Your privacy is part of
how we care for you
We handle some of the most sensitive information a person can share: about a life lived, and a death prepared for. Here is what we collect, why we collect it, and how we protect it.
On this page (12 sections)
What we collect
Account details, planning information, health context, billing data, and provider interactions — used only to power your plan.
How we protect it
AES-256 encryption at rest, TLS in transit, strict access controls, and regular internal security reviews.
Your control
Access, correct, export, or delete your data. See Your Rights for how to make a request.
Overview
Who we are and what this policy covers
Passings LLC (“Passings,” “we,” “us,” or “our”) operates the Passings funeral planning platform available at passings.io and app.passings.io, and through our mobile applications when they are available. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.
We take privacy seriously — especially given the nature of the information you trust us with. End-of-life planning involves details that are deeply personal: wishes for your own passing, information about a loved one who has died, health context, and financial decisions. We have designed this platform and this policy with that sensitivity in mind.
By using Passings, you agree to the practices described in this policy. If you have questions at any time, please reach out to privacy@passings.io.
Plain-language summary: We collect what we need to help you plan. We protect it with care. We don’t sell it for marketing purposes. You can ask us to delete it at any time.
Information We Collect
A complete breakdown of data collected by category
We collect information you provide directly, information generated by your use of our platform, and certain technical information automatically collected by our systems.
| Category | Examples | When collected |
|---|---|---|
| Account information | Full name, email address, phone number, password (hashed) | Account registration |
| Planning data | Funeral preferences, service type, obituary content, family contacts, wishes for remains | As you build your plan |
| Deceased person's details | Full name, date of birth, date of death, relationship to user, life history for obituary | When planning for a loved one |
| Health & medical context | Medical conditions relevant to final arrangements, advance directive preferences, organ donation wishes, whether the plan principal is receiving hospice or home care, resides in a care facility, or lives with a disability, whether they have stored reproductive material, and whether they receive government assistance such as Medicaid, SSI, or SNAP | When you choose to share it. Used only to determine which checklist tasks apply to your circumstances; not disclosed to providers, and not used to price, rank, or route anything on the marketplace |
| Your situation | Whether you are planning ahead, expect a loss because of a serious illness or health situation, or have already experienced a loss | When you start or update a plan. Selects which version of the product you see |
| Crisis screening signal | A flag recording that a message you sent to our in-app assistant was identified as describing a crisis, so the assistant responds with crisis resources rather than planning help | Automatically, when you message the assistant. Stored with that conversation; not disclosed to providers and not used for advertising |
| Payment & billing | Payment processor reference numbers and transaction records (card details are held by Stripe, never by Passings) | At subscription or purchase |
| Location data | City, state or ZIP code, to show providers near you | When using provider search |
| Requests to providers | Your name, email, ZIP code, message, answers to the request questions, the service level and timing you choose, and your phone number if you agree to provider calls or texts, with a record of that consent. From your plan: the first name and last initial of the person the plan is for, the plan task the request came from, and, for an attorney, whether the plan notes that the person owns a business or has significant assets | When you send a request to a provider |
| Directory activity | That a phone number was revealed on a listing, the listing and the time (we do not store your IP address with it), and reports you send about a listing, with your email if you give it | When you reveal a phone number or report a listing |
| Legacy locker notification data | Recipient name, plan principal's name, number of messages, locker unlock date, access expiry date, unique access link, opt-out link | When a plan author unlocks their legacy locker to notify designated recipients |
| Usage & technical data | Pages visited, features used, session duration, browser type, IP address, device identifiers | Automatically, during use |
Age verification: When you create an account we ask your date of birth solely to confirm you are 18 or older. We use it only for that check and do not store it. A date of birth you enter as part of a plan principal's details (above) is separate and is kept for your plan.
Sensitive Data
How we handle data that requires extra care
Some information you share with Passings is particularly sensitive. This includes health and medical information, details about deceased individuals, and financial data. We apply additional protections to these categories above and beyond our standard practices.
You are always in control of sensitive data. You may choose what sensitive details to include in your plan. None of this information is required to use the platform. If you choose to include it, it is encrypted, access-restricted, and never used for advertising. We do not share it with Providers or other third parties for their own use without your consent; our service providers process it only to run the Service.
Health & medical information
We collect health information only when you voluntarily share it in the context of planning. This may include conditions relevant to end-of-life care preferences, advance directive details, organ donation wishes, or hospice considerations. This information is used solely to support your plan and is never shared with health insurers, employers, or advertising networks.
