Privacy Policy Effective Date: 5/4/2026 Website: lgcies.com Company / Operator: lgcies, LLC. This Privacy Policy explains how lgcies.com, including any related website, mobile experience, application, software, artificial intelligence features, memory tools, voice tools, story-generation tools, collaborator features, and related services, collects, uses, stores, shares, and protects information. By accessing or using lgcies.com, you agree to this Privacy Policy. If you do not agree, do not use the service. This Privacy Policy should be read together with our Terms and Conditions. ________________________________________ 1. About Lgcies Lgcies is a digital legacy and memory-preservation platform. The service allows users to record, write, upload, organize, preserve, and generate personal memories, family stories, timelines, chapters, reflections, voice recordings, photos, documents, and other legacy content. Because the service is designed to preserve personal and family history, the information users provide may be personal, emotional, historical, sensitive, private, or related to other people. You should only submit information that you are comfortable providing to the service and that you have the right to provide. ________________________________________ 2. Information We Collect We may collect information directly from you, automatically through your use of the service, from collaborators or invited users, and from third-party service providers. A. Account Information We may collect information such as: • name • email address • phone number • username • password or authentication information • account preferences • profile information • subscription or plan information • communication preferences B. User Content "User Content" means any content, information, material, or data you submit, upload, record, create, store, or transmit through the service. This may include: • written memories • life stories • answers to prompts • personal reflections • family history • names of relatives, friends, and other people • dates, locations, events, and timelines • photos • videos • documents • audio recordings • voice recordings • transcripts • collaborator notes • messages • uploaded files • generated chapters • story drafts • AI-generated outputs • any other information you provide through the service C. Voice, Audio, Image, and Likeness Data If you use voice, audio, image, or video features, we may collect and process: • audio recordings • voice recordings • speech content • transcripts • uploaded images • uploaded videos • likeness information shown in photos or videos • metadata connected to audio, images, or video files We may use this information to provide transcription, playback, storage, organization, story generation, voice-related features, and related functionality. D. Information About Other People The service may allow you to provide information about family members, friends, ancestors, collaborators, or other third parties. This may include names, relationships, life events, personal stories, photos, voice recordings, contact information, and other details. You are responsible for ensuring that you have the right or appropriate consent to provide information about another person. E. Collaborator and Invitation Information If you invite a collaborator or are invited to collaborate on a legacy project, we may collect: • name • email address • invitation status • access level • project activity • content submitted by the collaborator • communications connected to the invitation or project F. Payment and Subscription Information If paid features are offered, we or our payment processors may collect information related to purchases, subscriptions, billing, and payments. This may include: • billing name • billing address • payment method details • transaction history • subscription plan • renewal status • payment status We do not intend to store full payment card numbers directly. Payment information may be handled by third-party payment processors. G. Device, Usage, and Technical Information We may automatically collect technical and usage information, including: • IP address • browser type • device type • operating system • pages viewed • features used • dates and times of access • referral source • session activity • app performance data • crash logs • error logs • approximate location derived from IP address • cookies and similar technologies • usage analytics H. Communications With Us If you contact us, we may collect: • your name • email address • message content • support requests • feedback • survey responses • attachments you send • records of communications ________________________________________ 3. How We Use Information We may use the information we collect for the following purposes. A. To Provide the Service We use information to: • create and manage accounts • provide access to lgcies.com • save, store, and organize User Content • create legacy projects • process memories, stories, recordings, photos, and documents • provide prompts, questions, and follow-up questions • generate chapters, summaries, timelines, story previews, and other outputs • provide collaborator and invitation features • provide sharing, export, and family access features • process payments and subscriptions • provide customer support B. To Provide AI Features Lgcies may use artificial intelligence, machine learning, speech-to-text, transcription, text-generation, image-processing, analytics, and related technologies to provide service features. This may include using information to: • generate personalized questions • create follow-up prompts • summarize memories • draft stories and chapters • identify themes, people, dates, relationships, and events • organize timelines • transcribe audio or voice recordings • improve story flow and readability • personalize the user experience • improve platform reliability and quality C. To Improve and Develop the Service We may use information to: • analyze how users interact with the service • test and improve features • develop new tools and products • troubleshoot technical issues • measure