Privacy Policy

NarraLife™ LLC · Life Story Compiler · Effective: June 19, 2026 · Last updated: July 5, 2026

Introduction

NarraLife LLC ("NarraLife," "we," "our," or "us") operates Life Story Compiler, an AI-powered narrative intelligence platform that helps users capture, organize, understand, preserve, and optionally share the story of their lives (the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Life Story Compiler on iOS, Android, or any web platform. Please read it carefully. By using the Service, you agree to the practices described herein. If you do not agree, please do not use the Service.

This policy is designed to comply with applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and applicable Apple App Store and Google Play Store requirements.

Information We Collect

Account Information

When you create an account, we collect:

• Full name (first, middle, last)
• Email address
• Username
• Date of birth (used to set your story's starting point and to confirm you meet the age requirements for certain features)
• Profile preferences and writing focus areas

Passwordless authentication. Life Story Compiler uses passwordless sign-in. Rather than creating or storing a password, you sign in by entering your email address and a one-time verification code we send to that email. We do not use, store, or require passwords.

User Content

Life Story Compiler is built to hold the most personal content of your life. We collect and store the content you provide, including:

• Journal entries, life events, memories, and reflections
• Turning points and milestone records
• Story chapters and narrative summaries
• Recurring themes, Story DNA, Life Momentum, and character evolution data
• Story Passports you create and choose to share, including the stamps you earn
• Notes, tags, and annotations you add to your story
• Uploaded documents, photos, and videos (when you provide them)
• Voice recordings and transcriptions (when you enable this feature)
• Reflections you choose to contribute through Cairns
• Any other user-generated content you submit to the Service

Contributions From Others (Witness and Connected Stories)

Some features let other people add to or connect with your story:

• Witness: When you invite someone who shared an experience with you to contribute, we collect the memory they provide (text and/or voice) and the contact details you supply to invite them. Contributors are shown a clear notice and provide their contribution voluntarily; a person may contribute without creating an account.
• Connected Stories: When you connect with a family member or friend, we process the connection itself and the specific content each of you chooses to share with the other (see "Social and Sharing Features").

If you provide us with another person's contact information to send an invitation, you confirm you have a relationship with that person that makes the invitation appropriate.

Device Information

We automatically collect certain technical information when you use our Service:

• Device type and model
• Operating system name and version
• Browser type and version (web platform)
• IP address
• App version and crash/diagnostic information
• Push notification tokens (if you enable notifications)

Usage Information

We collect information about how you interact with our Service:

• Features accessed and actions taken within the app
• Session duration and frequency of use
• Search queries within the Service
• Analytics events and feature engagement data

Calendar Information

With your explicit permission, we may import calendar events to help contextualize your life story. We only access calendar data you specifically authorize, and only for the purpose of enriching your narrative.

Microphone and Camera

Microphone: Audio recordings are captured only when you explicitly activate a recording feature (including voice journaling and the guided voice interview). We do not access your microphone in the background or without your direct action.

Camera: Photos and videos are captured or accessed only when you explicitly use an upload or photo feature within the Service.

Photo Metadata

When you upload a photo, we may read metadata embedded in the file — such as the date the photo was taken and, if present, its GPS location — to help date and place the memory accurately. Where we detect such metadata, we suggest it to you for confirmation rather than applying it silently, and you may edit or remove it. Optimized copies we display in the app have unnecessary metadata stripped.

Location Data

Life Story Compiler does not continuously track your location.

Location data is collected only when explicitly authorized by you, or derived from photo metadata as described above, and only for features that require location context (e.g., tagging an entry with a place). You may revoke location permission at any time in your device settings, and you may control or remove location information associated with your entries.