Information about deceased individuals
When you use Passings to help plan arrangements for a loved one who has passed, you may provide personal details about that individual. This information is treated with the same privacy protections as your own personal data, and is used exclusively to generate planning documents, obituaries, and service coordination.
Operator transitions after death
Plans on Passings may have multiple people authorized to operate them: the plan author and any collaborators the author has designated as co-authors. While the plan author is alive, the author controls the plan. Co-authors help operate it and can invite others, but each co-author sees and changes only the parts of the plan they have been given access to, cannot give anyone more access than they have, and cannot change the author's own access. When a person on the plan reports the plan author's death, Passings notifies the plan author, the people on the plan and the person named in any Death Access Designation. Anyone who believes the report is wrong can contest it during the challenge period the Terms of Service §22.2 describe. Passings does not require a death certificate to accept a report, but may ask for documents at its discretion. The plan then moves into post-death mode: the original author's account loses operational authority on this plan, and one person becomes the Passings Successor, the single role authorized to make fiduciary decisions about the plan: the person the plan author named in a Death Access Designation or, if there is none, a co-author Passings designates. Actions that cannot be undone, such as deleting documents or the plan or removing other people, wait until the challenge period ends. Co-authors continue to operate the plan day-to-day. Legacy content is then delivered on the timing the plan author chose, as the Terms of Service §11 describe. If Passings later determines that the report was made in error, Passings may revert the verification and restore the author's access (Terms of Service §22.7).
Financial information
We do not store full payment card numbers. Billing details are processed through our payment infrastructure and tokenized. Your card is stored by our payment processor, Stripe. We keep only Stripe’s reference numbers for your customer record and transactions.
How We Use Your Data
Every purpose for which your information is processed
We use your information only for the purposes that are directly relevant to delivering and improving our services.
| Purpose | Data used | Legal basis |
|---|---|---|
| Delivering the Passings platform | All data categories | Contract |
| Processing payments | Billing & payment data | Contract |
| Showing you providers near you | Location, planning preferences | Contract |
| Customer support & communications | Account info, your messages | Contract |
| Improving our services | Anonymized usage data | Legitimate interest |
| Security & fraud prevention | Technical & account data | Legitimate interest |
| Legal & regulatory compliance | As required by law | Legal obligation |
We do not sell your data to data brokers or use it to train third-party AI systems. Passings does not collect, use, or sell personal data for the purpose of training large language models. If this ever changes, we will notify you and obtain your consent before doing so.
Data Sharing
Who we share your data with, and under what circumstances
We do not sell, rent, or trade your personal information to any third party for their own commercial purposes.
Limited sharing with service providers
To operate the platform, we work with third-party service providers, including cloud infrastructure (data hosting and storage), payment processing (billing and transaction security), and communications infrastructure (transactional emails and notifications). These providers are bound by contracts that limit how they may use your information. To protect sign-up, sign-in and some of our forms from bots and automated abuse, we use Cloudflare Turnstile. When a Turnstile check runs, Cloudflare receives your IP address, your browser's user agent, technical details of your connection (a TLS fingerprint) and the website the check runs on. Cloudflare uses this to tell people from bots and to improve its bot detection. Turnstile does not read what you type into the form.
Funeral home and provider partners
When you send a request to a provider, we share with that provider only what Terms of Service §10.4 describes: a preview first, and your contact details and full request only if the provider accepts. We share your phone number only if you agree to provider calls or texts. A request also carries the few details from your plan that Terms of Service §10.4(d) lists; nothing else from your plan is sent with it. If you choose to share sections of your plan with a provider, we share only the sections you select, and you can stop sharing at any time. We disclose this information because you direct us to. We do not sell it, and the provider must use it only to respond to you.
| Category | When | Shared with | Your control |
|---|---|---|---|
| Name and email | A funeral home, cremation provider or cemetery you engaged invites you (Continuo) | The provider that supplied it sees only the invitation status | Unsubscribe; deleted within 90 days if not accepted |
| Request preview, then contact details and request | You send a request | The one provider you choose | You choose what to write; phone only with consent; you can tell the provider directly to stop |
| Plan sections you select | You share your plan with a provider | That provider | You choose the sections and can withdraw the share |
Information about providers and listings
Our directory lists businesses that offer end-of-life services. We build some listings from public sources, such as business directories, mapping data and state licensing records. A listing shows business information: the business name, category, city and state, and for signed-in users, the business address, phone number and website. Where a business is run under a person’s name, that name may appear as the business name. We do not sell listing information. A business, or a person named in a listing, may ask us to correct or remove it at passings.io/listing-removal or at privacy@passings.io.
