Privacy Policy

Privacy Policy

Root AFT LLC, doing business as Hiliree (“Hiliree,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how Hiliree collects, receives, uses, stores, shares, retains, and protects personal information when you use the Hiliree mobile application, website, and related services (collectively, the “Service”).

It also explains important distinctions within Hiliree between:

• Your Hiliree account.
• A family profile representing you or another person.
• A family tree.
• Ownership and management of a family tree.
• Family-tree access permissions.
• User-Level Privacy settings.
• Family-Level Privacy settings.
• Family information contributed independently by other users.

Depending on your location, additional privacy rights may apply under laws such as the GDPR, UK GDPR, California Consumer Privacy Act as amended by the CPRA (“CCPA/CPRA”), Brazil’s LGPD, and other applicable privacy and data-protection laws.

This Privacy Policy is a privacy notice and does not itself constitute consent to processing where consent is legally required. Where applicable law requires separate consent, permission, or authorization, Hiliree will request it through an appropriate notice, setting, device permission, or other mechanism.

This Policy should be read together with Hiliree’s:

• Terms of Service.
• Cookies and Similar Technologies Policy.
• Child Safety Standards.
• Community Guidelines.
• Third-Party Tools and Open-Source Components notices.
• Other applicable notices.

Scope and Who Controls Your Information

Root AFT LLC, doing business as Hiliree, is responsible for determining how personal information is processed in connection with the Hiliree Service, except where another party independently determines its own processing activities.

For privacy questions or rights requests, contact:

Privacy and Data Rights:
privacy@hiliree.com

Where required by applicable law, additional information concerning Hiliree’s legal entity, representative, data-protection contact, or applicable supervisory authority may be provided.

Information We Collect

The information Hiliree collects depends on:

• The features you use.
• Information you choose to provide.
• Information relatives or other users provide.
• Your family-tree relationships.
• Your privacy settings.
• Tree permissions.
• Device permissions.
• Your jurisdiction.
• The technologies necessary to provide and secure the Service.

Account Information

When you create or manage a Hiliree account, we may collect:

• Name.
• Email address.
• Phone number.
• Username or account identifier.
• Profile photo.
• Authentication information.
• Verification information.
• Account preferences.
• Account status.
• Login and security information.

Authentication information may include tokens, verification codes, or other credentials used to verify access to your account.

Hiliree does not need access to your readable device biometric template merely because you use device-supported Face ID, Touch ID, fingerprint, or similar biometric authentication.

Profile Information

You may choose to provide profile details including:

• Name.
• Birthday.
• Gender, where provided.
• Profile photo.
• Current or general location.
• Contact information.
• Other family or profile information supported by the Service.

Some profile information may be subject to User-Level Privacy or Family-Level Privacy controls described later in this Policy.

Family Tree Information

Hiliree allows users to create, manage, and contribute information to family trees.

Family Tree Information may include:

• Names.
• Family relationships.
• Birthdays.
• Gender, where provided.
• Profile photos.
• Current locations.
• Pinned or meaningful locations.
• Birthplaces where provided.
• Death dates.
• Living or deceased status.
• Relationship lines.
• Parents.
• Siblings.
• Spouses or partners where supported.
• Children.
• Other relatives.
• Placeholder family profiles.
• Family-history information.
• Other information users choose to contribute.

A family-tree profile may represent someone who does not have a Hiliree account.

Creating a family profile for another person does not create a Hiliree account for that person.

Information About You Provided by Family Members or Other Users

Because Hiliree is a family platform, we may receive information about you from another user.

For example, a relative may:

• Add your name to their family tree.
• Identify your relationship to another family member.
• Add your birthday.
• Add a profile photo.
• Add family-history information.
• Add a location.
• Create a family profile representing you.
• Invite you to connect with that profile.

This means Hiliree may hold information relating to a person who has not yet created a Hiliree account.

Information received from another user remains subject to applicable privacy law, Hiliree policies, the contributing user’s rights and responsibilities, and any rights available to the person represented by that information.

If you believe information about you within Hiliree is inaccurate, inappropriate, or violates your privacy rights, contact:

privacy@hiliree.com

Hiliree may request information reasonably necessary to verify your identity and evaluate the request.

Handshake Invites and Connection Information

Hiliree’s Handshake Invite process is designed to allow eligible users to mutually establish family connections.

