Privacy policy.

Privacy Policy

Effective Date: September 18, 2026

1. Overview

This policy explains what data Provenance collects, how it is used, and your rights regarding that data. Provenance is operated by Green Tree Apps LLC. We collect the minimum data necessary to operate the service.

2. Data We Collect

Account data. When you sign in, we collect your name, email address, and a unique identifier from your authentication provider. If you use email/password sign-in, authentication is handled by Firebase Authentication; we never see or store your password.

Asset data. Photos, descriptions, estimated values, provenance notes, condition, location, ownership history, and insurance details you enter for items in your registry.

Estate planning documents. Files you upload to the Document Center.

Beneficiary data. Names, email addresses, and relationship labels you enter when inviting beneficiaries, used only to grant and manage access to your shared registry.

Usage data. Timestamps for when assets and documents were created, updated, or reviewed, and records of AI feature usage for cost monitoring.

Billing data. If you subscribe to a paid plan, Stripe collects and processes your payment information. We receive and store only your subscription status, plan, renewal date, and a Stripe customer identifier. We never see or store your full card number.

3. Data We Do Not Collect

We do not collect your location, browsing history outside our app, or any data beyond what you explicitly provide. We do not use cookies for advertising or cross-site tracking.

4. How We Use Your Data

- To operate your account and sync your registry across devices

- To enable beneficiary sharing when you choose to share

- To provide AI-powered features (see Section 5)

- To send transactional emails: beneficiary invitations, interest notifications, and account-related messages

- To process subscription payments

- To monitor service usage and costs

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in this policy.

5. AI Processing

When you use AI photo identification, document scanning, or writing assistance, the relevant photo or text is sent to the Anthropic Claude API for processing. Anthropic receives only the content needed to complete that specific request. We do not send your full registry or unrelated data. Your content is not used to train AI models. See Anthropic's privacy policy at anthropic.com/privacy for details on their handling of API data.

6. Third-Party Services

Provenance is built on the following infrastructure:

- Firebase (Google): authentication, database, file storage, hosting, and email delivery. Google's privacy policy applies.

- Anthropic: AI features. Anthropic's privacy policy applies.

- Stripe: payment processing and tax calculation. Stripe's privacy policy applies.

- Squarespace: our marketing website. Squarespace's privacy policy applies to that site.

7. Data Storage and Security

Your data is stored in Firebase on Google Cloud infrastructure in the United States. Asset photos and documents are stored in Firebase Storage with access rules restricting reads and writes to your account. Beneficiaries can access only the portions of your registry you have explicitly shared, enforced by server-side security rules. Sensitive operations, including AI requests and email sending, are handled by server-side functions rather than in your browser.

No system is perfectly secure. We use industry-standard measures but cannot guarantee absolute security.

8. Data Retention

Your data is kept while your account is open. When you delete your account, we delete your registry, photos, documents, stories, the family memories you wrote, your invitations, your activity notifications, any feedback you sent us, and your sign-in record.

Deleting your account also deletes the memories other people added to your items, because those memories belong to the items. The same happens when you permanently delete a single item.

A few records are kept after that, for these reasons:

- Payment records. If you subscribed, our payment processor, Stripe, keeps your customer and payment history, and we keep invoices, as tax and accounting law requires.

- AI usage records. Each use of an AI feature leaves a record of which feature was used, when, how much text was processed and what it cost, linked to an account identifier rather than your name or email. We keep these for 12 months to monitor costs and prevent misuse.

- Usage analytics. Google Analytics records how the app is used, linked to an account identifier rather than your name or email. Google keeps it for 14 months.

- Email delivery records. Records of emails we send, such as invitations, are deleted automatically 30 days after sending.

- Beta feedback. Reports sent through the in-app feedback tool are deleted when you delete your account, and otherwise automatically after 90 days.

Archived items remain in your account until you permanently delete them.

9. Your Rights

You may access, correct, export, or delete your data at any time through the app. To request a full data export or assistance with deletion, contact us at support@getprovenanceapp.com.

If you are in the European Economic Area or the United Kingdom, you have additional rights under GDPR, including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. If you are a California resident, you have rights under the CCPA including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined by the CCPA.

10. Children's Privacy

Provenance is not directed at children under 18 and we do not knowingly collect data from anyone under 18. If we learn we have collected such data, we will delete it.

11. Changes to This Policy

We may update this policy as the service evolves. We will post the updated policy and update the effective date above. Material changes will be communicated in the app or by email.

12. Contact

Privacy questions or data requests: support@getprovenanceapp.com