Privacy Policy
Last updated: January 2026
The Afterlife is a digital legacy SaaS platform owned and operated by Royal Famiglia (Pty) Ltd ("Royal Famiglia," "we," "us," or "our"). We take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use The Afterlife platform. Please read this policy carefully to understand our practices regarding your personal data.
1. Information We Collect
Information You Provide
- Account Information: Name, email address, profile photo (via Google Sign-In)
- Vault Contents: Notes, files, documents, URLs, and other materials you store in your vaults
- Recipient Information: Names, email addresses, and relationships of people you designate as recipients
- Emergency Contact: Contact details for your designated emergency contact person
- Communication Data: Messages you send to our support team
Information Collected Automatically
- Usage Data: How you interact with the Service, features used, and time spent
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP addresses, access times, pages viewed
- Heartbeat Responses: Timestamps of your check-in confirmations
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and store your vault contents securely
- Send Heartbeat Protocol check-in notifications
- Facilitate vault release to designated recipients upon verified passing
- Send transactional emails (account confirmations, security alerts)
- Respond to your support requests and inquiries
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address fraud or security issues
- Comply with legal obligations
3. Data Security
We implement robust security measures to protect your data:
Encryption at Rest
All vault contents and personal data are encrypted using industry-standard AES-256 encryption when stored.
Encryption in Transit
All data transmitted between your device and our servers uses TLS 1.3 encryption.
Access Controls
Strict access controls ensure only you and your designated recipients (when authorized) can access vault contents.
Secure Infrastructure
We use Google Firebase infrastructure, which maintains SOC 2 Type II and ISO 27001 certifications.
4. Information Sharing
We do not sell your personal information. We may share information in the following circumstances:
- With Recipients: Vault contents are shared with your designated recipients only after verification of your passing (and death certificate verification if enabled).
- Service Providers: We use trusted third-party services for hosting (Google Firebase), analytics (PostHog), and payment processing. These providers are contractually bound to protect your data.
- Legal Requirements: We may disclose information if required by law, court order, or government request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
- Protection: To protect the rights, property, or safety of The Afterlife, our users, or others.
5. Your Rights & Choices
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate personal data.
- Deletion: Request deletion of your account and associated data.
- Data Portability: Receive your data in a structured, machine-readable format.
- Opt-Out: Unsubscribe from marketing communications (transactional emails cannot be opted out of while maintaining an active account).
To exercise any of these rights, please contact us at .
6. Data Retention
Active Accounts: We retain your data for as long as your account is active and as needed to provide you with the Service.
After Account Deletion: Upon account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.
Vault Release: After vaults are released to recipients, we retain records of the release for 7 years for audit and legal compliance purposes.
Backup Data: Backup copies may persist for up to 90 days after deletion for disaster recovery purposes.
7. Cookies & Tracking
We use cookies and similar tracking technologies to:
- Keep you signed in to your account
- Remember your preferences
- Understand how you use the Service
- Improve our Service based on usage patterns
Essential Cookies: Required for the Service to function properly. These cannot be disabled.
Analytics Cookies: Help us understand usage patterns. We use privacy-focused analytics (PostHog) that respect user privacy.
8. International Data Transfers
The Afterlife is operated from South Africa. If you access the Service from outside South Africa, your information may be transferred to, stored, and processed in South Africa or other countries where our service providers operate.
We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws, including the Protection of Personal Information Act (POPIA).
9. Children's Privacy
The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at and we will delete such information.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Parent Company
Company: Royal Famiglia (Pty) Ltd
Website: royalfamiglia.com
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will send you an email notification.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.