PFamily

Security & privacy

Family matters stay in the family

A genealogy holds the names, birth dates and homes of many generations. We guard it as we would our own family book.

Family members only

Family data is shown only to people signed in to that family. Photos, videos and documents also require sign-in — there are no public links.

Contact details are protected

Phone numbers and addresses are visible only to admins, editors and the person themselves. Email addresses only to admins and the person themselves.

Sign in with your own email

Sign-up and password resets go through a verification code sent to your email. Passwords are stored hashed; your session on the phone lives in the Keychain (iPhone) or Keystore (Android).

Remote sign-out

See the devices signed in to your account, remove one or sign out everywhere. Changing your password ends every old session.

Biometric app lock

Fingerprint and Face ID run on your device; biometric data never leaves it.

Operators can't read your tree

System operators can only create and lock families and issue admin accounts; their role cannot open family data. Admin actions are written to an audit log.

What we don't do

  • No advertising
  • No third-party trackers — not in the app, not on this site
  • No selling or sharing of family data
  • No camera, photo or calendar access unless you choose that feature

You can delete your account at any time. What we store and how we use it is described in our Privacy policy.