# Privacy Policy

> Family Asset Map — A private asset map for you and your family.

Version 1.0 | Effective 2026-10-18

Your data and your rights.

## 1. Controller

Operator: alte.capital, Poland. Contact: [contact@familyassetmap.com](mailto:contact@familyassetmap.com)

Eligibility: For adults aged 18 or over who can enter into this agreement. The service is not intended for children. Contact us if a child has created an account.

## 2. Data and purpose

To fulfil our agreement, we use your email, account ID, portfolio, sharing settings and support messages. Email is required for online accounts. For our legitimate interests in security and requested sharing, we use IP addresses, sign-in attempts and recipient emails supplied by portfolio owners.

## 3. Providers

[Cloudflare](https://www.cloudflare.com/cloudflare-customer-dpa/) hosts and stores data; [Microsoft Entra External ID](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) handles sign-in; [Resend](https://resend.com/legal/dpa) sends invitations using the recipient email and portfolio link, without portfolio contents or passphrases. Contact emails are forwarded through Cloudflare to [Google Gmail](https://policies.google.com/privacy/frameworks). We may disclose data when legally required. We do not sell personal data, share it for targeted advertising or use portfolio contents to train AI models.

International transfers and safeguards: Providers may process data outside the European Economic Area, including the US. Their published terms describe safeguards such as EU adequacy decisions and Standard Contractual Clauses, depending on the service and transfer. Contact us for details or a copy of applicable safeguards.

## 4. Protection and retention

E2EE encrypts portfolio contents in your browser; account and sharing metadata remain available to us. Standard mode allows server decryption. Older saved versions keep their original protection and are not automatically deleted.

Retention periods: Account, portfolio, history and sharing data are kept until you request deletion. Support messages and security records are kept as needed to resolve requests and disputes, prevent abuse or meet legal duties. Provider logs follow their retention rules.

Request account and history deletion by email; there is no deletion button yet.

## 5. Your rights / GDPR

Subject to applicable law, ask us for access, correction, deletion, portability, restriction or objection. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may verify your identity; never send your passphrase. EU requests normally receive a response within one month; lawful extensions of up to two further months are explained within that month. You may complain to [UODO](https://uodo.gov.pl/en) in Poland or your local data protection authority. US rights depend on your state; contact us to review a decision. We will not discriminate against you for exercising your rights.

## 6. Cookies and updates

The app has no advertising or analytics trackers, or automated decisions with legal or similarly significant effects. See [Cookies](https://familyassetmap.com/cookies). We will notify you of important policy changes.

[Open app](https://familyassetmap.com/app)