We may process:

• Invite links.
• Contact information used to send an invitation.
• Inviter information.
• Invitee information.
• Invitation status.
• Acceptance status.
• Connection status.
• Family-profile association.
• Relationship information.
• Security information related to invitations.

A Handshake connection does not automatically transfer ownership of a family tree or provide unrestricted access to family-tree information.

Tree Ownership and Access Permission Information

Hiliree may process information concerning the ownership, administration, and access settings of family trees.

This may include:

• Tree creator or owner information.
• Tree access status.
• Invitations to participate.
• Permission changes.
• Connection status.
• Access restrictions.

Depending on available Service functionality, a tree owner may assign permissions including:

No Access

The connected user does not receive access to the applicable family-tree information beyond information otherwise available to them.

View Only

The connected user may view permitted family-tree information but may not edit the applicable tree.

Edit

The connected user may add or modify permitted family-tree information subject to applicable privacy settings, Service rules, and assigned permissions.

Granting View Only or Edit access does not by itself transfer ownership of the originating family tree.

Independent and Overlapping Family Trees

A user who has been invited to, connected with, or represented in another family member’s tree may create and maintain a separate family tree.

Separate family trees may contain some of the same:

• People.
• Relationships.
• Family history.
• Locations.
• Events.
• Other family information.

These trees may remain independently managed and may have different:

• Owners.
• Contributors.
• Privacy settings.
• Access permissions.
• Family information.

Creating or maintaining a separate tree does not automatically transfer, merge, or surrender ownership of another family tree.

Moments, Memories, Photos, Videos, and User Content

Hiliree may allow users to create, upload, post, or share:

• Photos.
• Videos.
• Text.
• Moments.
• Memories.
• Milestones.
• Comments.
• Family announcements.
• Memorial content.
• Event content.
• Other user-generated family content.

Visibility depends on the applicable Service feature, family relationships, sharing choices, permissions, and privacy settings.

Users should respect the privacy and rights of other individuals before sharing information about them.

Chats, Calls, and Communications

Hiliree may process information necessary to provide:

• Chats.
• Messages.
• Voice calls.
• Video calls.
• Notifications.
• Other communication features.

Depending on the feature, information may include:

• Sender and recipient.
• Message content.
• Attachments.
• Timestamps.
• Delivery information.
• Call status.
• Call metadata.
• Technical connection information.
• Security information.

Hiliree may use third-party communication infrastructure to provide some of these services.

The specific handling of communication content may depend on the functionality and provider involved.

Events

If you create or participate in family events, Hiliree may process:

• Event title.
• Description.
• Date and time.
• Location.
• Invitees.
• RSVP information.
• Event communications.
• Virtual meeting information where applicable.

Location Information

Depending on the Service feature and permissions you select, Hiliree may process:

• Locations you manually add.
• Current location information.
• General location information.
• Pinned locations.
• Event locations.
• Family locations.
• Meaningful locations associated with deceased relatives.
• Device-derived location where permission is granted.

Hiliree’s Map View should not be assumed to constitute continuous real-time tracking unless a particular Service feature expressly states otherwise.

Users may have controls over the visibility of certain location information.

Payments and Transaction Information

Where Hiliree offers paid services, subscriptions, purchases, gifts, contributions, or other payment-supported features, transactions may be processed through:

• Apple.
• Google.
• Payment processors.
• Financial service providers.
• Other authorized providers.

Hiliree generally does not need to store full payment-card information when payment processing is performed by an authorized third-party provider.

Hiliree may receive information such as:

• Transaction status.
• Purchase history.
• Subscription status.
• Payment confirmation.
• Transaction identifiers.
• Limited billing information.
• Refund or dispute information.

Payment providers may process information under their own privacy policies and terms.

Support and Communications With Hiliree

If you contact Hiliree, we may process:

• Your name.
• Email address.
• Phone number.
• Message content.
• Support history.
• Attachments.
• Diagnostic information you provide.
• Privacy-rights requests.
• Safety reports.
• Feedback.

Device, Technical, and Usage Information

Hiliree and authorized service providers may collect technical information such as:

• IP address.
• Device identifiers.
• Device type.
• Operating system.
• Browser type.
• App version.
• Language.
• Time zone.
• Session information.
• Log information.
• Crash data.
• Diagnostic information.
• Performance data.
• Security events.
• Feature interactions.
• Usage information.

This information may help us operate, secure, diagnose, and improve the Service.

