Privacy Policy

The Family Record is provided by Meridian Capital Stewardship Inc. ("we", "us", "our"), the data controller responsible for personal information collected through this service.

The Family Record is designed to help individuals and households organize important personal information in a clear, private, and secure way. This policy explains what information we collect, how it is used, how it is shared, and the rights you have over it.

You may choose to enter personal information into the Service, including:

• contact details
• family information
• financial summaries
• document references
• notes and instructions

You are in control of what you choose to include.

Your information is used only to:

• provide and operate the Service
• allow you to create and manage your record
• enable features such as printing or sharing summaries
• process payments and provide customer support
• improve the functionality of the Service
• meet legal, accounting, and security obligations

We do not use your information for unrelated purposes.

Where applicable law requires us to identify a legal basis for processing your personal information, we rely on the following:

• Performance of a contract — to provide the Service you have signed up for, including account management, storage of your record, and sharing features you choose to use.
• Legitimate interests — to operate, secure, and improve the Service, prevent fraud and abuse, and communicate with you about your account.
• Consent — where you have given it (for example, optional communications or non-essential cookies). You may withdraw your consent at any time.
• Legal obligation — to comply with applicable laws, tax requirements, and lawful requests from authorities.

The Family Record is built with privacy in mind.

• you decide what information is entered
• you decide what is shared
• you can export or print your record at any time

Your information is securely stored and protected using reasonable technical and organisational safeguards, including encryption in transit, access controls, and audited infrastructure.

We take steps to protect your information from unauthorized access, loss, or misuse.

However, no system can guarantee absolute security.

If you choose to share access with a trusted contact:

• access is limited to the information you choose to share
• recipients access information using secure verification
• you can revoke access at any time

You are responsible for selecting trusted recipients.

We do not sell your personal information. We share it only with the following categories of recipients, and only as needed to operate the Service:

• Service providers who help us host, store, and operate the Service (for example, cloud hosting, database, email delivery, and analytics providers), under contractual confidentiality and data protection obligations.
• Paddle.com Market Limited ("Paddle") — our Merchant of Record and payment processor. When you make a purchase, Paddle collects and processes the personal and payment information needed to complete your order, handle billing, charge applicable taxes, issue invoices, and manage refunds. Paddle acts as an independent controller for that activity. See Paddle's Privacy Notice for details.
• Trusted contacts you designate — only the information you choose to share with them, on the terms you set.
• Professional advisers (such as legal and accounting advisers) where reasonably needed.
• Authorities where we are required to disclose information by law or in response to a valid legal process.

Payments are processed by Paddle, our Merchant of Record. We do not store full payment card details. The information Paddle collects to process your order is handled under Paddle's own privacy terms.

We may collect limited technical information such as:

• browser type
• device type
• usage patterns

Essential cookies are used to keep you signed in and to operate the Service. Any non-essential cookies (for example, analytics) are used only with your consent where required.

Subject to applicable law (including Canadian privacy legislation and, for users in the United States, applicable state privacy laws), you have the right to:

• Access — ask us what personal information we hold about you.
• Correction — ask us to correct information that is inaccurate or incomplete.
• Deletion / erasure — ask us to delete your account and the information associated with it.
• Portability — receive a copy of your record in a portable format, or export it directly from the Service.
• Withdraw consent — where we rely on consent, withdraw it at any time.
• Object or restrict — object to or ask us to restrict certain processing.
• Complain — lodge a complaint with your local privacy regulator (in Canada, the Office of the Privacy Commissioner of Canada or your provincial regulator).

To exercise any of these rights, write to us at hello@familyrecord.ca. We will respond within the time required by applicable law.

You may:

• update your information at any time
• export or print your record
• stop using the Service at any time

Your information is retained while your account remains active.

You may request deletion of your account and associated data at any time. We may retain limited information for as long as required to comply with legal, tax, or accounting obligations, after which it will be deleted or anonymised.

We may update this Privacy Policy from time to time.

Updated versions will be posted with a revised effective date.

For questions about privacy, or to exercise any of your rights, write to Meridian Capital Stewardship Inc. at hello@familyrecord.ca.