Privacy policy

Status: Accepted · Version: 0.1

Product rules are in TITIP-011. This page is the organisational policy those rules implement. It is not the public privacy notice. The public notice must be written and reviewed before any non-demo user.

Principles

• Minimum collection. No secret collection.
• Purpose limitation. Channels collected for escalation or release notices are not marketing lists.
• Role separation. A trusted contact is told they will not see vault contents.
• Owner control. Delete vault, contact, or account in product.
• No sale of personal data. No advertising use of vault text.
• Children are not account holders in the prototype. Age-gated recipient vaults stay held.

Public notice must include

• What an owner stores, and what Titip refuses to store.
• That named contacts and recipients are stored because the owner named them.
• That real release, when it exists, is logged.
• That Titip provides informational guidance, not legal services.
• How to ask for deletion.

Prototype

Use synthetic personas only (Iman, wife, brother, partner, daughter). Do not load a real family’s documents to make the demo “more realistic.”