Cookies and Similar Technologies

Hiliree may use technologies such as:

• Cookies.
• Local storage.
• SDKs.
• Authentication tokens.
• Device or app identifiers.
• Analytics technologies.
• Crash-reporting tools.
• Push-notification technologies.
• Similar technologies.

These technologies may support:

• Authentication.
• Security.
• Preferences.
• Analytics.
• Diagnostics.
• Service functionality.
• Personalization.
• Reliability.

Please review Hiliree’s Cookies and Similar Technologies Policy for additional information.

Information We Receive From Service Providers

Hiliree may receive information from services used to operate the platform, including:

• Login or authentication providers.
• App stores.
• Payment providers.
• Hosting providers.
• Communication providers.
• Analytics providers.
• Crash and diagnostic providers.
• Security providers.
• Customer-support providers.
• Notification providers.

For example, if you use a third-party login provider, Hiliree may receive information such as your name, email address, or authentication identifier.

Hiliree does not receive the password you use with an independent third-party account merely because that provider authenticates you.

How We Use Personal Information

Hiliree may use personal information for the following purposes.

Provide and Manage Accounts

We may use information to:

• Create accounts.
• Authenticate users.
• Verify account access.
• Maintain account settings.
• Protect accounts.
• Support device biometric login.
• Provide account recovery.
• Respond to account requests.
• Process account deletion.

Provide Family Tree Functionality

We may use information to:

• Create family trees.
• Organize family relationships.
• Display relationship lines.
• Maintain profiles.
• Support family placeholders.
• Organize generations.
• Connect related profiles.
• Manage family information.
• Support family-tree ownership and permissions.

Manage Permissions, Privacy, and Connections

We may use information to:

• Manage Handshake Invites.
• Confirm connections.
• Apply tree-access permissions.
• Apply privacy settings.
• Restrict visibility.
• Manage Unlink actions.
• Manage tree participation.
• Prevent unauthorized connections or access.

Provide Hiliree Insights and Personalized Experiences

Hiliree may use information available within your Hiliree experience to provide Hiliree Insights and other personalized experiences.

Information used may include:

• Names.
• Family relationships.
• Family-tree structure.
• Birthdays.
• Locations.
• Profile details.
• Family information.
• Preferences.
• Interactions with Hiliree.
• Feedback on Insights or other features.

Hiliree Insights are intended to support curiosity, storytelling, family connection, and conversation.

They are not intended to constitute verified:

• Genealogy records.
• DNA analysis.
• Ancestry determinations.
• Ethnic determinations.
• Religious determinations.
• Medical conclusions.
• Psychological assessments.
• Legal conclusions.
• Financial conclusions.
• Identity verification.
• Certified historical findings.

Communications

We may use information to:

• Deliver chats and messages.
• Support voice and video calls.
• Deliver invitations.
• Send notifications.
• Provide Service communications.
• Maintain communication functionality

Moments, Memories, and Events

We may use information to:

• Store and display user content.
• Support Moments.
• Preserve memories.
• Create events.
• Manage RSVPs.
• Support family celebrations.
• Maintain milestone and memorial content.

Security, Safety, and Abuse Prevention

We may use information to:

• Protect accounts.
• Detect suspicious activity.
• Prevent unauthorized access.
• Investigate misuse.
• Detect fraud.
• Protect minors and other users.
• Respond to reports.
• Enforce Hiliree policies.
• Protect the security and integrity of the Service.

Analytics, Reliability, and Product Improvement

We may use information to:

• Diagnose errors.
• Monitor reliability.
• Analyze feature usage.
• Improve performance.
• Improve navigation and usability.
• Develop or test Service improvements.
• Understand general engagement patterns.

Where appropriate, Hiliree may use aggregated, de-identified, or pseudonymized information for these purposes.

Pseudonymized information may remain personal information under applicable law.

Support

We may use information to:

• Respond to questions.
• Resolve technical issues.
• Investigate complaints.
• Handle privacy requests.
• Respond to safety reports.
• Improve customer support.

Payments

Where applicable, we may process limited transaction information to:

• Confirm purchases.
• Manage subscriptions.
• Provide receipts.
• Process refunds.
• Prevent payment fraud.
• Resolve billing disputes.
• Meet accounting or legal requirements.