If you turn on the optional "Notice my trips" feature, location is sampled only while the app is open (never in the background) to spot travel and offer to save it as a memory. Coordinates are encrypted at rest and scoped to your account. Detecting a trip does not look up a place name — a readable place is only requested when you tap a trip prompt, and sensitive destinations (such as medical, religious, legal, or support locations) are never named; whenever we are unsure, we treat a place as more sensitive. A suggested place is always editable and is never saved unless you choose to. Automatic background detection (noticing trips while the app is closed) and push notifications are not available yet and are coming in a future version; today, detection runs only while the app is open. Turning the feature off deletes your stored travel data. See the Trip Detection & Location Disclosure for full details.

Payment and Subscription Information

If you purchase a paid membership (such as Journey or Legacy), payments and subscriptions are managed through RevenueCat, our subscription management provider. Depending on where you purchase, the actual payment is processed by Apple or Google (for in-app purchases on iOS and Android) or, for web purchases, by Stripe via RevenueCat's web billing. We receive confirmation of your subscription status and limited billing details, but we do not collect or store your full payment card numbers — those are handled directly by these payment processors under their own security standards.

Printed Book Orders

If you order a printed hardcover of a Life Story Book you have created, this is a one-time purchase that is separate from any membership or subscription. The one-time charge is processed directly by Stripe (not through RevenueCat), and we receive confirmation of the charge and limited billing details but do not collect or store your full payment card numbers. To print and deliver your book, we share the shipping and contact details you provide (name, postal address, email, and phone number) and the contents of that book edition (its text and any photos you included) with our third-party print-on-demand and fulfillment provider, Lulu, solely to manufacture and ship your order. Shipping and delivery may also involve carriers who receive your address to deliver the package.

Contact Form Information

When you contact us through a contact or support form, we collect the name, email, and message you provide so we can respond. To protect these forms from spam and abuse, we use a third-party security check (Cloudflare Turnstile), which may process limited technical information to verify you are human.

Artificial Intelligence and Narrative Processing

Life Story Compiler uses artificial intelligence to help you understand and preserve your life story. AI may analyze your content to:

• Generate story chapters and narrative summaries
• Detect recurring themes across your entries
• Build Memory Graph relationships between events, people, and places
• Produce Story DNA (your recurring themes, values, and traits) and Life Momentum (the phases and pulse of your life)
• Generate Story Confidence Scores reflecting narrative depth
• Produce Character Evolution insights
• Generate Narrative Forecasts and suggested future chapters
• Power the guided life interview, which asks adaptive questions and turns your spoken answers into draft entries for your review
• Power Continuum, which reconstructs a grounded version of your past or future self from your own story for reflection
• Generate weekly and annual story summaries and the unified "Your Story" experience
• Create Story Passport summaries at your direction
• Power Kindred, which lets you ask questions about your own life story and receive answers assembled from the content you have captured — your entries, and where available your own voice recordings and photos. Kindred draws only from your own content, does not fabricate answers, presents your own words and recordings as yours, and does not synthesize or clone your voice. Kindred is currently for your own personal use; features allowing others to access your story are not currently offered.
• Power the Heirloom Scanner, which sends a photo you take of a physical keepsake to an AI vision model that forms only tentative, non-identifying observations about what the item might be to seed a future guided interview — it does not identify people, does not perform facial recognition or any biometric analysis, and never presents its guesses as established facts.

Important Limitations of AI-Generated Content

AI-generated content may be inaccurate, incomplete, subjective, or incorrect. NarraLife makes no representations regarding the accuracy or reliability of AI-generated narratives, themes, forecasts, or insights.

You should not rely upon AI-generated content from Life Story Compiler for medical, psychological, legal, financial, employment, or any other professional advice. AI-generated content is provided solely to help you reflect on and organize your personal story.

Your content is used to provide and improve the AI features of the Service. We do not use your personal stories to train general-purpose AI models without your explicit, separate consent. Where AI features require sending content to third-party AI providers, we require those providers to treat your content as confidential, use it only to generate your requested output, and not train their models on it without your separate consent.

Voice Recording

Voice recording features — including voice journaling and the guided voice interview — require your explicit, affirmative consent before activation. We will present a clear disclosure before any recording begins.

