Privacy Policy

Last updated: August 27, 2026

DocumenTreeMe ("we", "us", "the app") is a family storytelling tool that lets you record spoken memories alongside pages of a physical photo album, then share the resulting audio slideshow with family. Protecting what you entrust to us — your photos, your voice, and your family's stories — is the most important thing we do. This policy explains, in plain language, what we collect, why, and the control you have over it.

The short version. We collect only what's needed to run the app: your email address, the photos you upload, and the audio you record. There is no password — you sign in with a code we email you. Your content is stored privately in your account. We never sell it, never show ads against it, and never use it to train AI models. You can delete any album — or your whole account and everything in it — yourself, from inside the app, in seconds.

1. Who we are

DocumenTreeMe is operated by Max Lawrence. You can reach us at privacy@maxlawrence.ai (or hello@maxlawrence.ai) with any question, request, or complaint about this policy.

2. What we collect

2.1 Information you provide

Account information: your email address. There is no password — DocumenTreeMe doesn't have one, and we never ask you to create one. To sign in you give us your email address and we send you a message containing a sign-in link and a 6-digit code; either one signs you in. You may also optionally link a Google account to the same profile, in which case we receive the email address and basic profile details Google shares as part of that sign-in.
Album content: photographs of album pages or loose prints you upload, and the audio recordings you make.
Commentary: audio recordings contributed by family members you invite to collaborate on an album.
Your display name and optional profile photo: used to label your narration ("Max, storyteller") and to show you on your family tree. The profile photo is downscaled and stored with your account record.
Legacy contact: if you designate one, the name, email, relationship, and optional phone number and message you provide for that person.
Album titles and metadata: titles, subtitles, captions, creation dates, film theme, and display preferences you set.

2.2 Information collected automatically

Sign-in tokens: stored locally on your device so you stay signed in between visits.
A single local preference: a flag on your device recording that you've already seen the introductory tour.
Technical server logs: our hosting providers record ordinary request logs (IP address, timestamp, which resource was requested, error messages) as part of running and securing the service. These are short-lived operational logs, not a profile of you.

We do not use third-party analytics, advertising trackers, or social media pixels. We do not collect location data, contact lists, health data, your device's advertising identifier, or data from other apps. We do not track you across apps or websites.

3. Using the app without an account

You can use DocumenTreeMe as a guest, without signing up at all: add photos, record a memory, and watch it back. In guest mode we hold no account for you and nothing is saved to your private album storage. Note that guest content is still sent to our AI provider (see §5) while you are using those features, because that processing happens on a server rather than on your phone. If you never create an account, we keep no record of you once you close the app.

4. How we use your information

Store and serve your albums so you can play them back and share them.
Sign you in and keep your content visible only to you and people you explicitly share with.
Process audio through a speech-to-text service (see §5) to generate transcripts and captions you can read along with playback.
Detect album-page boundaries and photo orientation in the images you upload, to improve presentation quality.
Notify a legacy contact you've designated, if and when that feature is activated by you or by a verified process you've set up.
Send essential service email — that is, your sign-in link and code, and security or service notices. We don't send marketing emails.

5. How your content is processed

To provide captions and to tidy up your pages, audio recordings are sent to Google's Gemini API for transcription, and images are sent to the same API to detect album-page boundaries and correct orientation. Google processes this content on our behalf as a sub-processor and, per their API terms, does not use your content to train their models. Our own AI key never leaves our server: the app talks to a small function we run, which talks to Google.

Your raw audio and image files are stored in private per-album folders on Supabase (our database, authentication and file-storage provider). Access is controlled by row-level security so that only you — and people you explicitly share an album link with — can read your content.

6. Sharing and the companies that process data for us

We do not sell your personal information and we do not share it for advertising. The only parties who touch your data are:

Supabase — database, authentication, and file storage.
Google (Gemini API) — audio transcription and image analysis.
Resend — delivery of our service email (your sign-in link and 6-digit code). Resend handles your email address and the contents of those messages in order to deliver them.
Vercel — hosting for this website and for the web version of the app.
Google (optional account linking) — only if you choose to connect a Google account to your profile.
People you explicitly share an album with — via a share link or by inviting a collaborator. Anyone holding a share link can view that album and add a voice recording to it, so share links only with people you trust.
Your designated legacy contact — only if you've set one up and only in the circumstance you've defined.
Law enforcement — only where required by a valid legal process.

7. How long we keep it

Album content is kept until you delete it, or until you delete your account.
Account records are kept for as long as your account exists. Deleting your account removes them immediately.
Our providers' operational server logs are rotated on their normal schedules, typically within 30 days.

8. Your rights and controls

Delete your account, instantly and yourself: in the app, tap your initials in the top right to open Account, then Legacy contact, and scroll to Danger zone → Delete my account. Type DELETE to confirm. Your albums, photos, voice recordings and account record are erased within seconds — there is no waiting period and you don't need to email anyone. This cannot be undone.
Delete a single album: use the Delete button on any album card on your home screen. Its photos and recordings go with it.
Keep your own copy: any album can be exported from the player as a video file you can save to your phone or share.
Access and export: if you'd like a copy of your raw content in another form, email us and we'll provide it.
Moderate commentary: as the owner of an album, you can hide or age-restrict a contributor's commentary.
Report something: if you receive a shared album containing content that shouldn't be there, email privacy@maxlawrence.ai and we will review it and remove it where appropriate.
Withdraw a legacy contact: remove or change the contact at any time from the Legacy settings.
Correct your details: your display name and profile photo can be changed at any time in Account.
Object or complain: if you're in the EEA or UK, you also have the right to object to processing and to complain to your local data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).

9. Children

DocumenTreeMe is not directed at children under 13, and we don't knowingly collect personal information from them. Accounts are intended for adults; children are expected to watch family films alongside a grown-up rather than create their own account. If you believe a child under 13 has created an account, please email us and we'll remove it.

10. Security

We use HTTPS everywhere, encrypted storage at rest, row-level access rules, and scoped access tokens. Because there is no password, there is no password for anyone to steal or reuse — but it does mean access to your email inbox means access to your account, so keep your email secure. No system is perfectly secure; if we ever become aware of a breach that affects your data, we will notify you promptly and describe what happened.

11. International transfers

Our providers may store and process your content in the United States or other regions. Where required, transfers rely on the appropriate safeguards (e.g. Standard Contractual Clauses).

12. Changes to this policy

If we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

13. Contact

Questions, requests, or complaints? Email privacy@maxlawrence.ai.