performance • improve safety and security • understand user needs • evaluate AI output quality • improve user experience D. To Communicate With You We may use information to: • send account notices • respond to support requests • send service updates • send security alerts • send billing notices • send product announcements • send marketing communications where permitted • request feedback • notify you about changes to our policies or services You may be able to opt out of marketing emails, but we may still send transactional, security, billing, or service-related communications. E. To Protect the Service and Users We may use information to: • detect fraud, abuse, or misuse • prevent unauthorized access • enforce our Terms and Conditions • protect user accounts • investigate suspicious activity • maintain security • comply with legal obligations • protect the rights, safety, and property of Lgcies, users, and others F. To Create Aggregated, Anonymized, or De-Identified Data We may use information to create aggregated, anonymized, or de-identified data that does not reasonably identify you. We may use this data for analytics, research, development, product improvement, reporting, business operations, training or evaluating internal systems, and other lawful purposes. ________________________________________ 4. Data Use for AI, Product Improvement, and Analytics By using lgcies.com, you give us permission to process User Content and related information through systems, software, artificial intelligence tools, machine learning tools, cloud infrastructure, and third-party vendors as needed to operate, improve, secure, and develop the service. This includes permission to use User Content and related data to: • generate AI questions, summaries, chapters, and story drafts • provide personalized memory prompts • transcribe and process voice recordings • organize and analyze memories, dates, people, and events • improve platform functionality • improve AI-assisted user experience • monitor safety, quality, reliability, and performance • debug, test, and maintain the service • create aggregated, anonymized, or de-identified datasets Unless otherwise stated in a separate written agreement, Lgcies may use aggregated, anonymized, or de-identified data derived from service usage for analytics, research, development, reporting, business operations, platform improvement, and product development. Lgcies will not intentionally sell your personally identifiable User Content as a standalone product to third parties. ________________________________________ 5. How We Share Information We may share information in the following circumstances. A. Service Providers and Vendors We may share information with third-party vendors, contractors, and service providers who help us operate the service. These may include: • cloud hosting providers • data storage providers • AI and machine learning providers • transcription providers • analytics providers • payment processors • authentication providers • email and communication providers • customer support tools • security and fraud-prevention providers • development and infrastructure providers • legal, accounting, and business advisors These providers may process information on our behalf to help us deliver, maintain, secure, analyze, and improve the service. B. Collaborators and Invited Users If you invite collaborators, family members, or other users to a legacy project, information may be shared with them based on the access you grant. You are responsible for deciding whom to invite and what access to provide. We are not responsible for how collaborators use, disclose, copy, save, or share information they can access through the service. C. At Your Direction We may share information when you choose to share, export, publish, download, invite, send, or otherwise disclose content through the service. D. Legal, Safety, and Compliance Reasons We may disclose information if we believe it is necessary or appropriate to: • comply with law • respond to legal requests, subpoenas, court orders, or government requests • enforce our Terms and Conditions • protect rights, safety, privacy, or property • investigate fraud, abuse, security issues, or unlawful activity • prevent harm • respond to user disputes, ownership claims, or privacy complaints E. Business Transfers If Lgcies, LLC. is involved in a merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, or similar business transaction, information may be disclosed, transferred, or assigned as part of that transaction. F. Aggregated, Anonymized, or De-Identified Information We may share aggregated, anonymized, or de-identified information for analytics, business, research, development, product improvement, reporting, or other lawful purposes. ________________________________________ 6. Cookies and Tracking Technologies We may use cookies, pixels, local storage, analytics tools, and similar technologies to operate and improve the service. These technologies may help us: • keep users logged in • remember preferences • understand usage • improve performance • measure marketing effectiveness • detect fraud or security issues • personalize the experience We currently use the Meta (Facebook) Pixel and may use similar third-party advertising and analytics pixels on our website to measure marketing performance and, where applicable, to show relevant ads. These tools may share device and usage identifiers with the third parties that operate them. Depending on how they are configured, this activity can be considered a "sale" or "share" of personal information under the California Consumer Privacy Act and similar state privacy laws, even though we do not receive money for it. See Section 15 (California Privacy Notice) for more on your rights regarding this activity. You may be able to control cookies through your browser settings, and you may be able to limit ad-related tracking through the privacy or ad-preference tools offered by the platforms that operate these pixels (for example, Meta's ad settings). Blocking cookies may affect service