• You may enable or disable voice recording features at any time in Settings
• Audio recordings are processed solely to provide requested transcription and narrative services
• We do not retain raw audio recordings longer than necessary to produce transcriptions and narrative content
• Where a feature plays your voice back to you (for example, surfacing a recording as part of a Kindred answer), it plays your actual recording

No biometric or voiceprint processing. Your voice recordings are stored and transcribed as personal Content at your direction. We do not use your recordings to create a biometric voiceprint, to identify or authenticate you biometrically, or to synthesize, clone, or artificially generate your voice. We do not perform biometric analysis of your voice.

Passive Listening: Life Story Compiler does not engage in passive listening. Any future passive listening functionality — if ever introduced — will be strictly opt-in, disabled by default, and require your separate, explicit authorization before activation.

Social and Sharing Features

Life Story Compiler is private by default. Several optional features let you share or connect parts of your story. Each is governed by your explicit consent, and you remain in control.

Story Passports

A Story Passport is a curated view of your story (which may include your essence, selected chapters, and earned stamps). You control it completely:

• You decide exactly what is included
• You set visibility: Private (only you, the default), Link-only (viewable by anyone who has the link you share, not discoverable), or Public (a discoverable profile, opt-in and off by default)
• Shared Passports are viewable as a read-only page; you may restrict, change, or revoke access at any time
• Public/discoverable sharing is not available to minors

NarraLife never shares or publishes your Story Passport without your affirmative action.

Witness

Witness lets you invite people who shared an experience with you to add their own memories to a chapter. Invitations are sent through a secure link (which you may have us email or share yourself). Contributions are added to your story with the contributor's knowledge, and you control how they appear.

Cairns

Cairns lets you receive, and optionally leave, short reflections connected to the chapter of life you are in. To protect everyone involved:

• Reflections are shared one-way and anonymously — there is no live messaging or direct contact between users
• Every reflection is screened before it is delivered
• Cairns is available to adults (18+) only
• Where a reflection or situation suggests crisis, we surface supportive resources rather than routing it to another user

Connected Stories

Connected Stories lets you link your story with a specific family member or friend through layered, revocable consent:

• Connecting requires both people to agree, and by itself shares nothing
• Sharing is explicit, previewed before it takes effect, and independent in each direction — you choose exactly what (if anything) the other person can see
• Shared Moments (linking a co-experienced event) require both people's consent
• Sensitive content requires an additional confirmation before it can be shared
• You may narrow, un-share, or fully disconnect at any time, which stops access going forward
• Stories are never merged — each person always owns and controls their own
• Connections involving minors are subject to the heightened protections described under "Children's Privacy"

FamilySearch Integration

If you choose to connect a FamilySearch account, the integration works in two directions, both under your control:

• Reading your ancestral line: With your authorization (via FamilySearch's secure sign-in), we read information about your ancestors — names, key dates and places, and relationships — to help anchor your life story within your family lineage. We treat this as a starting point you can confirm, and we do not alter FamilySearch records.
• Contributing your Memories: You may choose to publish your own stories and photos from Life Story Compiler to your person in the FamilySearch Family Tree. This is always initiated by you, limited to your own content, and shown to you for confirmation before anything is sent. We never publish to FamilySearch automatically.

Information exchanged with FamilySearch is handled under FamilySearch's own terms and privacy practices, which we encourage you to review. You may disconnect the integration at any time.

Ownership of Your Content

You retain full ownership of your content.

NarraLife does not claim ownership of the memories, journal entries, photos, recordings, story chapters, or any other content you create within Life Story Compiler. Your life story belongs to you.

You grant NarraLife a limited, non-exclusive license to store, process, and display your content solely for the purpose of providing the Service to you. This license terminates when you delete your content or close your account.

