Family members only
Family data is shown only to people signed in to that family. Photos, videos and documents also require sign-in — there are no public links.
Security & privacy
A genealogy holds the names, birth dates and homes of many generations. We guard it as we would our own family book.
Family data is shown only to people signed in to that family. Photos, videos and documents also require sign-in — there are no public links.
Phone numbers and addresses are visible only to admins, editors and the person themselves. Email addresses only to admins and the person themselves.
Sign-up and password resets go through a verification code sent to your email. Passwords are stored hashed; your session on the phone lives in the Keychain (iPhone) or Keystore (Android).
See the devices signed in to your account, remove one or sign out everywhere. Changing your password ends every old session.
Fingerprint and Face ID run on your device; biometric data never leaves it.
System operators can only create and lock families and issue admin accounts; their role cannot open family data. Admin actions are written to an audit log.
You can delete your account at any time. What we store and how we use it is described in our Privacy policy.