functionality. ________________________________________ 7. Data Retention We may retain information for as long as reasonably necessary to: • provide the service • maintain your account • store legacy projects and User Content • comply with legal obligations • resolve disputes • enforce agreements • prevent fraud or abuse • maintain security • keep business records • improve and develop the service • maintain backups and logs If you delete your account or request deletion of certain content, deletion may not be immediate. Some information may remain in backups, logs, archives, legal records, transaction records, or security records for a limited period or longer where required or permitted by law. We may retain aggregated, anonymized, or de-identified information indefinitely. ________________________________________ 8. Data Security We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. However, no system, website, application, storage method, transmission method, or cloud service is completely secure. We cannot guarantee absolute security of your information. You are responsible for protecting your login credentials and for controlling access to your account, devices, email, and collaborators. ________________________________________ 9. Your Choices and Controls Depending on available features and applicable law, you may have the ability to: • access your account information • edit your profile • update or delete certain User Content • download or export certain content • invite or remove collaborators • change account preferences • unsubscribe from marketing emails • request account deletion • request access, correction, or deletion of personal information To make a privacy request, contact us at support@lgcies.com We may need to verify your identity before processing certain requests. Some requests may be limited by legal, security, technical, operational, or contractual requirements. ________________________________________ 10. Memorialization and Account Access After Death If you use the Memorialization Settings in your account, you can choose what happens to your account and User Content if you pass away — either by designating a trusted individual who may access your legacy project ("Give someone access"), or by keeping your account and User Content private with no one granted access ("Preserve Only"). This section explains how we handle information in connection with that feature. The legal terms governing this feature, including verification, scope of access, and disputes, are set out in Section 10 (Memorialization and Account Access After Death) of our Terms and Conditions. A. Information We Collect to Verify a Death Before granting a Designated Contact access to a deceased user's account, we may collect and review documentation such as a death certificate, obituary, court document, or other proof we consider sufficient, along with the requester's name and contact information. We use this information only to verify the request and administer the Memorialization Settings, and we retain it in accordance with Section 7 (Data Retention). B. What a Designated Contact Can See If you have selected "Give someone access," your Designated Contact may, once we have verified your passing, access, view, and download the User Content associated with your legacy project, including memories, stories, chapters, timelines, photos, voice recordings, and any Letters for Later addressed to them or otherwise released as part of the account. If you have selected "Preserve Only," or if you have not made a selection, we will not knowingly disclose your account or User Content to a third party following your death, except as required by law or as otherwise described in this Privacy Policy. C. Information About Other People Because a legacy project often includes information about relatives, friends, and other third parties, a Designated Contact who is granted access may see personal information about people other than you. We are not able to filter this information out of what a Designated Contact can access, and we are not responsible for how a Designated Contact subsequently uses, discloses, or shares information they access. D. Competing Requests If we receive competing or conflicting requests regarding access to a deceased user's account, we may pause processing until the matter is resolved to our reasonable satisfaction, and we may require additional documentation, such as a court order or letters of administration, before granting or continuing access. ________________________________________ 11. User Content About Other People Lgcies is designed for personal and family storytelling. This means users may submit information about relatives, friends, ancestors, caregivers, coworkers, or other people. If you submit information about another person, you represent that you have the right or appropriate consent to do so. You should not submit another person's sensitive information, photos, voice recordings, private stories, or personal details unless you have permission or a lawful basis to do so. We may restrict, remove, or disable access to content if we receive a credible privacy complaint, ownership dispute, legal request, or rights-related claim. ________________________________________ 12. Children's Privacy The service is not intended for children under the age of 13, or a higher minimum age where required by applicable law. We do not knowingly collect personal information directly from children without appropriate consent. If you believe a child has provided personal information to us without required consent, contact us at support@lgcies.com We may delete or restrict the information where required by law. Users should not create accounts for minors or submit detailed personal information about minors unless they have the legal right and appropriate consent to do so. ________________________________________ 13. International Users Lgcies may be operated from, and information may be processed in, the United States, Israel, or other countries where we or our vendors operate. By using the service, you understand that your information may be