Privacy & Data Policy

We store the information you provide: names, birth dates, bios, contact info, profile photos, and the relationships between family members. We also store your email for authentication. We do not collect analytics or tracking data.

Every database query is enforced by Row-Level Security (RLS). This means each family tree's data is completely isolated — members of one tree cannot see, modify, or even detect the existence of another tree's data. This is enforced at the database level, not just the application level.

While the platform administrator technically has backend database access (as with any hosted service), we commit to never browsing, exporting, or using your personal family data for any purpose. The data exists solely for your use.

Tree owners can export all family members and relationships as a JSON file at any time from the Admin Panel. Your data is never locked in — you can leave with everything.

Tree owners can permanently delete their entire family tree — including all members, relationships, invite links, and access roles — from the Admin Panel. Once deleted, the data is irrecoverable.

When you add living family members to your tree, you are responsible for ensuring you have appropriate permission from those individuals to include their personal information. All family trees are private by default — only invited and approved members can view the data.

We will never sell, license, or monetize your personal data. To operate the service, limited data is shared with two service providers: • AI relationship detection — When you use the AI detection feature, member names, gender, birth dates, and relationship context are sent to a third-party AI service for classification. No data is stored by the provider beyond the request. • Email delivery — Your email address is shared with our email delivery provider to send transactional emails (verification, invitations, notifications). These providers process data solely to deliver their service to us. We do not share data with advertisers, data brokers, or any other third parties.

The AI relationship detection feature is on-demand — it only activates when you explicitly click the AI detection button. When activated, the minimum data needed (names, gender, birth dates, and relationship paths of the two selected members and their immediate family context) is sent to a third-party AI service for classification. The AI suggests a relationship type; you always review and confirm before anything is saved. No family data is stored by the AI provider beyond processing your request. You can disable all AI features entirely in My Profile → Preferences. When disabled, the app works fully offline with manual input and deterministic inference only.

Family trees inherently contain information about minors (children's names, birth dates). This data is protected by the same Row-Level Security isolation and access controls as all other data — only invited and approved tree members can view it. We do not knowingly collect data from children directly; all minor data is entered by adult family members.

You have the right to access, correct, or delete your personal data at any time. Tree owners can self-serve data export (JSON) and complete tree deletion from the Admin Panel. Individual members can request data corrections or removal by contacting the tree owner or reaching out to us. For privacy questions or data subject requests, contact us at: hello@famiroot.com