Privacy notice
The family stays in control of the family record.
Version privacy-2026-07-28. Last reviewed 28 July 2026. This notice describes the current private beta. It is intentionally specific about what exists today, but it is not a substitute for the jurisdiction-reviewed policy required before a public commercial launch.
Archive-review enquiries
The public enquiry asks for a name, reply email, approximate record size and format, and a short description of the preservation problem. It does not accept file uploads and asks people not to include names, dates, photographs, sensitive stories or living-person details. The enquiry is delivered to the Kinonicle operator mailbox so we can assess fit and reply; it is not added to a family space.
Information in a family space
A family record may contain names, relationships, dates, places, notes, stories, photographs, GEDCOM source files, contribution history and member-access history. Sign-in records include an invited email address and security events needed to operate the service.
Why information is used
Information is used to provide the private family-tree experience, calculate relationships, review suggested changes, manage member access, maintain security and create steward-requested exports.
Where information is handled
The beta uses Supabase-managed authentication and PostgreSQL in Singapore, with Cloudflare handling protected application delivery, private object storage and network controls. Family records are not placed in public search pages.
Who can see it
Invited members see only the family space allowed by their active database membership. Stewards have additional review, export and access-management permissions. Kinonicle does not sell family data or use it for advertising.
Security and history
Email codes establish individual accounts, sensitive steward actions require an authenticator, and changes such as invitations, imports, exports and approvals are recorded in an append-only family audit history.
Your choices during beta
Members can propose corrections and ask a steward to suspend their access. Stewards can export the family record. Photograph removal is available now; complete family-space deletion remains a managed operation until a reviewed self-service workflow is released.
Retention and international use
An archive-review enquiry is kept only while the conversation is active or needed for ordinary business records, and can be deleted on request. Exact production retention periods, subprocessors, cross-border safeguards and regional request procedures are not yet final. They must be published and jurisdiction-reviewed before public commercial availability.