Privacy policy

1. Who we are

OneLegacy is a trading name of Brand Scouting Limited, a company registered in Malta (number C113759), registered office: Mercieca Suite 4, Triq It-Tabib Anton Tabone, Rabat, Għawdex VCT9020, Malta. We are responsible for your personal data as described in this policy. In this policy “we” and “us” mean OneLegacy.

To ask anything about your data, write to [email protected].

2. What this policy covers

• The OneLegacy app (Android ie.onelegacy.app, and iPhone/iPad when released).
• The Mulryan Family Legacy app (Android ie.onelegacy.mulryan, and iPhone/iPad when released).
• The family archive websites we run: each family’s own address (for example mulryanlegacy.com) or <name>.onelegacy.ie, and the service the apps talk to, api.onelegacy.ie.
• This website, onelegacy.ie.

A family archive is private. Only people the family invites can sign in, and only they see what is inside.

For what a family puts in its archive, we act on the family’s behalf: the family decides what is added and who may see it, and we store it and keep it safe for them.

3. What we collect and why

Your account

• Your email address and name, as the family entered them when they invited you, and your role in the archive.
• Your password, stored only in a form that cannot be turned back into the password. If you turn on two-step sign-in, its secret is stored encrypted.
• When you last signed in.

We use these to let you sign in and to show the family who added what.

What you add to an archive

• Photographs, films, documents and recordings you choose to add, and the captions, dates, descriptions, names of people and family-tree details you type.
• Files are kept as the originals, with the data your camera or phone stored in them (date, camera and, if the camera recorded it, the place where a photo was taken). Remove the place from a photo before adding it if you do not want it kept.

These are kept in the family’s archive, for the family. The people the family invites can see them, according to the permissions the family sets.

Signing in and keeping the archive safe

• The computers, phones and tablets you are signed in on: the device’s name (for example “Pixel 9” or “iPad, Safari”), its browser, and its internet (IP) address. You can see these and sign them out under Phones and tablets in your account.
• The archive’s history: who signed in, added, changed, downloaded or removed what, and when, with the IP address. Families use it to see what happened in their archive, and we use it to investigate misuse.
• Our servers keep a short technical log of requests (IP address, time, page, browser) for 14 days, to keep the services secure.

Asking to join an archive

If an archive lets people ask to join, the form asks for your name, email address and why you are asking (a library’s archive may also ask for your institution, country and profession). We record the IP address it was sent from. The people who look after that archive decide on your request.

Emails with us and this website

• If you write to us, we keep your messages and contact details so we can answer and keep a record of our conversations.
• The contact form on this website keeps your name, email address and message. It uses your IP address only in a scrambled (hashed) form, to limit spam.
• This website sets no cookies and uses no analytics or advertising.

Face suggestions (only where they are turned on)

A family archive can suggest who is in a photo by comparing faces with people already named in it. It is off unless it is turned on for that archive. The comparison runs on our own server; the face measurements are stored in that archive only, encrypted, and never shared. A person can be marked Don’t suggest, and the archive’s administrators can remove a person’s face data.

4. The apps

• Signing in: your email address and password go to the archive’s server (or to api.onelegacy.ie in the OneLegacy app), with the phone’s name (for example “Pixel 9”) so you can see and end that session later.
• On your phone: the app keeps its sign-in key in the phone’s secure storage (this device only, never in backups). Pictures it has shown are kept on the phone to load faster and removed when you sign out.
• Fingerprint, face or PIN to open the app are checked by your phone; the app never receives them.
• Adding photos and films: only the files you pick are uploaded. The app does not read your photo library otherwise.
• Saving: photos you are allowed to download can be saved to your phone’s Photos. The app only adds; it never reads them back.
• Crash reports: if the app fails, it sends a report to Sentry (Functional Software, Inc., data kept in the EU, Frankfurt): the error, the screen, the phone model, Android or iOS version and app version. No name, email address, photo, link or screen recording is sent, and the IP address is not stored.
• The apps have no ads, no analytics or tracking, do not use the advertising ID, and do not use your location, contacts, microphone or camera.
• The apps are for people aged 18 and over.

5. Cookies

We use only cookies needed to sign you in and keep your account safe. There are no cookies for analytics or advertising, and the archives’ public pages, this website and api.onelegacy.ie set none.

The archive websites also remember your choice of light or dark look and text size in your browser’s own storage; this never leaves your device.

6. Who helps us run the service

We do not sell personal data, use it for advertising, or share it with anyone to use for their own purposes. These companies process data for us, under contract:

• Cloudflare, Inc.: delivers our websites, protects them from attacks, stores each family archive’s files in its own private storage in the EU, and keeps our nightly database backups there (EU).
• Google (Google Workspace): our email, including the emails the archives send you (invitations, sign-in codes, notices).
• Functional Software, Inc. (Sentry): the apps’ crash reports, kept in the EU (section 4).
• OVH: hosts, in the EU (Germany), the server that runs our websites and holds the archives’ databases.

Your app comes from Google Play or the App Store, which have their own privacy policies.

7. Where your data is kept

Family archives’ files and our nightly database backups are stored in the European Union, and our server is in the EU (Germany). The server is also backed up as a whole, so that it can be rebuilt after a failure.

Google and Sentry are companies based in the United States; Sentry keeps the apps’ crash reports in the EU. Where a provider may handle personal data outside the EU, it does so under its data processing terms for business customers, which include the safeguards EU law requires.

8. How long we keep it

9. Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to limit how we use it or to object to it, and to receive the data you gave us in a common format. Write to [email protected]; we answer within one month.

• Leaving an archive and deleting your account: you can do it yourself in the app or on the archive’s website, as explained on onelegacy.ie/delete-account. You choose whether the photos and films you added stay with the family or are deleted.
• Something about you in a family archive (a photo, a name, a story): ask the family, or write to us and we will work with the family on it.
• You can complain to Malta’s Information and Data Protection Commissioner (idpc.org.mt), or to the data protection authority in the country where you live or work, for example the Data Protection Commission in Ireland (dataprotection.ie).

10. Children

Accounts and the apps are for adults (18 and over). Family archives often hold photos of children, added by their families. A parent or guardian can ask for a child’s photo or name to be removed, through the family or by writing to us.

11. Security

All connections use HTTPS. Each family archive has its own database and its own private file storage. Passwords are never stored in readable form, two-step sign-in is available, and private details can ask you to confirm it is you before they are shown.

12. Changes

If we change this policy, we update the date at the top. If a change matters for how we use your data, we tell the people it affects by email or in the app.