FamilyKeeps Privacy Policy

This Policy applies to personal information we process as a controller when you use the Services. We also act as a processor for certain activities performed on behalf of family account holders (for example, hosting user-generated content).

• Account and Profile Data: name, email, relationship to family members, Family Tree ID, settings, and preferences.
• User Content: photos, videos, stories, comments, metadata (for example, timestamps and device info), and family tree structure.
• Child Information: date of birth, relationship, parent or guardian identity, and consent records. For living children under 13, only parent or guardian-controlled profiles are permitted; no accounts.
• Technical Data: device identifiers, IP address, app version, cookies and similar technologies, diagnostics, and usage logs.
• Communications: messages with us, including support tickets, feedback, invitations, and notices.
• Approximate Location: derived from IP for security and regional compliance. We do not collect precise GPS by default.

We use information to provide, secure, and maintain the Services; create and manage Family Tree IDs and profiles; enable sharing within your chosen family circles; communicate with you about updates, features, and policies; personalize and improve the Services; prevent fraud, abuse, and safety risks; and comply with legal obligations.

• Under 13 (no accounts): Living children under 13 may not create or use FamilyKeeps accounts. Parents or legal guardians may create profiles for children under 13 that remain fully parent or guardian-controlled and are not used to log in.
• Ages 13–17 (parent or guardian invitation only): Only a parent or legal guardian may invite their child aged 13–17 to take over their profile by creating an account. The inviting parent or guardian provides consent for processing and remains responsible for the child's use until age 18.
• Placeholder Entries by Non-Guardians: Family members may add limited placeholders, such as name and relationship, for living minors solely to complete the tree. No photos, videos, contact info, or sensitive data may be added until a parent or guardian claims the profile.
• Deceased Children: Family members may create and manage memorial profiles for deceased children for family history purposes. Standard living-child privacy laws, such as COPPA, GDPR-K, and PIPEDA, generally protect living individuals and do not apply to deceased persons.

Where GDPR or UK GDPR applies, our processing bases include performance of a contract for providing the Services, legitimate interests for safety, improvement, and fraud prevention, consent for certain optional features and parental consent for minors, and legal obligations. You may withdraw consent at any time without affecting prior processing.

We do not sell personal information. We share with service providers for hosting, storage, analytics, communications, and customer support; other users within your selected family circles according to your settings; authorities where required by law or to protect safety; and successors in the event of a merger, acquisition, or asset sale subject to this Policy.

If you are outside the United States, your data may be transferred to and processed in the U.S. and other countries. We use appropriate safeguards such as Standard Contractual Clauses (SCCs) and supplementary measures where required by law.

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When you delete content or your account, we remove it from active systems and then from backups within a reasonable period, subject to legal holds.

We implement organizational and technical measures such as encryption in transit, access controls, least-privilege practices, and monitoring. No system is perfectly secure, and you are responsible for safeguarding your credentials and promptly notifying us of suspected compromise.

Depending on your location, you may have rights to access, correct, delete, or port your data; restrict or object to processing; and withdraw consent. EEA and UK residents may contact their supervisory authority. U.S. state laws, including California CPRA, Virginia, Colorado, Connecticut, and Utah laws, may grant additional rights, and California residents can exercise rights without discrimination. We honor Global Privacy Control (GPC) signals for browser-based opt-outs where applicable. To exercise rights, contact info@familykeeps.com.

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and analyze usage. Where required, we obtain your consent via our cookie banner and Cookie Settings. See our Cookie Policy for details.

Parents and legal guardians control child profiles until the child accepts an invitation at age 13 or older and creates their own account. Parents can revoke consent and request deletion of their child's data at any time by contacting us. We maintain records of parental consent as required by law.

We may preserve and disclose information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to protect any person's safety; or to prevent fraud or abuse of the Services.

We may update this Policy from time to time. If we make material changes, we will provide notice, such as in-app or by email. Your continued use after the effective date signifies acceptance.

FamilyKeeps LLC

info@familykeeps.com