Privacy Policy

• Account information such as your name, email, password (stored securely as a hash), and profile details you choose to add.
• Brand information including brand name, logo, contact email, product details, edition metadata, and billing information for Brand Users.
• Heirloom & authentication data such as token IDs, serial numbers, scan events, ownership claims, and transfer history.
• User Content & social activity including Memories (photos, stories, notes), location tags, community posts, comments, and interactions.
• Usage & device data such as approximate location, device type, browser, IP address, and how you interact with the Platform.
• Heirloom Persona data derived from Memories and any prompts you provide to generate AI Personas.

• Operate, maintain, and secure the Platform and authenticate ownership.
• Build and display Heirloom digital passports, ownership chains, and public timelines.
• Enable social features, communities, sharing, and Heirloom Personas.
• Process payments, prevent fraud and counterfeiting, and comply with legal obligations.
• Communicate with you and provide support, notices, and security alerts.
• Improve and develop features, with data aggregated or de-identified where practical.

When you create a Memory, you choose whether it is Public or Private. Public Memories become part of the Heirloom's public timeline and may be visible to other users and, when an Heirloom is transferred, remain attached per your settings. Private Memories are hidden from the public timeline and, on transfer of ownership, are archived to your profile rather than shown to the new owner. You can change a Memory's visibility at any time in your profile settings; changes take effect as soon as reasonably practicable.

Photos, stories, and posts you share may be viewed, saved, or reposted by others once made Public — we cannot prevent redistribution of Public content outside the Platform. Please share thoughtfully and obtain consent from any identifiable people depicted.

Scan events and ownership claims are recorded to build a verifiable provenance chain for each Heirloom. We retain authentication and transfer records to keep provenance trustworthy, even after an account is closed, because a product's history must remain meaningful across owners.

Heirloom Personas are generated from the Memories associated with an Heirloom. Persona processing may use third-party AI providers. We do not use your Memories to train general-purpose AI models. Persona data is used to create and display the Persona and is retained in accordance with your visibility choices unless deletion is required by law or requested by you.

Brand Users can view aggregated and product-level analytics about scans, claims, and engagement for their own products and communities. Brand partners do not receive direct access to individual consumers' private account data except as needed to manage their products and communities and as permitted by these terms.

We use cookies and similar technologies to keep you signed in, remember preferences, measure usage, and secure the Platform. You can control cookies through your browser settings; some Platform features may not work if cookies are disabled.

• Service providers that help us host, secure, process payments, and deliver features, under confidentiality and data-protection obligations.
• Other users when you post Public Memories or interact in communities.
• Brand partners for their own products and communities, as described above.
• Legal & safety where we believe disclosure is necessary to comply with law, protect rights, prevent fraud, or respond to a valid legal request.
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to confidentiality.

We do not sell your personal information.

We keep personal information for as long as your account is active and as needed to provide the Services. Provenance, authentication, and Public Memory records are retained to preserve an Heirloom's history over time. We otherwise delete or de-identify data when it is no longer needed or as required by law, except where we are obligated to keep records.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage Memories and visibility directly in the Platform. To exercise other rights, contact us through the channels below; we may need to verify your identity first.

Be aware that Public Memories contributed to an Heirloom remain on the Heirloom's public timeline and travel with it across owners, preserving the shared legacy. Private Memories stay with you. Think about what you make Public, because it cannot always be removed once others have viewed or saved it.

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted authentication tokens and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to keep the Platform resilient against counterfeiting and unauthorized access.

The Platform is not directed to children under 13 (or the applicable minimum age). We do not knowingly collect personal information from children in violation of law. If you believe a child has provided us information, contact us and we will take steps to delete it.

The Platform is operated from the United States. If you access it from elsewhere, your information may be transferred to and processed in the U.S. and other regions. We take reasonable steps to provide an adequate level of protection and comply with applicable cross-border transfer requirements.

Because we do not sell personal information, there is no “sale” to opt out of under U.S. state privacy laws. You may still use browser “Do Not Track” signals or our analytics opt-out where offered; we do not currently respond to Do Not Track signals in a standardized way.

We may update this Privacy Policy from time to time and will note the “Last updated” date. Material changes will be communicated through the Platform. Continued use after changes take effect indicates acceptance of the updated policy.

Questions or requests about your privacy may be sent to swift2fi@socialproof-authenticity.com or through our Contact Us page. Related rules for using the Platform are in our Terms & Conditions.