Privacy Model: Private by Default

Life Story Compiler is built on a Private by Default foundation:

• No content you create is publicly visible unless you intentionally choose to share it
• Your journal entries, memories, and story content are accessible only to you
• Sharing requires an affirmative action on your part — we never share your content automatically
• You may review and withdraw any sharing permissions at any time

How We Use Your Information

We use the information we collect to:

• Create and maintain your account and authenticate you (via one-time email codes)
• Provide, operate, and improve the Service
• Generate AI-powered narrative features (chapters, themes, insights, summaries, the guided interview, and more)
• Process voice recordings into transcriptions and narrative content
• Enable optional social and sharing features (Story Passports, Witness, Cairns, Connected Stories) that you choose to use
• Operate the FamilySearch integration at your direction
• Process subscriptions and payments through our payment providers
• Send you product updates, security alerts, and support communications
• Analyze usage patterns to improve the Service
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with applicable legal obligations

How We Share Your Information

NarraLife does not sell your personal information. NarraLife does not sell your life stories. NarraLife does not sell your voice recordings. NarraLife does not sell Story Passport information. We do not show advertising in the Service.

We may share information only in the following limited circumstances:

With Other Users — Only at Your Direction

Where you choose to use a sharing feature, the content you select is shared accordingly: a Story Passport with those you give the link to; a chapter with people you invite through Witness; an anonymous reflection through Cairns; or selected content with a person you connect with through Connected Stories. This sharing only ever happens through your affirmative, revocable action.

Service Providers

We share data with third-party vendors who assist us in operating the Service, including cloud hosting providers, database services, email/authentication providers, payment and subscription processors (such as RevenueCat for subscription management, and Apple, Google, and Stripe for processing payments), print-on-demand and order-fulfillment providers (such as Lulu, for printed book orders), backup storage providers, security providers (such as our anti-spam service), and AI processing providers. These providers are contractually bound to use your data only to provide services to us and not for their own purposes.

AI Processing Providers

Certain AI features may involve sending portions of your content to third-party AI providers (such as large language model APIs). We require these providers to treat your content as confidential and to use it only to generate your requested output. We do not permit them to use your content for model training without your separate consent.

FamilySearch

If you connect FamilySearch, information is exchanged with FamilySearch as described in the "FamilySearch Integration" section — reading your ancestral data, and publishing only the Memories you choose to contribute.

Payment Processors

When you purchase a subscription, our subscription manager (RevenueCat) and the relevant payment processor (Apple, Google, or Stripe for web purchases) receive the information necessary to process your payment and confirm your subscription. For a one-time printed-book order, the charge is processed directly by Stripe. We do not receive or store your full payment card details.

Legal Requirements

We may disclose information when required by applicable law, court order, or lawful request by government authorities. We will notify you of such requests where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred. We will notify you in advance and provide the opportunity to delete your account before any such transfer.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit — all data transmitted between your device and our servers is encrypted using TLS/HTTPS
• Encryption at rest — your stored content is encrypted at the database and storage layer
• Access controls — access to user data is restricted to authorized personnel on a need-to-know basis
• Passwordless authentication — we use one-time email codes rather than passwords, with secure session and token handling, removing password-related risks entirely
• Secure handling of sharing and connection tokens — invitation and sharing links use unique, expiring tokens
• Regular security reviews and vulnerability assessments

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information using commercially reasonable measures, we cannot guarantee absolute security.

Admin and Operator Access

To operate the Service, keep it secure, provide support, and meet our legal obligations, a limited number of authorized NarraLife personnel may access certain account information. We hold this access to strict, least-privilege controls:

• Need-to-know roles. Staff receive only the access their role requires. Most operational work uses account information — such as your email, plan, status, and activity — and does not involve the private content of your story.
• Protected access to private content. Access to the private content of your story — your entries, voice recordings, photos, and the narratives and insights generated from them — is restricted. It requires a documented, justified reason (such as a support request you have made, a safety investigation, or a legal obligation), is limited in time and scope, and is recorded.
• Audit logging. Administrative actions are written to an audit log, including who took the action and why, so that access is accountable.
• Strong authentication. Administrative access requires multi-factor authentication and is kept separate from the regular sign-in used by members.
• Encryption at rest. Your stored content is encrypted at rest, so it is not readable directly from the underlying database.

