Skip to main content

Privacy Policy

Last updated: May 2026

Data Controller

The data controller responsible for your personal information under this policy is Reviya A.I Technologies LTD (Israeli company registration no. 517319281), trading as Heirloom4Life ("Heirloom", "we", "us"). For privacy questions or to exercise your rights, contact privacy@heirloom4life.com.

1. Information We Collect

We collect information you provide directly, including your name, email address, voice recordings, and stories. We also collect usage data such as device information, IP addresses, and interaction patterns to improve our Service.

2. How We Use Your Information

Your information is used to provide and improve our voice preservation services, process your voice recordings for AI cloning, communicate with you about your account, and ensure the security of our platform.

3. Voice Data & Biometric Consent

Your voice recordings are processed using AI to create a digital voice model. We collect biometric voice data only with your explicit, informed consent. Before your first recording, we present an in-app consent screen disclosing how your voice data will be processed; you may withdraw consent at any time from your account settings, at which point we will cease further biometric processing and delete the associated voice model.

This data is encrypted at rest and in transit. We never use your voice data for purposes other than providing the Service to you, and we never sell or share voice data with third parties.

Legal Basis for Processing

We process biometric voice data on the basis of your explicit consent (GDPR Article 9(2)(a)). We process account and contract data to perform our agreement with you (GDPR Article 6(1)(b)). We process anonymised analytics on the basis of legitimate interest in improving the Service (GDPR Article 6(1)(f)).

4. Data Sharing & Sub-Processors

We do not sell your personal information. We share data only with the sub-processors listed below, under strict contractual obligations to protect your data:

  • Google Cloud Platform (United States) — hosting of application data, recordings, and media, encrypted at rest.
  • ElevenLabs, Inc. (United States) — voice cloning and text-to-speech synthesis for the AI voice features. Receives the voice samples you have consented to share for cloning purposes.
  • Lemon Squeezy, LLC (United States) — our merchant of record for subscription and credit-bundle payments. We do not store credit card information; payment details are handled by Lemon Squeezy.
  • Google Gemini / Google AI (United States) — transcription, summarisation, and conversation generation. Recordings and transcripts are sent to Google for processing.

We will update this list when sub-processors change. To request the current sub-processor list, contact privacy@heirloom4life.com.

International Data Transfers

Your data is stored and processed on Google Cloud Platform servers located in the United States, and processed by ElevenLabs, Inc. and Google AI also in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) where required by applicable law.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data — including voice recordings and stories — is permanently removed from our servers within 30 days.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can also request a copy of your data or restrict its processing. To exercise these rights, contact us or visit your account settings.

7. Security

We implement industry-standard security measures including encryption, access controls, and regular security audits to protect your information from unauthorized access, alteration, or destruction.

Texas Privacy Rights (TDPSA)

If you are a Texas resident, under the Texas Data Privacy and Security Act (TDPSA) you have the right to: (i) confirm whether we process your personal data and access that data; (ii) correct inaccuracies in your personal data; (iii) delete your personal data; (iv) obtain a portable copy of your personal data; (v) opt out of the sale of personal data, targeted advertising, or profiling that produces legal or similarly significant effects; and (vi) appeal a denial of these rights.

Texas residents under the Capture or Use of Biometric Identifier Act (CUBI) must provide informed consent before we capture voice biometric data. We capture voice biometric data only after you grant such consent through the in-app consent flow described in Section 3.

To exercise your TDPSA rights or to appeal a denial, email privacy@heirloom4life.com with the subject line "Texas Privacy Request." We will respond within 45 days as required by law.

Florida Privacy Rights (FDBR)

If you are a Florida resident, under the Florida Digital Bill of Rights (FDBR) you have the right to: (i) confirm whether we process your personal data and access it; (ii) correct inaccuracies; (iii) delete your personal data; (iv) obtain a portable copy; (v) opt out of the sale of personal data, targeted advertising, and profiling; and (vi) appeal a denial of these rights.

To exercise your FDBR rights or to appeal, email privacy@heirloom4life.com with the subject line "Florida Privacy Request." We will respond within 45 days as required by law.

Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information — including biometric voice data — from minors under 16. If you believe a child has provided us with personal information, contact privacy@heirloom4life.com and we will delete the data promptly. Where required, we obtain verifiable parental consent before collecting personal information from a minor.

Payments

Payments are processed by Lemon Squeezy, LLC, our merchant of record. We do not store credit card information. Lemon Squeezy's privacy policy governs the handling of payment details.

8. California Privacy Rights (CPRA)

Under the California Privacy Rights Act (CPRA), voiceprints are classified as Sensitive Personal Information. If you are a California resident, you have the right to limit the use and disclosure of your sensitive personal information, including your voiceprint data.

Reviya A.I Technologies LTD (trading as Heirloom4Life) uses voiceprint data solely to provide voice cloning services as part of the memoir-creation experience. We do not sell or share your sensitive personal information for purposes other than providing the Service.

To exercise your right to limit the use of your sensitive personal information, or to request deletion of your voiceprint data, please contact us at privacy@heirloom4life.com with the subject line "CPRA Opt-Out Request." We will process your request within 45 days as required by law.

9. Contact Us

For privacy-related questions, contact us at privacy@heirloom4life.com.