Privacy policy

This policy covers the PFamily app for Android and iPhone, the family admin site and this website (together, "PFamily", "we"). It explains what we collect, why, and the choices you have.

Data we collect

Your account

• Email address, name, password (stored only as a salted hash), and language preference.

Family records

Entered by your family's admins or by you: names, dates of birth and death, relationships, biographies, photos, videos, 360° photos, grave locations, phone numbers, addresses, location links and email addresses of family members.

Content you send

• Tributes on member profiles; suggestions and photos sent to your family admins.
• Forum topics, replies, attached photos and poll votes, plus which topics you have read and your weekly digest setting.
• Prayers and offerings in the 3D ancestral hall (public or private).
• Reports you make about content (we record who made the report) and the people you block in the forum or the ancestral hall.

Photos you upload are re-encoded on our server, which removes embedded metadata such as GPS location.

Devices and security

• For each sign-in: a device name (sent by the app, or your browser's user agent), IP address, and the times you signed in and were last active. This powers the Signed-in devices list where you can sign devices out.
• A security log of account and admin actions with IP address.

Kept only on your device

Anniversary reminders, the app lock (fingerprint / Face ID), the list of people whose tributes you have hidden, and a cache for offline viewing. Biometric data never leaves your device. The camera, photo library and calendar are used only when you choose a feature that needs them.

How we use it

• To sign you in and keep your account secure.
• To show your family's genealogy and content to members of your family.
• To send verification codes, password resets, anniversary reminder emails and the forum digest you turned on.
• To handle reports of objectionable content and enforce our Terms of use.
• To answer you when you contact us.

We do not use your data for advertising, we do not build marketing profiles, and we do not sell or rent it.

Who can see it

• Family data is available only to people signed in to that family. Photos, videos and documents also require sign-in.
• Phone numbers and addresses: only admins, editors and the person themselves. Email addresses: only admins and the person themselves.
• Location links and 360° photos: all members of the family.
• Private prayers in the ancestral hall: only you.
• System operators can create and lock families and issue admin accounts, but their role cannot read family data.

Third parties

Service	What it receives	Why
Google (Gmail)	Your email address and the message	Delivering verification codes, reminders and notices
Google Maps	Only what you open: a location link or directions request	Showing graves and places on a map, when you tap a location
Apple / Google app stores	What their stores collect when you install the app	App distribution, under their own policies

The app contains no analytics, advertising or crash-reporting SDKs. Otherwise we disclose data only when required by law.

How long we keep it

Data	Kept
Account	Until you delete it
App sign-in sessions	Up to 30 days, or until you sign that device out
Admin site sessions	12 hours
Sign-in protection records	30 days
Security log	2 years
Family records and shared content	As long as the family uses PFamily, or until an admin or the author removes them

Deleting your account

In the app: More → Delete account. Without the app: the account deletion page. When you delete your account:

• Deleted immediately: your account, sign-in sessions, reminder email subscription, app-access grants, your prayers and offerings (public and private), and your email, phone number and address on family profiles.
• Kept without your name: tributes, forum posts and suggestions you sent are shown as from a "Deleted account". To remove forum posts, delete them yourself first.
• Kept: your entry in the family tree, because it is a shared family record. Ask your family admin or contact us to correct or remove it.

Your choices

• Edit your own phone number, address and location links in your profile; send corrections to anything else with Contribute / Feedback.
• Turn off reminders, the forum digest or the app lock in the app at any time.
• Withdraw camera, photo, calendar or notification access in your device settings.
• Sign out any device, or all devices, from Signed-in devices.
• Ask us for a copy of your data or for deletion by writing to us.

Security

All traffic uses HTTPS. Passwords are stored hashed. On your phone, your sign-in token is kept in the iOS Keychain or Android Keystore. Changing your password signs out every other session. No system is perfectly secure, but we work to protect your data and will notify affected users of a breach as required by law.

Children

PFamily is not intended for children under 13 to create accounts. Family records may include children, entered by family admins.

Changes

We will update this page and the date at the top when this policy changes.

Contact

Questions or requests about your data: letanphuoc@gmail.com. See also our Support page.