Because the Service uses artificial intelligence to organize and enrich your story, our systems must be able to process your content in order to provide those features. This means your content is not technically hidden from our own systems; instead, we protect it through the access controls, authentication, logging, and encryption described above, and we do not permit casual or unrestricted browsing of members' private content. We do not sell your content, and we do not use it for advertising. Where appropriate and not legally restricted, we may notify you if your private content was accessed to resolve a support matter.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain it for a longer period.

Where you have shared content with others (for example, through Connected Stories or a Story Passport), disconnecting or revoking access stops further access going forward. Certain aggregated, anonymized data may be retained indefinitely for analytics purposes; such data cannot be used to identify you.

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Access — You may request a copy of the personal information we hold about you, including all content and account data.

Right to Export — You can download a complete copy of your story at any time from the Settings screen. The export is a single file containing a readable version of your chapters and entries, all of your uploaded photos, and a machine-readable copy of your data, so you can keep or move your story freely. The download link is private to you and expires shortly after it is created.

Right to Correct — You may update or correct inaccurate personal information directly within the app or by contacting us.

Right to Delete — You may request deletion of your account and all associated personal information. Deletion requests will be processed within 30 days. Certain information may be retained where required by law.

Right to Withdraw Consent — Where processing is based on your consent (e.g., voice recording, optional AI features, sharing features, the FamilySearch integration), you may withdraw consent at any time without affecting the lawfulness of prior processing.

Right to Close Your Account — You may close your account at any time from the Settings screen. Account closure will result in deletion of your personal information subject to applicable legal retention requirements.

To exercise any of these rights, contact us at contact@lifestorycompiler.com. We will respond within 30 days (or the timeframe required by applicable law).

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, the right to delete, the right to correct, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising your rights.

We do not sell or share your personal information as defined under California law. To exercise your California privacy rights, contact us at contact@lifestorycompiler.com.

GDPR — EEA and UK Users

If you are located in the European Economic Area (EEA) or United Kingdom, NarraLife processes your personal data under the following legal bases:

• Contract performance — to provide the Service you have requested
• Legitimate interests — to improve the Service, prevent fraud, and ensure security
• Consent — for optional features such as voice recording, AI personalization, social and sharing features, and the FamilySearch integration
• Legal obligation — where required by applicable law

You have the right to lodge a complaint with your local data protection supervisory authority. For inquiries about our GDPR practices, email us at contact@lifestorycompiler.com.

Children's Privacy

Life Story Compiler is not intended for children under the age of 13 (or the applicable minimum digital age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without parental consent, we will promptly delete that information.

Additional protections for minors. Certain features that involve connection with, or visibility to, other people are restricted for users under the age of 18:

• Cairns is available to adults (18+) only
• Public/discoverable Story Passport profiles are not available to minors
• Connected Stories does not permit a minor to openly connect with adults outside a trusted, guardian-approved relationship, and applies the most restrictive settings by default

If you believe a child has provided us with personal information in a manner inconsistent with this policy, please contact us at contact@lifestorycompiler.com.

Third-Party Services

Our Service may integrate with or link to third-party services (such as authentication and email providers, cloud storage, payment processors, AI providers, security/anti-spam providers, and FamilySearch). This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with Life Story Compiler.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Displaying a prominent notice within the app
• Sending a notification to your registered email address
• Requesting your acknowledgment before you continue using the Service where required by law

The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

Governing Law

This Privacy Policy and any disputes arising from it shall be governed by the laws of the State of Nevada, United States, without regard to its conflict of law provisions.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

NarraLife LLC

contact@lifestorycompiler.com

We will respond to privacy inquiries within 30 days (or the timeframe required by applicable law in your jurisdiction).