Naatri is a family tree and kinship app. This policy explains what we collect, why we collect it, and what control you have over it. It applies to the Naatri website and mobile app.

What we collect

Your account. Your first and last name, email address, and — if you sign up with a password rather than Google or Facebook — a one-way hash of that password. We never store your password itself. You may also optionally add a profile photo, date of birth, gender, country, and a link to your Facebook profile.

Sign-in with Google or Facebook. If you choose to sign in this way, we receive your name, email address, profile picture, and the provider’s account identifier from that service. We use these to create or match your Naatri account and nothing else. We do not receive your password, and we do not post anything to your Facebook or Google account. If you decline to share your email address, we create the account without one and ask you for an email directly.

Your family tree. The people you add to a tree and the information you record about them: names, gender, dates of birth and death (in both Gregorian and Bikram Sambat calendars), notes about those dates, a short biography, photos you upload, and the relationships that connect them. This is content you and the other members of your tree create.

Information about other people

A family tree is, by its nature, information about other people — including relatives who do not have a Naatri account. When you add someone to a tree, you are responsible for having a legitimate reason to record that information and for respecting the wishes of living relatives who ask not to be included. If you are contacted by someone who appears in a tree you administer and they ask to be removed, please remove them. If they contact us instead, we will pass the request on to the tree’s owner.

How we use it

We use your information to operate the service: to run your account, to build and display your tree, to calculate the correct kinship term for each relationship in your language, to send you transactional email (address verification, password resets, and notices such as a new sign-in method being linked to your account), and to keep the service secure.

We do not sell your personal information. We do not use your family tree data for advertising, and we do not share it with advertisers or data brokers.

Who can see your tree

Trees are visible only to their members. A tree’s owner and administrators control who can join, whether a join code is enabled, and what each member can edit. People outside the tree cannot see its contents. Naatri staff access tree content only when necessary to operate the service or investigate a problem you have reported.

Service providers

We use a small number of third parties to run the service: a hosting provider for the servers and database, a transactional email provider to deliver verification and password-reset messages, and a content delivery network in front of the website. These providers process data only as needed to provide their service to us.

Analytics

We use Cloudflare Web Analytics to count visits to our public pages. It is cookieless and does not fingerprint you, build a profile of you, or follow you to other websites. It records only aggregate page-level data — which page was viewed, the referring site, and general country and device type. It runs only on our public pages; it is not loaded inside a family tree, and it never has access to tree contents. We do not use advertising analytics, and we do not sell or share this data.

How long we keep it

We keep your account and tree data for as long as your account is open. Family trees imported but never completed are deleted automatically after a period of inactivity. When you ask us to delete your account, see the next section.

Your choices

You can view and correct your own account details at any time from your account page, and you or your tree administrator can edit or remove people and relationships in a tree. To request a copy of your data or the deletion of your account, see Deleting your data, or write to us at [email protected]. Depending on where you live, you may have additional rights over your personal data — including access, correction, deletion, and objecting to certain processing. We honour these requests regardless of where you live.

Security

Traffic to Naatri is encrypted in transit. Passwords are stored only as bcrypt hashes. No service can promise perfect security, but if we ever discover a breach affecting your data, we will tell you.

Changes

If we change this policy in a way that materially affects you, we will update the date at the top of this page and, where appropriate, notify you by email.

Contact

Questions about this policy, or about your data, go to [email protected].