Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: January 2025
Quick Navigation
Introduction
Mhuri-Izihlobo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our family tree platform and services.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
1. Personal Information You Provide
- Account Information: Name, email address, password, phone number
- Family Tree Data: Names, dates of birth/death, relationships, locations, photos, documents, stories, and other genealogical information
- Payment Information: Billing address, payment method details (processed securely through Stripe)
- Communications: Messages, feedback, and support requests
2. Information Collected Automatically
- Usage Data: Pages visited, features used, time spent, click patterns
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies & Tracking: Session cookies, preference cookies, analytics cookies
3. Information from Third Parties
- Payment Processors: Transaction confirmations from Stripe
- Social Media: If you connect social accounts (optional)
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- • Create and manage your account
- • Provide family tree features
- • Process payments and subscriptions
- • Store and display your data
Customer Support
- • Respond to inquiries
- • Troubleshoot issues
- • Provide technical assistance
- • Send service updates
Improvement & Analytics
- • Analyze usage patterns
- • Improve features and UX
- • Develop new functionality
- • Optimize performance
Security & Compliance
- • Prevent fraud and abuse
- • Enforce terms of service
- • Comply with legal obligations
- • Protect user rights
Marketing Communications
We may send you promotional emails about new features, special offers, or other information we think you might find interesting. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your account settings.
Information Sharing & Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
With Your Consent
- • Family members you invite to collaborate on your tree
- • When you make your tree public or share specific information
- • Third-party services you authorize
Service Providers
We work with trusted third-party service providers who help us operate our platform:
- • Supabase: Database and authentication services
- • Stripe: Payment processing
- • Email Service Providers: Transactional and marketing emails
- • Cloud Storage: Secure file storage
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or the public.
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
What We Never Do
- We never sell your personal or family data to third parties
- We never share your data with advertisers or data brokers
- We never use your family tree data for purposes other than providing our services
Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.
Encryption
- • SSL/TLS encryption for data in transit
- • Encrypted database storage
- • Secure password hashing
- • End-to-end encryption for sensitive data
Access Controls
- • Two-factor authentication available
- • Role-based access permissions
- • Regular access audits
- • Automatic session timeouts
Infrastructure
- • Secure cloud hosting
- • Regular security updates
- • Automated backups
- • Disaster recovery plans
Monitoring
- • 24/7 security monitoring
- • Intrusion detection systems
- • Regular security audits
- • Incident response procedures
Important Note
While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information using industry best practices.
Your Privacy Rights
You have the following rights regarding your personal information:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct any inaccurate or incomplete information
Right to Erasure
Request deletion of your personal data
Right to Portability
Export your data in a standard format (GEDCOM, PDF)
Right to Object
Object to certain processing of your data
Right to Restrict
Limit how we process your information
How to Exercise Your Rights
To exercise any of these rights, you can:
- Manage settings directly in your account dashboard
- Email us at privacy@mhuri-izihlobo.com
- Contact our support team through the website
We will respond to all requests within 30 days.
Children's Privacy
Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Note: While family trees may contain information about minors, the account holder must be 18 years or older. We recommend limiting the amount of personal information shared about living minors in your family tree.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
We ensure that appropriate safeguards are in place to protect your information when it is transferred internationally, including using standard contractual clauses approved by relevant authorities.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information, unless we are required to retain it for legal, regulatory, or legitimate business purposes.
Retention Periods:
- Account Data: Retained while your account is active
- Family Tree Data: Retained until you delete it or close your account
- Payment Records: Retained for 7 years for tax and accounting purposes
- Support Communications: Retained for 3 years
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Sending an email to the address associated with your account
- Displaying a prominent notice on our website
- Showing an alert in your account dashboard
Your continued use of our services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
Contact Us About Privacy
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us using the information above. We will investigate and attempt to resolve any complaints or disputes regarding the use and disclosure of personal information.