Suite 207d, Toronto, Ontario, M6P 1Z2, Canada, Ontario business number 1001111214, is the data controller. To exercise a right or ask a question, write to [email protected].
Representative in the European Union
QUALIA LP is established in Canada and has not yet appointed an EU representative within the meaning of Article 27 of the GDPR. Their name and contact details will be published here before accounts open.
Why we use your data
The account, the interview, the keeping of your memories and the making of the book are necessary to perform the service you have asked for, on the basis of Article 6(1)(b) of the GDPR. Memories can reveal your health, your beliefs, your love life, or other sensitive data: their processing also rests on your explicit consent, in accordance with Article 9(2)(a). You can withdraw it at any time from My account, without affecting processing already carried out lawfully.
Advice and offers by email rest on your consent, Article 6(1)(a). Fraud prevention, security, restoration quotas, and the defense of our rights rest on our legitimate interest, Article 6(1)(f).
What we process
We process your identity and contact details, your date of birth, your settings, your texts, your audio or video recordings, your photographs, their transcriptions, the people and places mentioned, and the memories and the book derived from them. Your stories may contain sensitive data about you or about people close to you. We also process the payment and invoice information received from Paddle, support requests, technical events, the hashed IP address used for public quotas, and your consent choices.
News of the launch
If you join the waitlist, we pass your email address and your first name, if you give it, to Loops. Your first name lets us personalize the messages. Your sign-up covers a welcome message, occasional news of the launch, and the announcement that Héritage has opened. These messages rest on your consent and are separate from creating an account.
We keep these details for news of the launch until you unsubscribe or these communications end. Every message contains an unsubscribe link. You can also ask for your details to be corrected or deleted by writing to [email protected], without having an account in the app.
Who is involved
Supabase hosts the database and the functions in the European Union. Cloudflare provides the pages, the Workers, R2 storage, and video. OpenRouter routes requests to models from OpenAI, Google, and Moonshot AI; Replicate handles transcription, the voice, and image restoration. Resend sends the messages the service needs. Loops manages the waitlist and sends news of the launch or offers only if you accept them. Paddle acts as reseller, Merchant of Record, and payment provider, through the entity shown when you buy. Sentry receives technical errors when it is enabled, and by design never the text of a memory.
These providers act on our instructions or, for Paddle in its role as seller, under their own obligations. The main hosting is in the European Union. Transfers to Canada benefit from adequacy Decision 2002/2/EC where it applies. Other transfers outside the European Economic Area are covered by an applicable adequacy decision or by the European Commission’s standard contractual clauses and supplementary measures.
Paddle processes the data needed for payment, invoicing, and its obligations as seller in accordance with its privacy policy. Héritage does not receive your full card number.
How long
The account, the memories, the files, and the book are kept for as long as the account exists, then deleted at your request. Accounting entries and proof of purchase are kept for the period required by accounting and tax rules, at most ten years. Technical queue events are deleted after thirty days; providers’ logs follow their contractual periods. A callback request is kept for as long as it takes to deal with it. Marketing consent is kept until it is withdrawn, then as proof for as long as needed to defend our rights.
Your rights
You can ask for access, correction, erasure, restriction, or objection, and for the portability of the data you have given us in a structured format. You can withdraw a consent at any time. In My account, “Delete my data” erases the account and its memories. We normally reply within one month.
You can also refer a matter to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or use its online complaint service.
Artificial intelligence
An artificial intelligence transcribes the recordings, identifies the memories, suggests the biographer’s lines, and writes a first version of the book. It can make mistakes. You can read over and correct the result; no decision producing a legal effect is taken automatically on the basis of your story.
Sharing and privacy
Your memories are private by default. You can create a reading link for a book, or a link to the recording that goes with a memory; anyone who has that link can then open it. You can revoke reading links. A copy already downloaded or passed on to someone close to you cannot be taken back.
What your browser keeps
No advertising cookie or advertising pixel is added to these pages. The app keeps five items in your browser’s storage: heritage.session to keep you signed in; heritage.derniere-methode and heritage.derniere-adresse to recognize this device at the door; heritage.restaurations to find your public restorations again; and heritage.question-cachee:<token> to hide, on this device, a question from a shared book. The session expires according to its authentication lifetime; the other four stay on the device until they are replaced, deleted by the app, or cleared from storage by your browser.
If you use the language switch on this site, it keeps a heritage_lang cookie for one year to remember your choice of language.