Privacy Policy

Last updated: April 14, 2026

DocumenTreeMe ("we", "us", "the app") is a family storytelling tool that lets you record spoken memories alongside pages of a physical photo album, then share the resulting audio slideshow with family. Protecting what you entrust to us — your photos, your voice, and your family's stories — is the most important thing we do. This policy explains, in plain language, what we collect, why, and the control you have over it.

The short version. We collect only what's needed to run the app: your account email, the photos you upload, and the audio you record. Your content is stored privately in your account. We never sell it, never show ads against it, and never use it to train AI models. You can delete any album — or your whole account — at any time.

1. Who we are

DocumenTreeMe is operated by Max Lawrence. You can reach us at privacy@maxlawrence.ai with any question, request, or complaint about this policy.

2. What we collect

2.1 Information you provide

Account information: email address and password when you sign up.
Album content: photographs of album pages you upload, and audio recordings you create.
Commentary: audio recordings contributed by family members you invite to collaborate.
Legacy contact: if you designate one, the name, email, relationship, and optional phone/message you provide for that person.
Album titles and metadata: titles, creation dates, and display preferences you set.

2.2 Information collected automatically

Authentication tokens: stored locally on your device so you stay signed in.
Basic diagnostics: non-identifying error logs to help us fix bugs.

We do not use third-party analytics, advertising trackers, or social media pixels. We do not collect location data, contact lists, or data from other apps.

3. How we use your information

Store and serve your albums so you can play them back and share them.
Authenticate you and keep your content visible only to you and people you explicitly share with.
Process audio through a speech-to-text service (see §4) to generate transcripts and captions you can read along with playback.
Detect album-page boundaries in photos you upload, to improve presentation quality.
Notify a legacy contact you've designated, if and when that feature is activated by you or by a verified process you've set up.
Send essential service emails (password resets, security notices). We don't send marketing emails.

4. How your content is processed

To provide captions and improve playback, audio recordings are sent to Google's Gemini API for transcription, and images are processed to detect album-page boundaries. Google processes this content on our behalf as a sub-processor and, per their API terms, does not use your content to train their models.

Your raw audio and image files are stored in private project folders on Supabase (our hosting and storage provider). Access is controlled by row-level security so that only you — and people you explicitly share an album link with — can read your content.

5. Sharing

We do not sell your personal information and we do not share it for advertising. The only parties who touch your data are:

Supabase — hosting, authentication, and storage.
Google Gemini API — audio transcription and image analysis.
People you explicitly share an album with — via a share link or by inviting a collaborator.
Your designated legacy contact — only if you've set one up and only in the circumstance you've defined.
Law enforcement — only where required by a valid legal process.

6. How long we keep it

Album content is kept until you delete it or delete your account.
Account records are kept for as long as your account exists.
Diagnostic logs are rotated within 30 days.

7. Your rights and controls

Access and export: email us and we will send a copy of your content.
Delete an album: use the Delete button on any album card in the dashboard.
Delete your account: email privacy@maxlawrence.ai and we will remove your account and all associated content within 30 days.
Moderate commentary: as the owner of an album, you can hide or age-restrict any contributor's commentary at any time.
Withdraw a legacy contact: remove or change the contact at any time from the Legacy settings.
Object or complain: if you're in the EEA or UK, you also have the right to object to processing and to complain to your local data protection authority.

8. Children

DocumenTreeMe is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, please email us and we'll remove it. Child-safe playback mode is provided as a convenience for families listening together; it is not a substitute for supervision.

9. Security

We use HTTPS everywhere, encrypted storage at rest, and scoped access tokens. No system is perfectly secure — if we ever become aware of a breach that affects your data, we will notify you promptly and describe what happened.

10. International transfers

Our providers may store and process your content in the United States or other regions. Where required, transfers rely on the appropriate safeguards (e.g. Standard Contractual Clauses).

11. Changes to this policy

If we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

12. Contact

Questions, requests, or complaints? Email privacy@maxlawrence.ai.