Your privacy is part of
how we care for you

Passings, Inc. (“Passings,” “we,” “us,” or “our”) operates the Passings funeral planning platform available at passings.io and through our mobile application. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

We take privacy seriously — especially given the nature of the information you trust us with. End-of-life planning involves details that are deeply personal: wishes for your own passing, information about a loved one who has died, health context, and financial decisions. We have designed this platform and this policy with that sensitivity in mind.

By using Passings, you agree to the practices described in this policy. If you have questions at any time, please reach out to [email protected].

We collect information you provide directly, information generated by your use of our platform, and certain technical information automatically collected by our systems.

Some information you share with Passings is particularly sensitive. This includes health and medical information, details about deceased individuals, and financial data. We apply additional protections to these categories above and beyond our standard practices.

Health & medical information

We collect health information only when you voluntarily share it in the context of planning. This may include conditions relevant to end-of-life care preferences, advance directive details, organ donation wishes, or hospice considerations. This information is used solely to support your plan and is never shared with health insurers, employers, or advertising networks.

Information about deceased individuals

When you use Passings to help plan arrangements for a loved one who has passed, you may provide personal details about that individual. This information is treated with the same privacy protections as your own personal data, and is used exclusively to generate planning documents, obituaries, and service coordination.

Operator transitions after death

Plans on Passings may have multiple people authorized to operate them: the plan author and any collaborators the author has designated as co-authors. While the plan author is alive, all operators have equal operational authority. When a co-author reports the plan author's death and submits supporting evidence (such as a death certificate or court document), our team reviews and verifies the report. Once verified, the plan moves into post-death mode: the original author's account loses operational authority on this plan, and the operator set narrows to the co-authors. One co-author is designated by our team as the Personal Representative — the single role authorized to make fiduciary decisions about the plan, including removing other co-authors. Co-authors continue to operate the plan day-to-day. Designated legacy recipients are notified at this point and receive any materials the plan author prepared for them. If the original report is later determined to have been submitted in error, the verification is reverted and full operational authority is restored.

Financial information

We do not store full payment card numbers. Billing details are processed through our payment infrastructure and tokenized. We retain only a reference token, the last 4 digits of the card, and billing address for record purposes.

We use your information only for the purposes that are directly relevant to delivering and improving our services.

We do not use your data for behavioral advertising, sale to data brokers, or training third-party AI systems. If this ever changes, we will notify you and obtain your consent before doing so.

We do not sell, rent, or trade your personal information to any third party for their own commercial purposes. This is a firm commitment, not a policy footnote.

Limited sharing with service providers

To operate the platform, we work with carefully vetted third-party service providers — including cloud infrastructure (data hosting and storage), payment processing (billing and transaction security), and communications infrastructure (transactional emails and notifications). These providers access only the minimum data necessary to perform their function, and are bound by contractual data processing agreements that prohibit secondary use of your information.

Funeral home and provider partners

When you contact a funeral home or provider through Passings, we share the inquiry details you compose with that provider. You control what is included in any such inquiry. We do not share your full plan or health information with providers unless you explicitly choose to do so.

Legal requirements

We may disclose your information if required by law, court order, or in response to a valid request from law enforcement. We will notify you of such requests to the extent permitted by law.

You may request deletion of your account and all associated data at any time. After a 30-day cooling-off period during which you may cancel, your account and personal data are permanently deleted from our primary systems. Certain limited records are retained where the law requires or permits it — billing and tax records (up to 7 years), acceptance and consent records, security audit logs, and evidence that a requested deletion was actually performed — consistent with the exceptions recognized by applicable privacy laws, including CCPA §1798.105(d). Identifying information in these retained records is pseudonymized or removed wherever possible, and they are isolated from any active profile.

We implement security measures proportionate to the sensitivity of the data we hold. Given that we process health information and end-of-life planning details, we apply a high standard.

Despite these measures, no system is completely secure. If you discover a vulnerability, please report it responsibly to [email protected].

You have meaningful control over your personal information. All rights below apply to all Passings users, regardless of location. California residents additionally have rights under the CCPA (see below).

To exercise any of these rights, email [email protected] or use the data controls in your account settings. We will acknowledge your request within 5 business days and complete it within 30 days.

We use a minimal set of cookies — only those necessary to operate the platform and understand how it is being used at an aggregate level.

We do not use third-party advertising cookies or tracking pixels. You can manage cookie preferences at any time via the Cookie Settings link in the footer, or through your browser's privacy settings.

Passings is designed for adults making end-of-life planning decisions. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, please do not use this platform or submit any information to us.

If we learn that we have inadvertently collected personal information from a minor, we will delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Notify you by email at the address associated with your account at least 14 days before the changes take effect. Update the “Last updated” date at the top of this policy. Maintain an accessible archive of previous versions for your review.

Your continued use of Passings after changes take effect constitutes your acceptance of the updated policy. If you disagree with any changes, you may close your account and request deletion of your data before the effective date.

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related requests within 2 business days and to complete requests within 30 days. If you are unsatisfied with our response, you have the right to file a complaint with your state's Attorney General office or consumer protection agency.