Privacy Policy

Effective: October 2, 2026

FamilyLore, operated by Yojowa LLC (“we,” “us”), runs the handwriting transcription service at familylore.ai. This policy describes the personal data we collect when you use the service, how we use it, and the rights you have over it.

1. Controller

The data controller for the personal data described in this policy is Yojowa LLC (operating as “FamilyLore”), a limited liability company registered in the United States. For privacy questions, contact support@familylore.ai.

2. What we collect

• Uploaded handwriting images. The photos or scans you submit for transcription. These may contain personal information (names, dates, addresses) embedded in the document content.
• Transcription and translation text. The original- language transcription and English translation produced from your uploads, plus optional contextual notes.
• Account data. When you sign in with Google, we receive your email address, display name, and avatar URL from Google Identity Services. We do not receive your password.
• Usage data and cookies. When you use the site, we collect analytics events (page views, upload starts, transcription completions) via Google Analytics 4 (GA4), Microsoft Clarity, and Plausible Analytics. Plausible is cookieless; GA4 and Clarity set cookies in your browser. If you arrive via a link containing campaign or ad-click parameters (such as UTM parameters, gclid, or related click identifiers), these parameters are recorded with analytics events to measure traffic sources. See § 6 below for the cookie list.
• Payment data. If you upgrade to a paid tier, Stripe processes the payment. We receive a customer ID and subscription status from Stripe; we do not see or store your card details.
• Sharing. Your documents are private by default. Sharing a page makes that page public to anyone with the link.

3. Purposes and lawful basis

• Service delivery (transcription, translation, documents, collections) — legitimate interest and contract performance. We cannot run the service without processing the documents you upload to it.
• Analytics (understanding which pages and features are used, and measuring traffic sources) — legitimate interest. Cookies are set on visits for GA4 and Microsoft Clarity; Plausible is cookieless. You can opt out at any time via your browser cookie settings, an ad-blocker, or by clearing site data.
• Account management and billing — contract performance.

4. Retention

• Uploaded images and transcriptions. Retained while your account is active so you can revisit them in Documents and Collections. You can delete your account at any time (see § 7). Account deletion permanently removes your uploaded images, transcriptions, line-level overlay data, and collections.
• GA4 analytics events. Retained for 14 months in Google’s GA4 platform (default retention period). Aggregate, non-identifying after that window.
• Account data and billing. Retained while your account is open; purged upon account deletion. If you delete an account with an active paid subscription, the subscription is set to cancel at the end of the current billing cycle to prevent future charges; billing and transaction records are retained by Stripe per statutory tax and accounting rules.

5. Third-party processors

We share data with the following processors to deliver the service. Each is bound by a data-processing agreement and processes data on our behalf, not for their own purposes.

• Google (Gemini API) — transcription and line detection. Your uploaded images are sent to Google’s Gemini hosted API for processing. Gemini API Terms.
• Anthropic (Claude API) — translation and contextual notes. Transcribed text (not the original image) is sent to Anthropic for translation. Anthropic Privacy Policy.
• Google Analytics 4 (GA4) — usage analytics. Opt out via browser settings or an ad-blocker. Google Privacy Policy.
• Microsoft Clarity — user experience analytics, session recordings, and heatmaps. Microsoft Clarity Terms of Use.
• Plausible Analytics — privacy-friendly, cookieless website analytics. Plausible Privacy Policy.
• Google Cloud Platform — image storage and compute hosting (region: us-central1).
• Firebase Authentication (Google) — sign-in and account session management.
• Stripe — payment processing for paid tiers. Stripe Privacy Policy.

6. Cookies

FamilyLore uses cookies for analytics and essential site operations. We do not use advertising cookies. Strictly necessary storage (session tokens) keeps you signed in; analytics cookies are set on visits. Plausible Analytics is entirely cookieless. You can opt out of analytics cookies at any time via your browser settings, an ad-blocker, or by clearing site data.

• Session and authentication storage (strictly necessary) — keeps you signed in across page loads. Cleared when you sign out or your session expires.
• GA4 cookies (analytics) — _ga, _ga_J1H5NV6JPW. Used to count and distinguish visitors. 2-year expiry by default.
• Microsoft Clarity cookies (analytics) — _clck, _clsk. Used to preserve the Clarity user ID and session state for heatmaps and session insights.

To opt out of analytics cookies, use your browser settings (third-party cookie blocking), install an ad-blocker, or clear site data. Opting out does not affect your ability to use the transcription service.

7. Your rights

• Access. Sign in to Documents to view your uploaded pages and transcriptions.
• Deletion. You can delete your account at any time in Account settings (see account deletion instructions) or by emailing support@familylore.ai to request account deletion. Account deletion permanently removes your account, uploaded images, transcriptions, and collections.
• Opt out of tracking. Use your browser settings (third-party cookie blocking), install an ad-blocker, or clear site data to stop analytics cookies.
• Opt out of sale or sharing (California residents). We do not sell personal data and do not share it with third parties for cross-context behavioral advertising beyond what is described in § 5.
• Lodge a complaint. If you are in the EU/EEA or UK, you may complain to your local data protection authority.

8. Children

FamilyLore is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has uploaded data, contact us and we will delete it.

9. International transfers

Our infrastructure is in the United States. If you are outside the US, your data is transferred to the US for processing. The third- party processors listed in § 5 are subject to their own cross-border transfer mechanisms (Standard Contractual Clauses or equivalent).

10. Changes

We may update this policy. Material changes will be announced on the site and, where required, by email. The effective date at the top of this page reflects the most recent update.

11. Contact

Yojowa LLC (operating as FamilyLore). Privacy questions: support@familylore.ai.