Lineage/Privacy

Last updated August 2026

Privacy policy

Plain language first, in the summary below. The clauses that follow are the operative version. If the two ever appear to disagree, tell us — that is a drafting failure on our part, not a trap.

Draft for review. This page is written to describe the system accurately, but it has not yet been through legal review for the jurisdictions Lineage operates in. It should not be published as binding until it has.

The short version

Six things worth knowing.

We collect what is needed to build your family’s picture, and nothing that isn’t. We do not sell it, broker it, or use it to train anything that serves somebody else. You can see who opened what, and you can take it all back at any time.

The longer text exists because specifics matter more than assurances. How the system enforces this is documented separately.

1. Who we are

Lineage is a product of Lineage Money. Where this policy says “we” it means that entity, which is the data controller for the information described below. You can reach us at contact@lineage.money about anything on this page, including a request to exercise any right it describes.

2. What we collect

We collect three kinds of information, and it is worth keeping them distinct.

  • What you give us. The documents you forward or upload, the figures and corrections you enter, the members you add to your household, and the account details needed to sign you in.
  • What we derive. The structured picture built from your documents: holdings, balances, liabilities, positions, obligations, and the results of the governance checks. This is generated from what you supplied and belongs to you.
  • What the service records. Access logs, security events, and basic technical telemetry needed to run and protect the platform.

3. Why we process it

To provide the service you asked for: reading your documents, reconciling them, building and maintaining your picture, running the governance checks, computing your position, and enabling the access grants you choose to issue. We also process the minimum necessary to keep the service secure, to meet our own legal obligations, and to support you when you ask for help.

We do not process your data for advertising, for profiling you on behalf of a third party, or to identify products we might earn a commission on.

4. What we never do

  • Sell, rent or broker your data, to lenders, insurers, advertisers or anyone else.
  • Use your household’s documents or picture to train models that serve other customers.
  • Grant our own staff standing access to your vault. Support access is per-incident, approved by you, time-boxed, and logged.
  • Share your data with an advisor, family member or professional who does not hold a live grant from you.

5. Who can see it

Nobody, by default, other than you. Access reaches another person only through a grant you issue: to a family member, to an advisor, or to our support team for a specific incident. Every grant names its scope and carries an end date, every opening is written to a log you can read, and every grant can be revoked in one action.

We use a small number of processors to run the service — hosting, storage, key management, email delivery. They act on our instructions, are bound by contract, and never receive your data for their own purposes.

6. Where it is stored

Data for Indian households is stored in India. Households elsewhere are stored in the region appropriate to them. Cross-border families hold assets in several countries but have one household store, located in their primary region.

7. How long we keep it

For as long as your household is active, plus the period we are required to retain records by law. When you delete a household we destroy its encryption keys, which renders any ciphertext still present in backups permanently unreadable, including by us. Those backups then age out on their normal schedule.

8. Your rights

You can, at any time and without needing our permission:

  1. Export everything — your original documents and the structured picture derived from them.
  2. Read the full access log for your household.
  3. Correct anything we hold, including figures we derived incorrectly.
  4. Revoke any grant you have issued, immediately.
  5. Delete your household permanently.
  6. Object to processing, or ask us to restrict it, and receive a substantive answer rather than a form letter.

Depending on where you live, you may also have a right to complain to a supervisory authority. We would rather you came to us first, but we will not stand in the way.

9. Children

Lineage is not offered to children as account holders. A household may record holdings that belong to a minor — a minor’s account, a gift, a policy naming them — because that is a normal part of a family balance sheet. Those records are managed by the adult who controls the household.

10. Changes to this policy

If we change anything material we will tell you before it takes effect, not after, and we will say what changed rather than only publishing a new date at the top. A change that weakened any commitment in section 4 would be announced in advance and would give you time to export and leave.

11. Contact

Write to contact@lineage.money. A person will answer.

How this is actually enforced.

The security page describes the mechanisms behind every commitment on this one.