Last updated: July 23, 2026
Shadetree is operated by Brian Miller ("we," "us," "our"), in Indiana, USA. By using Shadetree, you agree to the terms below. If you do not agree, please do not use it.
1. It's free (for now). Shadetree is currently free to use. We may add optional paid features later, and we may change, add, or remove features at any time. We do not promise that any particular feature will remain free or available.
2. As-is, no warranty. Shadetree is provided "as is" and "as available," without warranties of any kind, express or implied. We do not guarantee that it will work, be available, be error-free, or that your memories will be stored, delivered, preserved, or recoverable.
3. You use it at your own risk. Digital data can be lost - through a lost or damaged device, software problems, failed uploads, the service being unavailable, or other causes. You accept that risk when you use Shadetree.
4. Back up your own memories. Shadetree is not a backup service. The reliable, lasting copy of your memories is the export you make yourself and keep somewhere safe. Keep your recovery code somewhere safe too - without it, a lost or wiped device cannot be restored, and no one, including us, can recover your account or memories for you. Any loss that results from not keeping your own backups or recovery code is your responsibility.
5. Strong encryption means we cannot recover it. Your memories are encrypted so that only the people you share them with can read them - not us. That privacy is the whole point, but it has a trade-off: if you lose your keys or recovery code, your data cannot be recovered by anyone. This is by design.
6. Limitation of liability. To the fullest extent permitted by law, we are not liable for any damages of any kind arising from or related to your use of Shadetree - including, without limitation, lost or corrupted memories, lost or damaged devices, failed backups or transfers, downtime, or the service being changed or discontinued - even if we were advised such damages were possible. To the extent any liability cannot be excluded, our total liability to you is limited to the amount you paid us, which for a free service is zero.
7. We may change or stop the service. We may modify, suspend, or discontinue Shadetree, in whole or in part, at any time, without notice and without liability to you.
8. Acceptable use and enforcement. Shadetree is for personal, family, and lawful use only. Do not use it to break the law, harm others, or interfere with the service or other people's use of it. Because your memories are encrypted end to end, we cannot see or screen what people share; even our own relay only ever holds locked data it can't read. So our ways of dealing with misuse are limited to what we can do without reading anyone's memories: if we have good reason to believe an account or a family is being used unlawfully or to harm others, we may remove that person's or that family's access to the relay and delete the data they hold on it. We cannot selectively review or edit content, and copies already delivered to someone's device are beyond our reach. We cooperate with valid legal requests, and where the law requires it we report unlawful material to the proper authorities. If you become aware of misuse, please tell us at hello@theshadetree.co. Because only the people a memory was shared with can read it, describe what you saw (and, if you choose, include what you received) so that we can act on it.
9. Your content is yours. You keep all rights to the memories you create. You are responsible for what you share and for having the right to share it.
10. Indemnification. You agree to defend, indemnify, and hold us harmless from any claims, losses, or costs arising out of your use of Shadetree or the content you share.
11. Changes to these terms. We may update these terms from time to time. If we do, we will change the date above. Continuing to use Shadetree after a change means you accept it.
12. Governing law. These terms are governed by the laws of the State of Indiana, USA, without regard to its conflict-of-laws rules. If any part of these terms is found unenforceable, the rest still applies.
We built Shadetree so that we cannot read your memories, and so that we collect as little else as we possibly can. Here is exactly what that means, in plain terms: what we never see, what we have to keep for the app to work, what you can choose to add, and what never leaves your device at all.
What we never see or store.
What we have to keep for the app to work. A few things cannot be locked away, because the server needs them to carry a memory to the right people. We keep them to a minimum, and we would rather tell you plainly than pretend they aren't there:
Being straight with you: added together, the readable parts above come to your chosen name and photo, the shape of your family, and a record of who shares with whom and when. If our server were ever broken into, that is what could be exposed. Your actual memories would stay unreadable.
What you can choose to add. Email recovery is optional. If you turn it on, you give us an email address so that an email and a passphrase can bring you back if you ever lose both your device and your recovery code. When you set it up or use it, your email is turned into a one-way fingerprint. We store only that fingerprint, never the address itself, and we cannot turn it back into your email. Your passphrase never reaches us. To be sure the address really is yours, we send it a one-time verification code when you turn the feature on - that is the only email we ever send you, and we never use your address for anything else. Turning the feature off removes the fingerprint. If you skip it, we hold no email for you at all.
What never leaves your device. Your private keys, your full library of memories, your favorites and the way you've arranged things, and any exports you make all live on your own device. Uninstalling the app erases that copy.
What we do not do. No ads. No tracking. No analytics that follow you. No selling or sharing your data with anyone. There is no advertiser and no data broker in the picture.
Service providers. Our relay runs on standard web hosting. That provider only ever handles the encrypted and routing data described above; it cannot read your memories either. If you turn on email recovery, an email delivery service sends your verification code for us, and your email address passes through them to reach you. No memory, name, or anything about your family goes with it.
Children. Shadetree is set up and controlled by adults. A child only ever takes part through a device that an adult in their family has set up and looks after, and that adult is responsible for the child's use and agrees to these terms on their behalf. Shadetree is not directed to the general public or to children under 13 as a public service, and we do not knowingly collect personal information from a child directly. The relay only handles the readable directory and routing information described above, and cannot read the content of anyone's memories.
Keeping and deleting your data. Memories in transit are deleted after delivery, or within about 21 days at the most. The readable directory and routing information above stays until it is removed. Uninstalling the app clears only the copy on your device. To also remove your device, name, and key backup from our relay, email us and we will erase them. A family steward can also remove your device from the family.
Changes. If this policy changes, we will update the date above.
Contact. Questions about these terms or your privacy? Email hello@theshadetree.co.
These terms are written to be clear and fair, not to trick anyone. They are not legal advice.
Home · The idea · What’s new