Legal and Compliance Purposes

We may process information where reasonably necessary to:

• Comply with law.
• Respond to lawful legal process.
• Establish or defend legal claims.
• Protect users.
• Protect Hiliree.
• Respond to child-safety concerns.
• Maintain required records.
• Enforce agreements.
• Investigate security incidents.

Hiliree Does Not Make High-Impact Automated Decisions

Hiliree does not use Hiliree Insights or personalization to make decisions producing legal or similarly significant effects concerning users in areas such as:

• Credit.
• Employment.
• Housing.
• Insurance.
• Healthcare eligibility.
• Education admissions.
• Government benefits.

Where applicable law provides rights concerning solely automated high-impact decisions, Hiliree will provide the required protections if such processing is introduced in the future.

Family Tree Privacy and Visibility Controls

Hiliree provides privacy tools intended to help users manage family information.

Privacy settings and tree permissions are separate concepts.

User-Level Privacy

User-Level Privacy applies to information relating to the individual user.

Depending on available functionality, users may restrict or blur visibility of their own:

• Birthday.
• Location.
• Contact information.

Family-Level Privacy

Family-Level Privacy applies privacy restrictions across people represented within a particular family tree.

Depending on available functionality, a Family-Level Privacy setting may blur or restrict applicable information, including:

• Birthdays.
• Locations.
• Contact information.

across the family tree.

User-Level and Family-Level privacy settings may operate together.

An applicable privacy restriction may reduce what another user is able to view even if that person is connected to the family or otherwise has tree access.

What “Blurred” or “Restricted” Means

A privacy setting that blurs, masks, or restricts information controls its visibility within the applicable Hiliree experience.

Changing a visibility setting does not necessarily:

• Delete the underlying information.
• Remove the family profile.
• Delete the account.
• Terminate a family relationship.
• Unlink a connected account.

Deletion and account-management actions are separate from visibility settings.

Privacy Does Not Depend Solely on Family Relationship

Being related to another person does not automatically provide unrestricted access to their information.

Visibility may depend on:

• Tree permissions.
• User-Level Privacy.
• Family-Level Privacy.
• Connection status.
• Sharing choices.
• Service functionality.
• Applicable Hiliree policies.

Information About Living People

Hiliree allows users to contribute family information about living relatives.

Users should only provide information where they have an appropriate reason, authority, permission, or lawful basis to do so.

Users should exercise additional care when sharing:

• Locations.
• Contact information.
• Photos or videos.
• Information about children.
• Sensitive family circumstances.
• Health information.
• Financial information.
• Legal information.
• Other highly private information.

Hiliree may respond to valid privacy requests from individuals represented within another user’s family tree in accordance with applicable law.

Sensitive Personal Information

Hiliree does not require most categories of highly sensitive information for ordinary Service use.

Users should avoid unnecessarily uploading information such as:

• Government identification numbers.
• Financial account credentials.
• Medical records.
• Genetic or DNA information.
• Protected legal documents.
• Highly sensitive information about minors.
• Precise location where unnecessary.
• Highly private family information.

Some information available through Hiliree - such as location, information about minors, family relationships, or other personal details-may receive heightened legal protection depending on jurisdiction and context.

Hiliree does not provide DNA testing or genetic analysis.

Children and Minors

Hiliree accounts are not intended for children under 13 or below any higher minimum age required by applicable law.

Users who are 13 through 17, or otherwise below the applicable age of majority, may require parent or guardian permission as described in Hiliree’s Terms of Service.

A child or minor may nevertheless be represented within a family tree without having a Hiliree account.

This distinction is important:

A minor having a family-tree profile does not mean that Hiliree has created an account for that minor.

Hiliree may therefore receive information about minors from parents, guardians, relatives, or other users creating legitimate family-history content.

Users should exercise particular care when sharing information concerning minors.

Users should avoid unnecessarily providing:

• Precise home locations.
• School information.
• Contact details.
• Daily routines.
• Financial information.
• Medical information.
• Sensitive legal information.
• Content that could create a safety or exploitation risk.

If Hiliree learns that a child under the applicable account age has created an account or provided personal information directly in violation of applicable law, Hiliree may take appropriate steps to restrict or delete the account and associated information.

Parents, guardians, or other authorized persons may contact:

privacy@hiliree.com

Hiliree’s separate Child Safety Standards also apply to content and conduct involving minors.

Legal Bases for Processing

Where applicable law requires Hiliree to identify a legal basis for processing, Hiliree may rely on one or more of the following.

