⚠️ Draft — pending legal review. Not yet legally binding.

Privacy Policy

Last updated: August 16, 2026

1. Information We Collect

OurRoots is a family tree and genealogy documentation platform. To provide our visualization and lineage services, we collect:

  • Account Information: Username, securely hashed passwords, and session identifiers.
  • Family Lineage Data: First names, last names, gender, dates of birth and death, and parent/child/spouse relationships.
  • Optional Profile Details: Biography notes, profile image URLs (HTTPS), and mobile numbers (used for progressive claim matching).

2. How We Use Your Information

We use your data solely to:

  • Render hierarchical, multi-generational family tree graphs and kinship calculations.
  • Enable authorized family members to suggest edits and collaborate on shared genealogical records.
  • Facilitate progressive node claiming when family members join through invite links.
  • Maintain platform security, prevent unauthorized access, and enforce rate limits.

3. Silhouette Masking & Privacy Controls

OurRoots protects living individuals through our Silhouette Privacy Model:

When users access a tree via a public or guest link without direct bloodline permissions, sensitive identifying details (names, dates, photos, and contact info) are masked as anonymous silhouette nodes. Full biographical details are only visible to authenticated tree members and direct bloodline relatives.

4. Data Retention & Deletion Rights

You retain ownership over your personal data. Tree owners and claimed node owners may request deletion of their records at any time. When a tree is deleted, associated orphan nodes and memberships are permanently removed from our primary database.

5. Non-Consenting Relatives & Removal Requests

If you discover that your personal information was added to a family tree without your consent, you have the right to request immediate redaction or deletion. Contact our data compliance team at privacy@ourroots.app with your name and details, and we will process the request promptly.