Privacy Policy

1. Summary

Lineage Keeper does not currently require an account, provide cloud sync, or send your family records to a Lyonsoft server. Family information, relationships, anniversaries, memorial details, and managed media are stored locally on your device.

Data can leave the app when you explicitly save or share a backup/export, select a file for import, open a stored memorial location in an external Maps app, or start a Pro purchase/restore through the platform storefront.

2. Information stored locally

• Family records: FamilySpace names and descriptions, people, display names, gender, birth/death dates, notes, and avatar references.
• Relationships: parent/child/spouse links and relationship notes.
• Anniversaries and events: birthdays, death anniversaries, custom dates, Gregorian or Vietnamese lunar source dates, recurrence preferences, and notes.
• Memorials and graves: memorial type and name, cemetery, address, latitude/longitude, plot/row/grave details, directions, notes, linked people, and last-visited dates.
• Media: selected memorial photos and other managed media stored in the app's local filesystem, with metadata in the local database.
• Preferences: onboarding completion and the local Pro entitlement/product cache.

Deleting the app or clearing its local data normally removes these local records, subject to the operating system's backup behavior and any copies you chose to save elsewhere.

3. What we do not collect

Lineage Keeper's current public MVP does not include a remote analytics SDK, advertising SDK, attribution SDK, crash-reporting backend, account system, cloud database, collaborative server, or automatic remote backup service. We do not intentionally transmit family names, relationships, dates, addresses, GPS coordinates, notes, photos, backups, or reports to Lyonsoft for collection.

4. User-initiated sharing and external services

Backups and exports

JSON, ZIP, CSV, and PDF files are first created locally. When you choose Save, Share, or an equivalent action, the selected operating-system destination, filesystem, messaging app, cloud provider, or other service controls that copy under its own privacy and security rules. Backup archives and readable reports may contain sensitive family information; the current app does not add password protection or application-level encryption to these files.

Memorial locations

Lineage Keeper does not read your current device location. When you choose to open a saved address or coordinate in Maps, that stored information is handed to the external map application or service you select, which may process it under its own policy.

File and photo selection

Platform file pickers are invoked after you choose an import or media action. The app reads selected files only to validate a backup or copy media into local managed storage.

5. PDF fonts and network metadata

PDF reports use a Unicode font bundled with the app, including for Vietnamese text. The current PDF flow does not need to download a font at runtime.

6. Pro purchases

Lineage Keeper may offer a one-time Pro upgrade on Android, iOS, and macOS when the relevant storefront product is configured. RevenueCat communicates with the applicable storefront to validate the transaction and provide the Pro entitlement. Windows reports purchases as unsupported in the current MVP.

Payment credentials and payment processing remain with Apple or Google. RevenueCat receives purchase and transaction information needed to validate the product and entitlement, but Lineage Keeper does not send family records, media, backups, or reports to RevenueCat. The local entitlement cache is for offline/startup continuity and is reconciled when RevenueCat is reachable.

7. Children

Lineage Keeper is a general-purpose family record utility and is not directed to children. We do not knowingly collect personal information from children through the app because the current app has no account or remote collection flow.

8. Your choices

• Use the app without creating an account or enabling cloud sync.
• Choose which files or photos to import and which destination receives a backup or export.
• Choose whether to open a stored memorial location in an external Maps app.
• Delete local records, media, backups, and exports through the app or device storage controls.
• Contact us about privacy questions or a copy of information you sent directly in a support message.

9. Changes to this policy

We may update this policy when Lineage Keeper, its platforms, or applicable requirements change. The Last updated date will show the latest version. If a future release adds accounts, cloud sync, telemetry, advertising, or other remote processing, the policy and store declarations will be reviewed before that feature is shipped.

10. Contact

For privacy questions, contact support@lyonsoft.app.