Privacy Policy

The short version

On Record is built so you control who sees your story. Birth details and home anchors start private. Visibility is enforced on the server — not just hidden in the UI.

What we collect

• Account — email and credentials needed to sign you in (sessions are cookie-based; we do not put auth tokens in URLs or local storage for identity).
• Profile anchors — birthday, birthplace, and current home so we can place you on the map of time and space. These default to private.
• Records & connections — the moments, places, and relationships you create, with the visibility you choose.
• Technical basics — logs needed to keep the service secure and working. We avoid logging secrets or unnecessary personal data.

Visibility

Private — only you. Family — people you have connected as family. Public— visible to others on the platform. You can change a record's visibility after you publish it.

Why birth data matters

Your birthday and birthplace are your origin pin — the zero point of your personal timeline. We ask for them so the map can be about you, not a generic account. They are not sold, and they are not public by default.

Sharing

We do not sell your personal information. We may use trusted infrastructure providers to host and operate the service. We may disclose information if required by law or to protect the safety and integrity of the platform.

Your choices

Adjust visibility on records, update profile details, and delete content you control where the product allows. For account or data requests, use in-app support channels.

Updates

We may update this policy as the product evolves. Material changes will be reflected on this page with a new date. See also our Terms of Service.