transferred to, stored in, and processed in countries that may have privacy laws different from those in your location. Where required by law, we will use appropriate safeguards for cross-border data transfers. ________________________________________ 14. Regional Privacy Rights Depending on where you live, you may have certain privacy rights under applicable laws. These rights may include the right to: • access personal information • correct personal information • delete personal information • restrict or object to certain processing • request data portability • withdraw consent where processing is based on consent • opt out of certain sharing or targeted advertising • appeal a denied privacy request • file a complaint with a privacy authority To exercise privacy rights, contact us at support@lgcies.com We will respond as required by applicable law. We may deny or limit requests where permitted by law, including where we need to retain information for legal, security, fraud-prevention, contractual, operational, or business purposes. ________________________________________ 15. California Privacy Notice If California privacy law applies to you, this section provides additional information. Categories of Personal Information We May Collect We may collect: • identifiers, such as name, email address, IP address, and account identifiers • customer records information, such as billing details • commercial information, such as subscription and transaction history • internet or network activity, such as usage data, device information, and browsing activity on the service • geolocation information, such as approximate location from IP address • audio, electronic, visual, or similar information, such as voice recordings, photos, videos, and uploaded media • inferences, such as preferences, themes, or user interests derived from service usage • sensitive personal information, if you choose to submit it through memories, stories, voice, photos, family history, or other User Content Purposes for Collection and Use We collect and use these categories for the purposes described in this Privacy Policy, including providing the service, AI processing, storage, personalization, analytics, security, payments, communication, legal compliance, and product improvement. Disclosure of Personal Information We may disclose personal information to service providers, contractors, collaborators you invite, payment processors, analytics providers, cloud providers, AI providers, legal advisors, authorities, and business transaction parties as described in this Privacy Policy. Sale or Sharing of Personal Information Lgcies does not sell personally identifiable User Content as a standalone product for money. Our website uses third-party advertising and analytics pixels, including the Meta (Facebook) Pixel, which may transmit device and usage identifiers to those third parties for cross-context advertising purposes. This type of activity can be considered "sharing" under the California Consumer Privacy Act and similar state laws even though no money changes hands. Where this applies, we will provide the notices and opt-out mechanisms required by law, including honoring recognized opt-out preference signals (such as the Global Privacy Control) where legally required to do so. Sensitive Personal Information The service may process sensitive personal information if you choose to submit it. We use sensitive personal information to provide, secure, improve, and operate the service and as otherwise allowed by law. California Rights California residents may have rights to know, access, correct, delete, opt out of certain sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights. To submit a request, contact us at support@lgcies.com ________________________________________ 16. European Economic Area, United Kingdom, and Similar Privacy Rights If GDPR, UK GDPR, or similar privacy law applies, this section provides additional information. Controller Lgcies, LLC. is the controller of personal information processed through lgcies.com unless otherwise stated. Legal Bases for Processing We may process personal information based on: • performance of a contract, to provide the service • consent, where required for certain processing • legitimate interests, including security, product improvement, analytics, fraud prevention, service development, and business operations • legal obligations, where required by law • vital interests, where necessary to protect safety International Transfers Information may be transferred outside your country. Where required, we will use appropriate safeguards for international data transfers. Your Rights You may have rights to access, correct, delete, restrict, object, request portability, withdraw consent, or lodge a complaint with a supervisory authority. To exercise rights, contact us at support@lgcies.com ________________________________________ 17. Do Not Track Some browsers offer "Do Not Track" signals. There is no universal standard for responding to these signals. Unless required by law, we may not respond to Do Not Track signals. ________________________________________ 18. Third-Party Links and Services The service may contain links to third-party websites, tools, services, or integrations. We are not responsible for the privacy practices, content, security, policies, or actions of third parties. Your use of third-party services is governed by their own terms and privacy policies. ________________________________________ 19. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we make material changes, we may notify you by posting the updated Privacy Policy on lgcies.com, sending an email, displaying an in-app notice, or using another reasonable method. Your continued use of the service after the updated Privacy Policy becomes effective means you accept the updated Privacy Policy. If you do not agree, you must stop using the service. ________________________________________ 20. Contact Us Questions, requests, or complaints about this Privacy Policy should be sent to: Lgcies, LLC. Email: support@lgcies.com Website: www.lgcies.com