Contract

Processing necessary to provide the Service requested by the user, including:

• Account functionality.
• Family trees.
• Invitations.
• Communications.
• Events.
• Privacy controls.
• Account management.

Consent

Where required, consent may apply to:

• Optional device permissions.
• Certain location processing.
• Marketing.
• Non-essential cookies.
• Certain personalization.
• Other optional features.

Users may withdraw consent where applicable.

Legitimate Interests

Where legally permitted, Hiliree may rely on legitimate interests relating to:

• Security.
• Fraud prevention.
• Service improvement.
• Customer support.
• Reliability.
• Abuse prevention.
• Personalization.
• Protecting users.
• Protecting platform integrity.

Where required, Hiliree considers the impact of these interests on individual rights and freedoms.

Legal Obligation

Processing may be required for:

• Law enforcement requests.
• Court orders.
• Tax.
• Accounting.
• Child-safety reporting.
• Regulatory compliance.
• Other legal obligations.

Vital Interests

In limited circumstances, information may be processed where necessary to protect the life or physical safety of a person and applicable law permits such processing.

How We Share Personal Information

Hiliree may disclose personal information in the circumstances described below.

Other Hiliree Users

Information may be visible to relatives or other Hiliree users according to:

• Family connections.
• Tree permissions.
• User-Level Privacy.
• Family-Level Privacy.
• Moment or content settings.
• Event invitations.
• Sharing choices.

A connection does not automatically make all information visible.

Service Providers

Hiliree may use service providers supporting:

• Cloud hosting.
• Databases.
• Storage and backups.
• Authentication.
• Communications.
• Chat.
• Voice or video functionality.
• Security.
• Analytics.
• Crash diagnostics.
• Notifications.
• Customer support.
• Content delivery.
• App distribution.
• Payment processing.
• Personalization and Hiliree Insights.
• Other Service functionality.

These providers may process information on Hiliree’s behalf as necessary to provide their services.

Where required, Hiliree seeks contractual commitments relating to:

• Confidentiality.
• Data protection.
• Security.
• Appropriate use.
• Deletion or return of data.
• Compliance obligations.

Hiliree does not publish complete infrastructure or security architecture details where doing so could compromise Service security.

Legal, Safety, and Security Disclosures

Hiliree may preserve or disclose information where required or permitted to:

• Comply with applicable law.
• Respond to legal process.
• Protect a person from serious harm.
• Respond to child-safety concerns.
• Investigate fraud or abuse.
• Protect Hiliree.
• Protect users.
• Enforce Hiliree policies.
• Investigate security incidents.

Business Transactions

Personal information may be transferred in connection with:

• A merger.
• Acquisition.
• Financing.
• Corporate restructuring.
• Sale of assets.
• Bankruptcy.
• Similar business transaction.

Where required, users will be notified of material changes to the controller or treatment of personal information.

At Your Direction or With Your Consent

Hiliree may share information when:

• You expressly ask us to do so.
• You choose a feature that requires sharing.
• You authorize a connection.
• You otherwise provide valid consent.

Sale, Sharing, and Behavioral Advertising

Hiliree does not sell personal information.

Hiliree does not use personal information, family information, Family Tree information, communications, photos, videos, Moments, locations, or other User Content for third-party advertising, targeted advertising, or cross-context behavioral advertising.

Hiliree does not provide personal information to advertisers or advertising networks for the purpose of creating advertising profiles, targeting advertisements, or marketing unrelated third-party products or services to users.

Hiliree may disclose limited personal information to trusted service providers where reasonably necessary to operate, secure, maintain, support, personalize, analyze, or improve the Service. These providers may include hosting, infrastructure, authentication, communications, analytics, security, mapping, notification, support, and similar technology providers.

These service-provider disclosures are made for operational purposes and not for advertising purposes.

Privacy laws may define terms such as “sale,” “sharing,” or “targeted advertising” differently across jurisdictions. If Hiliree’s practices materially change in the future, Hiliree will update this Privacy Policy and provide any notice, consent, or opt-out rights required by applicable law before beginning such processing.

