Privacy & your family’s data
Ancestree is a private, invite-only family tree. This page explains what we store and the choices you have. It is written with Canada’s PIPEDA principles in mind.
What we collect
- Your email address, used only to send one-time sign-in links and to identify your account.
- The demographic details you enter about yourself and relatives: names, dates and places of birth and death, and relationships.
- Photos and documents you choose to upload.
- Activity needed to run the tree: who created an entry, claims, comments, flags, and in-app notifications.
How it is protected
- Access is invite-only. Every database row is protected by row-level security so only members of your tree can read it.
- Photos and documents live in private storage and are only ever served through short-lived signed URLs.
- Nothing on the tree is public or indexed by search engines.
- We never sell or share this data with third parties.
Your choices
- See your data. An admin can export the full tree as a JSON file on request.
- Correct an entry. Edit your own entry any time, or flag another entry for the owner or an admin to fix.
- Delete an entry. Ask an admin to remove an entry and its photos and documents.
- Delete your account. From your account you can permanently delete your login. Entries you added remain part of the shared family record under an admin’s stewardship unless you also ask for them to be removed.
Contact
The tree’s admins are its data stewards. Reach out to the relative who invited you, or an admin, with any privacy request.