Privacy, protection, and trust.

This Privacy Policy applies to CarryForward.life and CarryForward services, including Memorial spaces, Life Legacy spaces, stories, memories, photos, videos, voice recordings, journal entries, private vault items, invite links, notifications, exports, and Google Drive storage integrations.

When we say "CarryForward," "we," "us," or "our," we mean the CarryForward service. When we say "you," we mean a visitor, account holder, Legacy Person, owner, Legacy Steward, family member, guest, invite recipient, or other person using the service.

We collect information you provide directly, information created through your use of the service, and limited technical information needed to operate and secure CarryForward.

• Account information, such as name, email address, password credentials, profile details, and sign-in activity.
• Space information, such as full name, preferred name, dates, tagline, theme settings, privacy settings, roles, invite links, and membership status.
• Content you or invited members add, including stories, memories, photos, videos, voice recordings, comments, loves/reactions, journal entries, questions, answers, milestone markers, values, wishes, and other legacy information.
• Storage and export information, including whether a space uses CarryForward-managed storage or the owner's Google Drive, media file metadata, export history, and memory book package information.
• Support, feedback, and administrative communications you send to us.
• Technical and security data, such as device/browser information, IP-related data, logs, cookies or similar session technologies, and actions needed to detect misuse or keep the service working.

We use information to provide, protect, and improve CarryForward. This includes:

• Creating accounts, Life Legacy spaces, Memorial spaces, invite links, and role-based access.
• Displaying stories, memories, milestone markers, questions, answers, comments, media, notifications, and exports to authorized users.
• Letting users record, upload, store, organize, download, restore, delete, and export permitted content.
• Managing privacy choices, scheduled stories, after-passing stories, and Life Legacy-to-Memorial conversion review.
• Connecting to Google Drive when an owner chooses Google Drive storage.
• Preventing unauthorized access, misuse, spam, fraud, data loss, and security incidents.
• Responding to support requests, legal obligations, and user rights requests.
• Improving the service, including usability, reliability, and future features.

CarryForward spaces are designed to be private and invite-only. Access is based on the role assigned within a space, such as owner, Legacy Person, Legacy Steward, family member, guest, or administrator. Some actions are limited to specific roles. For example, a Legacy Person may have access to private Life Legacy items that are not visible to an owner when the owner and Legacy Person are different people.

You should only invite people you trust. People with access may be able to see, download, export, comment on, or otherwise interact with content according to their permissions.

Life Legacy spaces may include stories that are available now, scheduled for a future date, or available after passing. Scheduled and after-passing stories are kept out of the normal Life Legacy timeline until their release conditions are met.

If the owner and Legacy Person are different people, after-passing stories are intended to remain private to the Legacy Person while the space remains a Life Legacy. When a Life Legacy is approved for conversion into a Memorial space, after-passing stories may become eligible for release according to the conversion settings and review process.

We intend to preserve private scheduled and after-passing stories so they are not lost due to routine account, billing, or storage changes without notice and an appropriate recovery or delivery path.

If a space owner chooses Google Drive storage, CarryForward asks Google for the permissions needed to create folders and store uploaded media in the connected Google Drive. CarryForward uses Google Drive access only to provide user-facing storage features you choose inside the app.

• CarryForward may create a top-level CarryForward folder and space-specific subfolders in the connected Google Drive.
• Original uploaded media may be stored in Google Drive when Google Drive storage is selected.
• CarryForward may keep secure preview versions or metadata so content loads correctly in the app.
• CarryForward does not sell Google user data and does not use Google Drive data for advertising or unrelated purposes.
• CarryForward does not allow humans to read Google Drive files except when necessary to provide support you request, investigate abuse or security issues, comply with law, or with your permission.
• You can disconnect Google Drive from a space, but disconnecting may affect future uploads or Drive-based restoration.

CarryForward's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If a file stored in Google Drive is deleted directly from Google Drive, CarryForward may detect the deletion during sync and move the related story or memory into a private Deleted / Needs Review area for authorized reviewers.

If the deleted Drive file is still recoverable from Google Drive Trash, CarryForward may temporarily copy it into CarryForward-managed recovery storage so the story or memory can be restored. Temporary recovery copies are intended to be kept for up to 30 days unless an authorized user permanently deletes the item sooner.

If the file has already been permanently deleted from Google Drive Trash, CarryForward may not be able to restore the media because no recoverable copy remains available to the app.

We do not sell personal information. We share information only in limited ways needed to operate CarryForward:

• With invited members of a space, according to their role and the privacy settings for that space.
• With service providers that help us host, store, secure, email, authenticate, process payments, analyze reliability, or operate the service.
• With Google when you choose to connect Google Drive or use Google authentication features.
• When required by law, legal process, security needs, or to protect rights, safety, and the integrity of CarryForward.
• In connection with a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to appropriate protections.

CarryForward uses cookies or similar technologies to keep you signed in, remember session information, protect invite links, secure the service, and understand basic usage. We do not currently describe CarryForward as selling or sharing personal information for cross-context behavioral advertising.

We use reasonable administrative, technical, and organizational safeguards designed to protect CarryForward accounts, private spaces, media, and connected storage. No online service can guarantee perfect security, so you should use a strong password, protect invite links, and only invite people you trust.

We keep account information, space information, content, logs, and storage records for as long as needed to provide CarryForward, maintain private spaces, satisfy legal obligations, resolve disputes, prevent misuse, and support restoration or exports.

Authorized users may delete certain stories, memories, media, comments, marker moments, journal entries, or spaces depending on their role. Some deletions may be immediate, while others may move content into Deleted / Needs Review or temporary recovery storage before permanent deletion.

CarryForward may be used by parents or guardians to create Life Legacy spaces involving children, such as a child's milestones. CarryForward is not intended for unsupervised use by children under 13. A parent or legal guardian should create and manage accounts or spaces for children where required.

If you believe a child provided personal information without appropriate permission, contact us so we can review and address it.

Depending on where you live, you may have rights to request access to personal information, correction, deletion, portability, restriction, objection, or information about how personal information is used and shared. California residents may also have rights to know, delete, correct, limit certain sensitive information uses, opt out of sale or sharing, and not be discriminated against for exercising those rights.

To make a privacy request, email privacy@carryforward.life. We may need to verify your identity before completing a request. Some requests may be limited by legal exceptions, account security, the privacy rights of other people in a shared space, backup systems, or the need to preserve content for authorized family members.

We may update this Privacy Policy as CarryForward grows. If we make material changes, we will update the date above and, when appropriate, provide additional notice in the app or by email.

Questions or requests can be sent to privacy@carryforward.life.