Your Privacy Rights

• Depending on where you live and which laws apply, you may have rights to:

  • Know whether Hiliree processes personal information about you.
  • Access your personal information.
  • Correct inaccurate information.
  • Delete personal information.
  • Obtain a portable copy.
  • Restrict certain processing.
  • Object to certain processing.
  • Withdraw consent.
  • Opt out of certain sales or sharing.
  • Opt out of targeted advertising.
  • Limit certain uses of sensitive personal information.
  • Appeal certain privacy-rights decisions.
  • Lodge a complaint with a privacy or data-protection authority.
  • Exercise other rights provided by applicable law.

  Hiliree does not sell personal information or process personal information for targeted or cross-context behavioral advertising. Accordingly, certain sale or advertising-related opt-out rights may not apply to Hiliree’s processing practices.

  Not all rights apply in every jurisdiction or circumstance.

  Hiliree may need to verify your identity before completing certain requests.

  Requests may be limited or denied where applicable law permits, including where information must be retained for:

  • Legal compliance.
  • Fraud prevention.
  • Safety.
  • Security.
  • Legal claims.
  • Protection of other individuals’ rights.

  To exercise privacy rights:

  privacy@hiliree.com

Privacy Rights for People Represented in Someone Else’s Tree

You do not necessarily need to own a Hiliree account to have privacy rights over personal information relating to you.

If another person has created a family profile representing you and you believe the information is:

• Incorrect.
• Inappropriate.
• Unlawfully shared.
• Excessive.
• A threat to your privacy or safety.

you may contact Hiliree.

Hiliree may need to balance:

• Your rights.
• The rights of the family-tree owner.
• The rights of other users.
• Freedom-of-expression considerations where applicable.
• Legal obligations.
• Legitimate family-history uses.
• Applicable privacy-law exceptions.

Hiliree may verify identity before acting on a request.

U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights.

Where applicable, these may include rights to:

• Confirm processing.
• Access personal information.
• Correct inaccurate information.
• Delete personal information.
• Obtain portable information.
• Opt out of sale.
• Opt out of targeted advertising.
• Opt out of certain profiling.
• Limit certain sensitive-data processing.
• Appeal a denied request.
• Exercise rights without unlawful discrimination.

Hiliree will provide applicable rights where required by law.

California Privacy Notice

This section supplements the Privacy Policy for California residents where the CCPA/CPRA applies.

Depending on Service use, Hiliree may collect the following categories of personal information:

Sources

Personal information may come from:

• You.
• Other Hiliree users or family members.
• Your device.
• Service providers.
• App stores.
• Authentication providers.
• Payment providers.
• Other sources described in this Policy.

Business Purposes

Hiliree may process these categories for purposes described in this Privacy Policy, including:

• Service functionality.
• Family-tree services.
• Communications.
• Privacy controls.
• Security.
• Hiliree Insights.
• Personalization.
• Support.
• Analytics.
• Legal compliance.

Categories of Recipients

Information may be disclosed to:

• Family members and users according to applicable settings.
• Service providers.
• Payment providers where applicable.
• Legal or regulatory authorities where required.
• Parties involved in a business transaction.
• Other parties at your direction.

Sale and Advertising

Hiliree does not sell personal information. Hiliree does not share personal information for cross-context behavioral advertising and does not use personal or family information for targeted or third-party advertising

Hiliree may disclose personal information to service providers and contractors that process information on Hiliree’s behalf for legitimate operational purposes, subject to applicable contractual and legal restrictions.

Sensitive Personal Information

Hiliree does not use sensitive personal information for the purpose of inferring characteristics about individuals where prohibited by applicable law.

Non-Discrimination

Hiliree will not unlawfully discriminate against a user because the user exercises an applicable privacy right.

Global Privacy Control

Where applicable law requires Hiliree to honor a qualifying Global Privacy Control (“GPC”) or similar opt-out preference signal, Hiliree will process that signal as required.

This does not prevent Hiliree from processing information necessary for:

• Security.
• Authentication.
• Fraud prevention.
• Core Service functionality.

where permitted by law.

EEA, UK, Switzerland, and Similar Privacy Rights

Where GDPR-style laws apply, individuals may have rights including:

• Access.
• Rectification.
• Erasure.
• Restriction.
• Objection.
• Portability.
• Withdrawal of consent.
• Complaint to a supervisory authority.

If Hiliree relies on legitimate interests, users may have the right to object to such processing in circumstances provided by law.

If processing is based on consent, withdrawal of consent does not affect processing that lawfully occurred before withdrawal.

Users may contact their local data-protection authority where applicable.

