Privacy Notice

1. Who is responsible for your data

Go Family Story is provided by Lemniscate ehf., an Icelandic company, kennitala 711019-1030, which is the data controller for the personal data described in this notice. You can reach us at hello@gofamilystory.com.

2. What we collect and why

• Account details — your name, email address and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Your content — answers, stories, photos, voice recordings, invites and the names and relationships of the people you create spaces for, used to provide the service (contract). Content you add about other people is your responsibility; please make sure they are happy to be part of your archive.
• Support messages — when you contact us, we keep the conversation so we can help you (legitimate interests).
• Usage and device data — basic telemetry, device identifiers and IP address, used for security, fraud prevention and improving the product (legitimate interests).
• Billing information — your email address, the plan you bought, its price and billing interval, renewal dates, subscription status (active, cancelled, expired or past due) and any discount code used. We receive this from Lemon Squeezy to unlock and manage your plan on your account (contract). Payment card details are collected and processed directly by our Merchant of Record, Lemon Squeezy — we never see or store your card number.

Your content. Your answers, photos, videos and voice recordings are never analysed and are never used to train any model. Your content is stored and shown only to you and the people you invite.

Marketing email. If you create an account we may email you occasional tips and updates about the service. In the EEA, the United Kingdom, Switzerland and Canada we ask for your agreement first, and we record your choice and its date. Every marketing email carries a one-click unsubscribe link; service email (invitations, confirmations, password resets, billing) is sent regardless as part of your account.

3. Who we share data with

• Service providers who host and operate the service for us (cloud hosting, email delivery and similar subprocessors).
• Lemon Squeezy, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where the law requires it.

We never sell your personal data.

4. International transfers

Some of our service providers process data outside the UK/EEA. Where that happens, we rely on adequacy decisions or standard contractual clauses to keep your data protected.

5. How long we keep data

We keep your account and content for as long as your account is active. When data is no longer needed — for example after you delete your account — it is deleted or anonymised, except where the law requires us to keep records (such as invoices) for longer.

6. Your rights

You have the right to access, correct and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You can export your stories and recordings from within the service at any time. To exercise any right, email hello@gofamilystory.com — we respond within one month. You also have the right to complain to your supervisory authority (in Iceland, Persónuvernd).

7. Security

We use appropriate technical and organisational measures, including encryption in transit and strict access controls. Your spaces are private by default and protected by row-level security in the database — only the owner and the people they explicitly invite can read or contribute to a space, and invitations are verified by unique, unguessable links. Sign-in is protected by email confirmation, and payment information is handled entirely by Lemon Squeezy and never touches our servers.

8. Cookies and advertising measurement

We use essential cookies and storage to keep you signed in and remember your preferences (such as keeping you signed in). Essential cookies are required for the service to work.

We also use Google Ads measurement cookies to understand which advertisements bring people to Go Family Story. This records that a visit or a new story space followed an advertisement. It never includes the content of your stories, answers, photos or invitations. The recipient of this data is Google Ireland Limited and its affiliates; see how Google uses data from sites that use its services.

We also use the Meta Pixel to measure which Facebook and Instagram advertisements lead to a new story space or a gift purchase, and to help Meta show our ads to people likely to be interested. It records page visits, that a story space was created, and that a gift was bought (with its price). It never includes your stories, answers, photos, invitations, email address or name. The recipient is Meta Platforms Ireland Limited and its affiliates; see the Meta Privacy Policy.

In the EEA, the United Kingdom, Switzerland and Quebec we ask for your consent before these measurement cookies are used, and we do not use them unless you accept. You can withdraw your consent at any time through Cookie settings at the bottom of every page; choose Reject and future measurement stops immediately, including in other open tabs. We keep a local record of your visitor reference, choice, date and notice version (advertising-2026-10-14), including earlier acceptance when you later withdraw. This notice covers advertising identifiers, page visits and confirmed purchase values shared with Google and Meta for measurement and ad optimization. Where consent is not required, Cookie settings also lets you opt out. We do not share your email address or other contact details with advertising platforms.