Privacy Policy
Last Updated: January 8, 2025
1. Introduction
We are committed to protecting your privacy and the security of your family's information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use famtri ("the Service"). The Service is operated by an individual developer.
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you register for an account, we collect:
- Email address (used for login and communication)
- Password (encrypted and securely stored)
- Account creation date
2.2 Family Tree Data
When you create and manage your family tree, we collect:
- Names of family members you add to your tree
- Photos you upload of family members
- Relationships between family members
- Any modifications you make to this data
2.3 Payment Information
We use Stripe as the payment processor. When you subscribe to the service, Stripe collects and processes your payment information, including:
- Credit or debit card information
- Billing address
Important: We do not store your credit card numbers or payment information on our servers. All payment data is securely handled by Stripe in compliance with PCI-DSS requirements. We only receive limited information from Stripe necessary to manage your subscription (such as subscription status and billing dates).
2.4 Usage and Technical Data
We collect the following technical information:
- Authentication tokens (JWT) for secure session management
We may also collect additional data through cookies and tracking technologies (such as Meta Pixel, Google Analytics, or similar tools) including:
- IP address
- Browser type and version
- Device information
- Pages visited and actions taken
- Referral sources
If we implement additional tracking technologies, we will update this policy and notify you via email.
3. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To provide, maintain, and improve the family tree creation and management features
- Account Management: To create and manage your account, authenticate your identity using JWT tokens
- Payment Processing: To process subscription payments through Stripe
- Communication: To send important service-related emails, subscription notifications, and respond to your inquiries
- Security: To protect against unauthorized access, fraud, and abuse
- Legal Compliance: To comply with applicable laws and regulations
4. Data Privacy and Visibility
Your family tree data is completely private to you.
- No other users can view or access your family tree
- We do not share your family tree data with third parties
- Your data is not used for marketing or advertising purposes
- Only you have access to view and modify your family tree
5. How We Store and Protect Your Data
5.1 Data Security
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission using HTTPS/TLS
- Secure password storage using industry-standard hashing algorithms
- JWT token-based authentication for secure session management
- Regular security updates
- Secure cloud storage infrastructure
5.2 Data Location
Your data is stored securely on cloud servers. The data storage providers comply with applicable data protection regulations.
6. Data Retention and Deletion
6.1 Active Accounts
Your data is retained for as long as your account remains active or as needed to provide the Service.
6.2 Account Deletion
If you delete your account, your data enters a 5-year retention period. During this time:
- Your subscription is automatically canceled
- You cannot access your data
- Your data is securely stored and not accessible to other users
- You may contact us to request account recovery during this period (subject to verification)
6.3 Permanent Deletion
After the 5-year retention period, all your data is permanently and irreversibly deleted from our systems, including:
- Account information
- Family tree data
- Uploaded photos
- All associated records
6.4 Legal Requirements
We may retain certain data for longer periods if required by law or to resolve disputes.
7. Third-Party Services
7.1 Stripe Payment Processing
We use Stripe to process subscription payments. Stripe's handling of your payment information is governed by their Privacy Policy. Stripe is PCI-DSS compliant and maintains high security standards for payment data.
7.2 Advertising and Analytics Services
We may use third-party services such as Meta (Facebook/Instagram), Google Analytics, and other advertising platforms. These services may collect data about your interactions with our website for advertising and analytics purposes. Their use of your data will be governed by their respective privacy policies.
7.3 No Sale of Personal Information
We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy or as required by law. Your family tree data remains private and is never shared with advertisers or analytics providers.
8. Cookies and Tracking
8.1 Essential Cookies
We use essential cookies and similar technologies to provide the Service, including:
- Authentication cookies to keep you logged in
- Session cookies to maintain your preferences
- Security cookies to protect against fraud
8.2 Advertising and Analytics Cookies
We may use third-party tracking and analytics tools, including:
- Meta Pixel: To track ad performance and conversions from Facebook and Instagram ads
- Google Analytics: To understand how visitors interact with our website
- Other Advertising Pixels: To measure the effectiveness of advertising campaigns
These tools may collect information such as your IP address, browser type, device information, pages visited, and actions taken. This data is used for marketing analytics and improving our service, and is subject to the privacy policies of these third-party providers.
9. Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information through your account settings
- Deletion: Delete your account at any time (subject to our retention policy)
- Export: Request an export of your family tree data in a portable format
- Cancellation: Cancel your subscription at any time (access to subscription benefits ends immediately upon cancellation)
To exercise these rights, please contact us at the email address provided below or use your account settings.
10. Children's Privacy
The Service is not intended for users under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your data.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Sending an email to your registered email address
- Posting a notice on the Service
- Updating the "Last Updated" date at the top of this policy
Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or data practices, please contact us at:
Email: support@famtri.com
We will respond to your inquiry within a reasonable timeframe.
14. Your Consent
By using the Service, you consent to this Privacy Policy and our collection, use, and storage of your information as described herein.