Brazil

Where Brazil’s LGPD applies, rights may include:

• Confirmation of processing.
• Access.
• Correction.
• Anonymization.
• Blocking.
• Deletion where applicable.
• Portability where applicable.
• Information concerning sharing.
• Withdrawal of consent.

Other rights provided by law.

Other Jurisdictions

Users in other countries or regions may have additional rights.

Hiliree will respond to valid privacy requests as required by applicable law.

Additional regional notices may be provided where necessary.

App Permissions

Depending on the features you use, Hiliree may request device permissions such as:

• Camera.
• Microphone.
• Photos or media.
• Contacts, where applicable.
• Notifications.
• Location.
• Device biometric authentication.

Permissions are requested in connection with relevant functionality.

You may manage permissions through your device settings.

Some features may not function if the required permission is disabled.

Biometrics

Where Hiliree supports Face ID, Touch ID, fingerprint, or similar device authentication, the biometric match is generally performed by the operating system.

Hiliree does not need to receive your underlying fingerprint or facial biometric template merely to use device-level biometric authentication.

Push Notifications

Hiliree may send notifications concerning:

• Handshake Invites.
• Chats.
• Calls.
• Events.
• Birthdays.
• Moments.
• Family updates.
• Hiliree Insights.
• Security alerts.
• Service notices.

Users may manage optional notifications through Hiliree or device settings.

Certain essential security or account communications may still be delivered where necessary.

Data Security

Hiliree uses administrative, technical, and organizational safeguards designed to protect personal information.

Depending on the system and data involved, safeguards may include:

• Authentication controls.
• Access restrictions.
• Encryption in transit where appropriate.
• Security monitoring.
• Logging.
• Infrastructure protections.
• Data minimization.
• Vendor-security measures.
• Backup and recovery processes.
• Security reviews.

No online service can guarantee complete security.

Users should:

• Protect login credentials.
• Protect devices.
• Avoid sharing verification codes.
• Report suspicious account activity.

Where required by applicable law, Hiliree will provide appropriate notifications concerning qualifying personal-data breaches.

Data Retention

Hiliree retains information only for as long as reasonably necessary for the applicable purpose, subject to:

• Legal requirements.
• Safety.
• Security.
• Fraud prevention.
• Dispute resolution.
• Backup requirements.
• Enforcement.
• Accounting requirements.
• Other legitimate operational requirements.

Retention depends on the information involved.

Account Information

Generally retained while the account remains active and for a limited period afterward where necessary.

User-Created Content

Generally retained while the applicable content remains part of the Service or until deleted, de-identified, or otherwise handled according to applicable rights and retention requirements.

Family Tree Information

May remain while the family tree exists or while another authorized user independently maintains applicable family information.

Communications

Retained according to the requirements of the communication feature, security needs, provider configuration, and applicable legal obligations.

Security and Technical Logs

Generally retained for a limited period appropriate to:

• Security.
• Fraud prevention.
• Troubleshooting.
• Diagnostics.

Support Records

May be retained for:

• Support.
• Quality assurance.
• Dispute resolution.
• Compliance.

Transaction Records

Where applicable, transaction information may be retained for:

• Tax.
• Accounting.
• Fraud prevention.
• Chargebacks.
• Legal obligations.

Backups

Information may remain temporarily within secure backups until those backups are overwritten or expire according to applicable backup cycles.

When information is no longer needed, Hiliree may:

• Delete it.
• De-identify it.
• Anonymize it.
• Aggregate it.

Account Deletion

Users may initiate account deletion through the Hiliree application or through Hiliree’s web-based account deletion request page.

The web-based deletion process is available to users who have uninstalled the application or otherwise cannot access their account through the app.

When an account is deleted, Hiliree will delete or de-identify personal information associated with that account except where retention is legally permitted or required.

Limited information may be retained for purposes such as:

• Legal compliance.
• Fraud prevention.
• Security.
• Child safety.
• Dispute resolution.
• Enforcement.
• Financial records.
• Protection of legal rights.

Hiliree will also take reasonable steps regarding associated information held by service providers where required by applicable law or platform policy.

Account Deletion Is Different From Delete Family Member

Deleting a Hiliree account is not the same as deleting a family profile from a family tree.

Delete Account
Affects the user’s Hiliree account.

Delete Family Member
Removes a family profile from the applicable tree.

Unlink
Disconnects an associated user account from a family profile or connection.

These actions may have different effects.

