Privacy should be part of the product, not a hidden setting.

Atlas of Lives separates public, family, selected-person and private content. Private media is delivered through permission checks rather than an open upload directory.

Data minimisation

The MVP does not require identity documents for ordinary account or legacy-key use. A support appeal may request additional evidence only when no normal recovery route remains. Production deployment requires a lawyer-reviewed privacy notice, retention schedule, processor agreements and regional compliance review.

Your controls

You can change profile discoverability, the visibility of each place, moment, capsule and wall post, revoke legacy keys, cancel a transfer during the protection period and export or delete your account through support.