Privacy Policy

Hearthstone — a legacy-recording service · family-hearthstone.com

What this is

Hearthstone is a legacy-recording application. It sends enrolled users one interview question a week by text message or email, and preserves their recorded answers in a private archive for the recipients they designate. Each deployment is a private, invitation-only instance serving a single family’s archive; no data is shared between instances.

What we collect

Names, phone numbers, email addresses, and the recordings and messages that enrolled users choose to send. Nothing is collected from anyone who has not enrolled.

How it’s used

Contact information is used solely to deliver the scheduled question and, at most, one gentle reminder. Recordings are preserved in the instance’s archive and shared only with the recipients their author designates.

Some instances turn on optional AI help: transcribing recordings, drafting a follow-up question from a member’s recent answers, suggesting who appears in a photo or what date it’s from, and honoring a spoken wish about who a recording is for. For these, the relevant recording text is sent to Anthropic’s API (and audio to OpenAI’s transcription API) as a processor for that instance. Neither provider uses it to train models; inputs may be retained briefly by the provider for abuse monitoring. Suggestions are never applied without a person’s tap. Private and sealed recordings are never sent anywhere.

Family health history (optional)

A member may choose to record family health history — conditions, things they were exposed to, genetic test results, procedures — about themselves, about a child they are the parent of, or about a relative who has passed. Because it describes conditions in family members, this is genetic information in the legal sense, and it is handled differently from everything else in the archive:

• Opt-in, with two separate consents. Nothing is recorded about a living person until they (or, for a minor, a parent) agree in writing on their own page. Letting blood relatives see it is a second, separate choice that can be turned off at any time.
• Who can see it. The person; a parent, for a minor child; and, only if the person chose to share, their blood relatives on the family tree. Never spouses or in-laws. Entries about a relative who has passed are visible to that relative’s blood relatives. The people who run the archive can see that entries exist and whether someone has opted in — never what the entries say. Nothing about health appears on the family tree.
• A code before anything is shown. Even on their own page, a member must enter a code we text or email them before health details are displayed.
• Encrypted. Every health detail is encrypted with a key held only on your family’s own server, outside the archive folder. Backups contain only the encrypted form.
• AI, only when you press the button. An instance may offer “questions to ask my doctor”. It runs only when a member asks, only after they confirm that use, and sends a de-identified list — relation words like “your mother”, no names, no notes unless they tick the box — to Anthropic’s API. It is not medical advice, the answer is shown once and not stored, it is never run in the background, and Anthropic does not use it to train models (inputs may be retained briefly for abuse monitoring).
• An access log. Every view, export, and AI request is logged — who, when, and how many entries — never the content.
• Deletion. A member can remove any entry, and can withdraw entirely: their entries are hidden immediately and erased within 30 days. What they recorded about a relative who has passed stays, attributed to them.

If you live in Washington, Illinois, or another state with a consumer-health-data or genetic-privacy law, you have the right to know what health data an instance holds about you, to withdraw consent, and to have it deleted; contact your instance administrator to exercise these, and Titlepool AI Inc. at the address below if they cannot help.

What we never do

We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, or share phone numbers or any personal information with anyone. Text-messaging originator opt-in data and consent are never shared with any third party.

Messaging details

• Message frequency: typically one message per week, plus at most one reminder.
• Message and data rates may apply.
• Reply STOP at any time to stop receiving messages.
• Reply HELP for help, or contact your instance administrator directly.

Storage & security

Each instance runs on its own private, password-protected server. Recordings marked private by their author are encrypted and cannot be read by anyone until that author chooses to share them.

Contact

Questions or removal requests: contact your instance administrator — the person who invited you — or reply HELP to any message.

Hearthstone is operated by Titlepool AI Inc. · Last updated September 2026.