Welcome to DroidPlanet Family Tree. We are committed to protecting your privacy and ensuring the security of your personal and family information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our family tree application.
1. Information We Collect
Account Information
- Email Address: Required for account creation and authentication
- PIN: Used for account recovery. Stored securely using industry-standard encryption
- Passkey: This site uses passkeys to log in. A passkey is a secure, passwordless authentication method that uses cryptographic keys stored on your device to verify your identity, reducing reliance on shared secrets like traditional passwords. We only store a public, non-sensitive key on our servers to enable this login, while your private key remains exclusively and securely on your personal devices.
Family Tree Data
- Names, dates, and places of birth and death
- Family relationships (parent, child, spouse, sibling)
- Notes and additional information you add to person records
- GEDCOM files you upload
Usage Information
- Login activity and session information
- Changes made to family trees (tracked for undo/approval features)
- IP addresses for security purposes
Subscription Information
- Plan level (Free, Basic, Premium)
- Billing cycle (monthly/yearly)
- Payment history and subscription status
- Usage metrics (trees, people, storage, collaborators)
2. How We Use Your Information
We use your information to:
- Provide Service: Enable you to create, manage, and collaborate on family trees
- Authentication: Verify your identity through email-based two-factor authentication
- Collaboration: Allow you to share trees with family members and control access levels
- Notifications: Send approval requests, invitations, and system notifications
- Security: Protect your account from unauthorized access
- Improvement: Enhance our services and fix technical issues
3. Data Sharing and Access
Within the Application
- Tree Owners: Have full access to all data in trees they create
- Contributors: Can view and edit tree data (subject to owner approval)
- Viewers: Can view tree data but cannot make changes
- Branch Permissions: Access can be limited to specific family branches
External Sharing
We do not share your family tree data with any external parties except:
- Email Service: PHPMailer/SMTP service for sending authentication codes and notifications
- Legal Requirements: When required by law or legal process
4. Data Security
We implement multiple security measures to protect your information:
- Encryption: All recovery PINs are encrypted using bcrypt hashing
- Secure Sessions: HTTP-only cookies with secure transmission over HTTPS
- Access Controls: Role-based permissions (owner/contributor/viewer)
- Database Security: Protected database with restricted access
- Session Management: Automatic session expiration and regeneration
5. Data Retention
- Active Accounts: Data retained as long as your account is active
- Expired Subscriptions: Downgraded to Free plan after expiration; data deleted after 30 days of non-payment if limits exceeded
- Deleted Content: Soft-deleted initially, permanently removed on request
- Change History: Maintained for undo functionality and audit purposes
- Recovery Authentication Codes: Automatically expire after 20 minutes
6. Your Rights
You have the right to:
- Access: View all data associated with your account
- Correction: Edit or update your personal and family tree information
- Deletion: Request or delete your account and all associated data
- Export: Download your family tree data in GEDCOM format
- Control Sharing: Manage who has access to your trees
- Revoke Access: Remove collaborator permissions at any time
7. Cookies and Tracking
We use the following cookies:
- Session Cookie (FAMILY_TREE_SID): Essential for login and authentication
These cookies are essential for the application to function and are not used for tracking or advertising purposes.
8. Children's Privacy
While our service is designed for creating family trees that may include information about minors, we do not knowingly collect personal information directly from children under 13. All accounts must be created and managed by adults.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice in the application. Continued use of our service after changes constitutes acceptance of the updated policy.
10. International Use
Our service is hosted by Hostinger. Your personal data is stored and processed on Hostinger's servers located in North America (USA, North Carolina). Additionally, our backups are stored in USA (Boston). By using our service, you acknowledge and consent to the transfer and processing of your information in these locations.
These locations may have different data protection laws than your country of residence. We ensure that your data is protected in accordance with this policy. For details on Hostinger's practices, view their privacy policy at hostinger.com/legal/privacy-policy.
11. Payment Processing
We offer subscription plans (Free, Basic, Premium) to access premium features. Payment processing is handled securely through Stripe, a third-party payment processor.
Stripe Payment Processing
- Recurring Charges: Subscriptions auto-renew based on your billing cycle (monthly/yearly)
- Payment Method Storage: Stripe securely stores your payment method for recurring billing
- Cancellation: You can cancel anytime; access continues until period end
- Stripe Privacy Policy: View Stripe's privacy policy at stripe.com/privacy
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: familytree@droidplanet.net
Website: https://familytree.droidplanet.net
13. Your Consent
By using DroidPlanet Family Tree, you consent to this Privacy Policy and agree to its terms.