Privacy Policy

Information ESTELA may collect

1. Scope and ESTELA's private nature

Boinayel, LLC, a Pennsylvania limited liability company, builds and operates ESTELA. This policy covers the ESTELA product, its public product pages, and the private Family Book experiences Boinayel makes available.

Family Books are private and separate spaces. ESTELA checks the relevant account and membership before allowing access to private content. Wrong-family, wrong-account, pending, revoked, expired, public, guest, or otherwise unauthorized states must not open private family content.

2. What we collect and how we receive it

We collect information you provide when an account is created or used, information you or another authorized person contributes to a Family Book, and account, membership, permission, connection, session, and security records the service generates or receives to operate privately and securely.

Family content may concern relatives who do not have an ESTELA account. A contributor should provide content only when they have appropriate authority, permission, or another proper basis to share it within the relevant Family Book.

3. How we use information

We use this information for ESTELA functionality, service protection, and the optional pilot measurement described in section 7. We do not use Family Book content for advertising, developer marketing, or behavioral analytics, and we do not track people across apps or websites owned by other companies.

• Create, authenticate, recover, and protect ESTELA accounts.
• Manage invitations, memberships, family roles, and access permissions.
• Store, display, organize, and retrieve Family Book content, including private media and documents.
• Support contributions, review, and visibility decisions according to a person's role and permissions.
• Maintain authenticated sessions, prevent abuse, investigate failures, and apply security measures.
• Send transactional communications needed for account access, authentication, security, and service operation.
• Measure certain pilot steps without content when a current optional consent exists.
• Receive and respond to support messages when that feature is enabled and you choose to use it.
• Respond to privacy requests, support needs, and applicable legal obligations.

4. Family Book privacy, access, and sharing

Family Book content is private by design. It is not automatically published, searchable by the general public, or made available merely because a person has an ESTELA account.

Visibility within a Family Book depends on an accepted, active membership, permissions, content state, and its family, selected, private, or protected audience. Associating an account with a Person never grants Family Book access by itself. A private contribution can remain private until an authorized action changes its state.

Search, Person pages, Memories, Life Events, and their files follow the same boundaries and must not reveal private content or confirm its existence to an unauthorized account.

5. Service providers and limited disclosures

We use service providers that help us operate ESTELA. Current core providers include Supabase for authentication, database, and private storage; Vercel for application hosting and delivery; and Resend for transactional account and authentication email.

These providers may process information needed to provide their services to ESTELA. We require providers that process ESTELA user data on our behalf to protect it consistently with this policy and applicable privacy and security requirements. We do not authorize these providers to use private Family Book content for their own advertising.

Those providers' operational logs may include the account or email involved, IP address, user-agent, technical identifiers, requested route, status, and time. Storage operations may also log the private object path and technical transfer metadata. ESTELA limits new private-source paths to opaque coordinates and keeps the original filename as governed application metadata, but necessary operational logs remain subject to provider retention periods and controls.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect people's or the service's safety and rights, investigate fraud or abuse, or complete a transaction permitted by law with appropriate safeguards.

6. No sale, behavioral advertising, or cross-app tracking

Boinayel does not sell ESTELA Family Book content or personal information to data brokers. ESTELA does not use information described in this policy for targeted advertising and does not link it with information from other companies' apps or websites for advertising or advertising measurement.

7. Optional pilot measurement and experience check-in

Basic pilot measurement is optional and requires a current affirmative choice by a person with an accepted, active membership. It may count events such as entry, explanation completed, first save, review, help requested, and return. It stores the event type and date with pseudonymous identifiers; it does not include memory text, names, email addresses, files, or searches.

The experience check-in is separate optional participation with its own consent version. It uses fixed choices only and no free text. Enabling a server measurement feature does not create consent, and neither consent grants Family Book access, changes an audience, or opens content to support.

You can stop participating from Account. Withdrawing basic measurement removes that person's prior events for that Family Book; withdrawing the check-in removes their responses. Minimum choice and audit records may remain to prove and enforce the decision.

8. Photos, video, audio, and device permissions

When an ESTELA feature needs access to photos, video, camera, or microphone, the app may request the relevant device permission. You decide whether to grant that permission and what content to contribute. You can change system permissions in your device settings. Granting a device permission does not make Family Book content public.

9. Security and technical session data

ESTELA uses controls designed to protect private information, including authentication, membership checks, Family Book authorization, private storage, and content-access controls. Private downloads and other sensitive responses are designed to avoid public storage or unauthorized caching.

Our authentication systems and providers may retain technical connection and session information, such as an IP address and user-agent, linked to a session or account to authenticate, maintain sessions, apply rate limits, prevent abuse, and protect the service.

No method of transmission or storage can guarantee absolute security. We work to reduce unauthorized access, loss, misuse, and alteration, and we review controls as the product and its providers change.

10. Purpose-limited support

When support is enabled and you submit a request, ESTELA retains the contact information and message you choose to provide, together with the conversation needed to respond. Avoid including family stories, private names, passwords, tokens, links, or files that are not needed to resolve the problem.

Support personnel do not have open or unrestricted access to a family's private content. Support does not grant general Family Book access. An operator needs separate, active, purpose-bound, expiring authorization, and openings and actions are audited. Family context is limited to the state needed to address the request and does not permit browsing private Memories, People, Life Events, or files.

11. Retention and deletion

Retention periods vary by the type of information and why it is kept. We retain account, membership, session, and content data for as long as needed to provide and protect ESTELA, follow authorized instructions, and satisfy applicable legal or security obligations. Some technical session records may remain for the life of a session and for a limited period after it ends according to the operation of our authentication provider.

Where a feature and your permissions allow, you can delete certain private content within ESTELA. You may also request access to, correction of, or deletion of personal information by emailing support@getestela.com. We may request reasonable information to verify your identity and authority before carrying out a request that affects a private Family Book.

Deleting an account must remove the account record and associated personal data that Boinayel is not legally required to maintain, including user-generated content associated with that account even when it has been shared with other members. If law requires us to retain particular information, we limit retention to what is required. Residual copies in backups or recovery systems may remain for a limited period until normal rotation or deletion and will not be used to restore a deleted account unless legally required.

12. Your choices and privacy requests

Privacy requests can be sent to support@getestela.com. Some requests that affect information about other people may require additional review to protect their rights and privacy.

Depending on where you live, applicable law may give you additional rights regarding your personal information. You can use the same contact to exercise those rights.

• Request access to, correction of, or deletion of personal information associated with your account.
• Request closure and deletion of your account and associated data, subject only to applicable legal retention obligations.
• Use available controls to delete content, change visibility, or withdraw a contribution when your permissions and the content state allow it.
• Separately join or withdraw from optional pilot measurement and the structured check-in from Account.
• Change photo, camera, or microphone permissions in device settings.
• Contact us if you believe a membership, permission, or family item is being used incorrectly.

13. Children and family content

A Family Book may include memories, photographs, recordings, or other information relating to children. Authorized users should contribute information about minors only when they have appropriate authority or permission to do so.

ESTELA is not a public social service directed to children. If you believe a child's personal information was provided improperly or without consent required by applicable law, contact us so we can review the situation.

14. Where information is processed

Boinayel is established in the United States. ESTELA and its providers may process information in the United States and other locations where their systems and authorized personnel operate, subject to applicable safeguards and obligations.

15. Changes to this policy

We may update this policy when ESTELA, our practices, or applicable requirements change. We will publish the current version on getestela.com and update the effective date when appropriate. If a material change requires additional notice or consent, we will provide it as required by applicable law and platform requirements.