Privacy Policy

What we store

The people, relationships, stories, photos, and voice notes you add to your family workspace, plus your account details (name, email) and basic security logs.

How it's protected

End-to-end encrypted: only your family can read what you share. The people in your tree, stories, comments, captions, photos, videos and voice recordings are locked on your devices, with a key only your family's devices hold, before they reach us. We store them but cannot read them, and neither could anyone who got hold of our servers or backups. Everything also travels over TLS.

What we can see is what it takes to run the service: your account (name, email), which families you belong to and in what role, when something was added and by whom, its size and type, and whether a profile belongs to a living child under 13 (for the consent rules). Notifications never carry what you wrote.

Because we cannot read your family's memories, we cannot restore them either. If you lose every device you use Embertree on, your recovery code (in your account settings) or a relative's app is the only way back in: keep one.

Families that joined before end-to-end encryption hand their key over the first time one of their devices opens Embertree; once their recovery is secured, we erase our copy.

We never sell your data, share it with advertisers, or use it to train AI.

Where it's stored

By default your data is stored in Canada (Montréal region). Additional regions, including the EU, are planned.

Your rights

You can access and export your contributions, correct them, and delete your account or workspace at any time from settings. Deleted data is purged from primary storage within 30 days and from backups within 90 days.

Contact

Questions about your data: privacy@embertree.app.