Privacy

Finnela Life, S.L. (single-member company), Spanish tax number B93966844, registered at Av. de la República Argentina, 218 — 08023 Barcelona, Spain. Heirleaf is its trading name.

You can write to hello@heirleaf.com about anything on this page, and a person will answer.

What you write in the book: your name, the year and place you were born, your answers, your dedication, and the cover, cloth and inside design you choose.

If you answer by speaking: the original recording and its transcript. We always keep both.

If you choose the cover with a photograph: that image. We keep it only to set your cover, we publish it nowhere, we use it for nothing else and it travels to no provider: it stays with your book. You can change it or remove it whenever you like from your own link, and it is deleted with everything else when you ask us to delete your data.

If you give us an email address: that address, to tell you your book is ready and to send you at most one weekly reminder with the question inside it. One click stops them.

We ask for nothing else: no phone number, no address, and not your full date of birth unless you want to give it.

And we keep this ourselves, you don't give it to us: when your link was first opened, and a record of which emails we have sent you and when. If you answer by speaking, we also keep the recording. And if somebody gave you Heirleaf as a gift, we have your name and email address because that person gave them to us when they bought it.

When you write to us — to hello@heirleaf.com or from the form on /contact — we handle your email address, your message and, if you fill it in, the link or code you give us. There is no captcha and no tracker on that page. We do not store your IP address in our database; our host, Vercel Inc. (United States), does log it for a few days in its technical records, for security.

What for: to answer you, and nothing else. We don't add you to any list, we don't send newsletters, and we don't use your address for advertising.

Legal basis: our legitimate interest in answering people who write to us, and pre-contractual steps if you ask before buying. We don't ask for your consent because none is needed to reply to you.

How long we keep it: for as long as the conversation lasts and up to a year afterwards, in case you write again about the same thing. Then it's deleted. If you ask us to delete it sooner, we delete it sooner.

Who sees it along the way: the message travels through Resend, our sending provider, and rests in our mailbox. Neither does anything with it other than deliver it.

The form also sends you a copy of your own message. That's deliberate: it gives you a record of what you sent and of the address we'll be replying to.

We do not train artificial intelligence models on what you tell us, and we do not let anyone we hire do it either.

We do not sell or license your data.

There is no advertising, no trackers, no profiling and no social media pixels. We do not measure your browsing.

We do not read your answers out of curiosity. They are only accessed if you ask us for help with a specific problem and it is needed to solve it.

You, with your link. The link is the key: there is no username or password to remember, which is why it is worth not publishing it or forwarding it to anyone you would rather not have read it.

If somebody gave you Heirleaf as a gift, that person sees nothing you write. Not an answer, not a photograph, not your progress. They know you redeemed the code, and that is all. It is a product decision, not a setting you have to turn on.

Your book is going to name living relatives and friends: your mother, your husband, the neighbour upstairs. That data is never published, never indexed and seen by nobody but you. It only leaves here if you take the PDF to a printer yourself.

We cannot notify each person you mention one by one — we have no contact details for them and no idea who you are going to name — so we rely on Article 14(5)(b) of the General Data Protection Regulation, which lifts that duty where it would take disproportionate effort.

If somebody you have mentioned wants to know what is written about them, or wants it removed, they can write to hello@heirleaf.com. We will talk to you about it: the book is yours and the words are yours, but that conversation is had by a person and not by a form.

On Supabase servers in the United States (region us-east-1). We say it plainly because almost nobody does: if you are in the European Union, your data leaves it.

The website is served by Vercel Inc. (United States), which logs your IP address for a few days in its technical records.

Emails are sent by Resend (Ireland), and payment is handled by Paddle, who act as an independent controller of the payment data and not as our processor.

If you answer by speaking, your recording travels to AssemblyAI (United States) to be turned into text. We have switched off their use of that audio to train their models, and they delete it after three days. Our own copy of the original recording stays with us: it is what lets you check what you actually said if the machine writes it down wrong.

Those transfers outside the European Union rely on the European Commission's standard contractual clauses, which form part of our contract with each provider. You can ask us for a copy by writing to hello@heirleaf.com.

Your book, for as long as you like. This product exists to last, and deleting someone's book because they haven't logged in for months would be the opposite of what we sell. There is no expiry and no automatic tidying up.

If you ask us to delete it, we delete it: answers, recordings, photos and link, within thirty days at most and usually the same day. We keep no copy. Whatever you have already downloaded is yours, and that we can neither recover nor delete.

Emails you write to us are kept for as long as the conversation lasts and up to a year afterwards, in case you write again about the same thing.

The record of which emails we have sent you is kept for two years, so we can answer if you ever tell us something never arrived.

Recordings that travel out to be transcribed are deleted by the provider after three days. Ours stays with your book, because it is what lets you check what you said.

Billing records are kept for as long as tax law requires, and that part we cannot delete even if we want to.

You can ask to see what we hold, to correct it, to take it elsewhere, to limit what we do with it, to object, or to delete all of it. Write to hello@heirleaf.com and a person will answer.

We make no automated decisions about you. A machine writes down what you dictate and suggests a short title taken from your own words, but it decides nothing about you and you can correct both.

If you live in the European Union and think we have got it wrong, you can complain to your country's data protection authority; in Spain, the Agencia Española de Protección de Datos.

If you live in California, you also have the right to know what we collect and to ask us to delete it, and not to be treated worse for asking. We do not sell or share personal information in the CCPA sense, so there is nothing to opt out of.

One, and only if you change language: it remembers which language you want the site in. There are no analytics or advertising cookies, so there is no banner to accept either.

“Do Not Track” signal. We do not track your browsing, here or across other websites, so we do nothing differently when your browser sends a “Do Not Track” signal: there is nothing to switch off. No third party collects information about you through this site.

Payment is handled by Paddle, who act as the seller and process your card details. We never see or store your card number: we only know that the purchase was made.

Heirleaf is a product for adults and is not intended for anyone under eighteen. We do not knowingly collect their data. If someone has given you a book and you are under eighteen, write to us before redeeming it and we will sort it out.

Your children or grandchildren appearing in your memories as small children is a different matter. That is your story and you are the one writing it; we do not collect data about them, and there is no way for anyone else to read it.

We will say so on this page, with the date. If the change matters and we have your email address, we will write to you.