When a business claims a listing or becomes a Passings provider, we collect the account holder’s name, email and phone number, the business’s licensing and verification information, the business’s billing records with our payment processor, and records of its acceptance of our provider agreement. We use this to run the provider service, verify the business and meet our legal obligations.
Legal requirements
We may disclose your information if required by law, court order, or in response to a valid request from law enforcement. We may notify you of such requests where the law permits and we consider it appropriate.
Advertising. Passings may show advertising on some pages. Advertising cookies load only if you opt in to them (see Cookies & Tracking). We do not sell your personal information.
Data Retention
How long we keep your information, and why
| Data type | Retention period | Rationale |
|---|---|---|
| Account & profile data | Duration of account + 30-day cooling-off period, then permanently deleted | Active service delivery; 30-day window to cancel deletion request |
| Planning & arrangement data | Duration of account | Core service function; legal record of wishes |
| Billing & transaction records | 7 years after last transaction | Financial compliance and tax obligations |
| Health & medical information | Duration of account; permanently deleted at end of 30-day cooling-off period | Sensitive data — minimized retention |
| Usage & analytics data | Kept by our analytics providers under the retention settings of each service | Service improvement; analytics events are tied to a random identifier stored in your browser, not to your name or email |
| Support communications | 3 years from last interaction | Quality assurance and dispute resolution |
| Legacy locker content & recipient access | Retained while the account is active; permanently deleted when the account is deleted (after the 30-day cooling-off period) or under our account-dormancy retention schedule. If you delete your account and elect delivery rather than destruction, the sealed content is held past deletion until every delivery has been unlocked and its 2-year access window has run, then permanently deleted | Recipient access links expire on the date shown in the delivery email; recipients are prompted to download a permanent copy beforehand. Content follows the account lifecycle and is not separately deleted when recipient access closes. |
| Documents about a reported death (such as death certificates, government IDs, court documents) | 7 years after the verification or revert decision, then permanently deleted | Used to review a reported death or a contest and to resolve later disputes; access restricted to a small number of authorized staff under audit logging |
| A request you sent to a provider | Kept while your plan exists. A request the provider never accepted has its personal details removed after 180 days without activity. On plan or account deletion, the personal details in every request are removed. | So you and the provider can see the request while it is relevant; personal details are removed when they are no longer needed |
| Consent to provider calls or texts | Life of the request record, then removed with it | A record that you agreed to provider calls or texts |
| Phone-reveal records | Not linked to your IP address; kept for counting | Counting interest in a listing without identifying you |
| Listing reports | Five (5) years after the report is resolved | Resolving reports and later disputes about a listing |
| Provider account, verification and acceptance records | Life of the provider account plus seven (7) years | Running the provider service, verification, and legal and tax obligations |
You may request deletion of your account and all associated data at any time. After a 30-day cooling-off period during which you may cancel, your account and personal data are permanently deleted from our primary systems. Our database is backed up daily and each backup is kept for seven (7) days, so deleted data is gone from those backups within seven (7) days. Files you upload, such as documents, photos and recordings, are not included in those backups. Certain limited records are retained where the law requires or permits it: billing and tax records (up to 7 years), acceptance and consent records, security audit logs, and evidence that a requested deletion was actually performed. This is consistent with the exceptions recognized by applicable privacy laws, including CCPA §1798.105(d). Identifying information in these retained records is pseudonymized or removed wherever possible, and they are isolated from any active profile. We may also delete an account that has been inactive for a long period, after notice to the account email.
Inactive accounts
We do not delete an account because it is inactive for a short time. After three (3) years with no activity on an account, we start sending reminders to the account email, and we send more at seven (7) and seven and a half (7.5) years. After fifteen (15) years with no activity, we send a final notice, and we may delete the account one hundred eighty (180) days later, in the same way as a deletion you request. Any activity on the account, such as signing in, restarts this clock. Where an account holder's death has been verified, the clock is paused (Terms of Service §22.6).