Information Independently Maintained by Other Family Members

Deleting your account does not necessarily require deletion of every family record created independently by another user about the same person.

For example, a relative may independently maintain a family-history profile representing you within their own tree.

However, applicable privacy rights may allow you to request review, correction, restriction, or deletion of personal information relating to you.

Contact:

privacy@hiliree.com

Data Portability and Export

Where available through the Service or required by applicable law, users may request access to or a copy of personal information associated with their account.

The format and scope of an export may depend on:

• The information requested.
• Other users’ privacy rights.
• Technical feasibility.
• Applicable law.

International Data Transfers

Hiliree and its service providers may process information in countries other than the country where the user resides.

Different countries may provide different levels of legal protection.

Where required, Hiliree may use legally recognized safeguards such as:

• Standard Contractual Clauses.
• Data-processing agreements.
• Adequacy decisions.
• Other approved transfer mechanisms.

Users may contact privacy@hiliree.com for additional information concerning applicable transfer safeguards where legally required.

Third-Party Services

Hiliree may depend on third-party services for portions of the Service.

These may include:

• App stores.
• Authentication.
• Communications.
• Hosting.
• Payments.
• Analytics.
• Security.
• Maps.
• Notifications.
• Other operational services.

Third parties may have their own privacy policies governing processing they perform independently.

Where a service provider processes information on Hiliree’s behalf, Hiliree seeks appropriate privacy and security protections.

Third-Party Links

Hiliree may contain links to websites, applications, or services not controlled by Hiliree.

Hiliree is not responsible for the independent privacy practices of those third parties.

Users should review the privacy practices of external services before providing them with personal information.

Cookies and Similar Technologies

Please review Hiliree’s Cookies and Similar Technologies Policy for information concerning:

• Cookies.
• SDKs.
• Local storage.
• Device identifiers.
• Analytics.
• Diagnostics.
• Consent controls.
• Global Privacy Control.
• Similar technologies.

Where required by law, Hiliree seeks consent before activating non-essential technologies.

Marketing Communications

Hiliree may send communications necessary to:

• Operate accounts.
• Provide security information.
• Deliver family-related notifications.
• Respond to support.
• Provide Service notices.

Where legally permitted, Hiliree may separately send promotional communications.

Users may opt out of optional marketing messages.

Opting out of marketing does not prevent Hiliree from sending necessary:

• Security messages.
• Transactional messages.
• Account notices.
• Legal notices.

Data Accuracy

Hiliree relies substantially on users to provide family information.

Hiliree does not independently verify every:

• Family relationship.
• Birthday.
• Name.
• Location.
• Family story.
• Historical detail.
• Family-tree record.

Users should provide information carefully and update information when appropriate.

Hiliree Insights should not be treated as verification of user-contributed family information.

User Responsibilities

Users are responsible for:

• Protecting account credentials.
• Providing appropriate account information.
• Respecting relatives’ privacy.
• Using privacy controls responsibly.
• Sharing information lawfully.
• Obtaining permission where required.
• Avoiding unnecessary sensitive information.
• Protecting minors’ information.
• Following Hiliree policies.

Access to another person’s information within Hiliree does not necessarily authorize the user to copy, redistribute, publish, or use that information outside the permitted family context.

Privacy Notices at the Time of Collection

In addition to this Privacy Policy, Hiliree may provide shorter notices at relevant moments, such as when requesting:

• Location.
• Contacts.
• Camera.
• Microphone.
• Photos.
• Notifications.
• Optional cookies.
• Other sensitive permissions.

These notices may provide more specific information about the applicable feature or data use.

Changes to This Privacy Policy

Hiliree may update this Privacy Policy to reflect changes in:

• Service functionality.
• Privacy practices.
• Law.
• Technology.
• Service providers.
• Security practices.
• Business operations.

The Last Updated date identifies the current published version.

Where required by law, Hiliree may provide additional notice before materially different processing begins.

Where consent is required for a new use, Hiliree will seek that consent rather than relying solely on continued use of the Service.

Contact Us

For questions about this Privacy Policy or privacy-rights requests:

Privacy and Data Rights
privacy@hiliree.com

For general assistance:

Hiliree Support
support@hiliree.com

For child-safety concerns:

Child Safety
safety@hiliree.com

Where required by applicable law, Hiliree may provide additional contact details for a local representative, data-protection officer, or applicable privacy authority.