Privacy Policy

1. Introduction

Welcome to KonnectedRoots ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your family's information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our family tree building service.

By using KonnectedRoots, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Profile photo (optional)
• Authentication credentials

2.2 Family Tree Data

When you use our service, you may provide:

• Names and relationships of family members
• Birth dates, death dates, and other life events
• Photos and documents you upload
• Notes and stories about family members
• Location information (birthplaces, residences)

2.3 Usage Information

We automatically collect:

• Device information (browser type, operating system)
• IP address and approximate location
• Usage patterns and feature interactions
• Error logs and performance data

2.4 Payment Information

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number. We only receive limited billing information (last 4 digits, expiration date, billing address) for record-keeping.

3. How We Use Your Information

We use your information to:

• Provide and maintain the KonnectedRoots service
• Process your transactions and manage subscriptions
• Enable collaboration features with family members you invite
• Send service-related communications (account verification, security alerts)
• Improve our service and develop new features
• Respond to your requests and support inquiries
• Prevent fraud and enforce our Terms of Service

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal or family data to third parties for marketing purposes.

4.2 Sharing with Your Consent

Your family tree data is only shared with people you explicitly invite as collaborators. You control who can view, edit, or manage your trees.

4.3 Service Providers

We may share information with trusted third-party service providers who assist us in operating our service:

• Firebase (Google Cloud): Hosting, authentication, and database services
• Stripe: Payment processing
• Resend: Transactional email delivery

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with optional two-factor authentication
• Regular security audits and monitoring
• Access controls limiting employee access to user data
• Secure cloud infrastructure (Google Cloud/Firebase)

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your family tree data (GEDCOM format for paid plans)
• Opt-out: Unsubscribe from marketing emails (service emails cannot be opted out)

To exercise these rights, visit your Account Settings or contact us at privacy@konnectedroots.com.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and family tree information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. AI and Machine Learning

Your family data is NOT used to train AI models. Our AI features (such as name suggestions) use general genealogical knowledge and public datasets — not your personal family information.

9. Children's Privacy

KonnectedRoots is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of KonnectedRoots after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@konnectedroots.com
• Contact Form: konnectedroots.com/contact