Security
The technical and organizational measures we use to protect your data
We implement security measures proportionate to the sensitivity of the data we hold. Given that we process health information and end-of-life planning details, we apply a high standard.
AES-256 Encryption
All data encrypted at rest using AES-256 standard
TLS in Transit
Data in transit is protected with TLS
Access Controls
Role-based access; no employee reads your data without cause
Continuous Monitoring
Automated application error and availability monitoring with alerting
Security Reviews
Periodic internal security reviews
Breach Response
Documented incident response plan; we notify affected users as the law requires
Despite these measures, no system is completely secure. If you discover a vulnerability, please report it responsibly to security@passings.io.
Your Rights
What you can ask us to do with your information
You have meaningful control over your personal information. All rights below apply to all Passings users, regardless of location. California residents additionally have rights under the CCPA (see below).
Right to Access
Request a copy of all personal information we hold about you, in a portable format.
Right to Correct
Update or correct any inaccurate personal information. Most data is editable directly in your account.
Right to Delete
Request deletion of your account and personal data. A 30-day cooling-off period follows, after which your data is permanently deleted from our primary systems. Limited records are retained where the law requires or permits — see Data Retention above.
Right to Portability
Export your planning data in a structured, machine-readable format (JSON), with a readable summary you can print or save as a PDF.
Right to Opt Out
Opt out of analytics and marketing messages. Billing, security and legally required notices are part of the Service and continue.
CCPA Rights (California)
Know, delete, and opt out of the sale of personal information. We do not sell personal information.
Washington and Nevada residents — health data. Health information is covered by a separate document, the Consumer Health Data Privacy Policy, as Washington’s My Health My Data Act and Nevada’s SB 370 require. It sets out the health categories we collect, why we collect them, who receives them, and how to access, correct, withdraw consent to, or delete them. Washington requests are answered within 45 days (extendable once by 45 where a request is complex); Nevada requests within 30 days. If we deny a request you may appeal, and if we deny the appeal we will give you a way to contact your state Attorney General.
To exercise any of these rights, email privacy@passings.io or use the data controls in your account settings. We respond within the time the law that applies to you requires. Before we act on a request, we may verify it, for example by asking you to sign in again, by matching it against information we already hold, or, for an authorized agent, by asking for your signed permission.
Cookies & Tracking
How we use cookies and what you can control
We use a minimal set of cookies — only those necessary to operate the platform and understand how it is being used at an aggregate level.
| Cookie type | Purpose | Can be disabled? |
|---|---|---|
| Essential / Functional | Session management, authentication, security tokens, preference storage | No — required for platform to function |
| Analytics | Aggregate usage patterns, performance monitoring, feature engagement. Events are tied to a random identifier stored in your browser, and some carry an internal plan identifier. We do not send your name or email with them. | Yes — via cookie settings |
| Preference cookies | Remember your display settings, language, and interface preferences | Yes — clearing these resets preferences |
Advertising cookies (Google AdSense) load only if you opt in to the Advertising category in Cookie Settings. You can manage cookie preferences at any time via the Cookie Settings link in the footer, or through your browser's privacy settings.
Children's Privacy
Our platform is not intended for users under 18
Passings is designed for adults making end-of-life planning decisions. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, please do not use this platform or submit any information to us.
If we learn that we have inadvertently collected personal information from a minor, we will delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately at privacy@passings.io.
Changes to This Policy
How we communicate updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
Notify you thirty (30) days before the changes take effect, both by email at the address associated with your account and by posting the updated policy on our website with the date it takes effect. Update the “Last updated” date at the top of this policy.
When a material change takes effect, we ask you to accept the updated policy as the Terms of Service §21 describe. If you disagree with any changes, you may close your account and request deletion of your data before the effective date.
Contact Us
How to reach our privacy team
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:
| Contact method | Details |
|---|---|
| Privacy inquiries | privacy@passings.io |
| Data deletion requests | privacy@passings.io — subject line: “Data Deletion Request” |
| Security vulnerabilities | security@passings.io |
| General support | support@passings.io or via the Contact page |
| Mailing address | Passings LLC · Privacy Team · 2501 Chatham Rd, Suite R, Springfield, IL 62704, USA |
We respond to privacy requests within the time the law that applies to you requires. If you are unsatisfied with our response, you have the right to file a complaint with your state's Attorney General office or consumer protection agency.
Questions about this policy? Send us a message at privacy@passings.io. Contact privacy team