Privacy Policy
Effective 2 September 2026
What KagTuk keeps
Your email address (or the identifier Apple gives us when you use Sign in with Apple), the names, dates and relationships you enter for yourself and your relatives, and the photos, videos, stories, comments, messages, wishlists and dates you choose to share. We also keep the technical records needed to run the service: sign-in sessions, the time of each request and any error it caused. We do not keep your device's contacts, location, browsing history or advertising identifiers.
Why we keep it
To show your family its tree, to deliver what you share to the people you shared it with, to send the six-digit sign-in codes and invitation links you ask for, to remind you of the dates you save, and to keep the service secure and working. That is the whole list: KagTuk does not profile you, sell data or show advertising.
Who sees it
Only your family, meaning the people connected to you on the tree, up to ten generations, and only what you shared with them. There are no public profiles and no search by strangers. KagTuk staff see your content only when a family member reports it or when a support request requires it.
Who helps us run it
Your data is stored on a server operated by KagTuk. A small number of providers process data on our behalf, under contract and only for these purposes: Cloudflare carries the encrypted connection between your phone and the server; Google's Gmail service delivers sign-in codes and invitation emails; Apple provides Sign in with Apple and App Store services. None of them may use your data for their own purposes.
Photos and location
Photos and videos are re-encoded on your phone before upload, which removes location and camera metadata. KagTuk only ever sees the items you pick.
Presence
A small lamp shows who is in the app right now. It is based on a signal that expires ninety seconds after your last activity; no last-seen history is stored.
Children
You must be at least 13 years old to create an account. Younger relatives may appear on the tree as entries added by an adult family member, without an account of their own; a parent can remove such an entry at any time.
How long we keep it
For as long as your account exists. Deleting your account takes effect at once, not on a schedule: your sign-in and every session on every device, your posts, comments, reactions, stories, messages, the dates you added, your profile photograph, your bio and every data export you have made are erased immediately. Your email address is released at once — it can start a new account, with no history. What stays is a single unclaimed entry on your family's tree, carrying your name, your dates and the relationships that connect you, so your family's history stays whole; nobody can sign in as it, and nobody can edit or remove it. Two things fade rather than vanish: encrypted off-site backups may hold a copy for up to 30 days and are used only for disaster recovery, and server logs are kept for at most 30 days.
Your rights
Download a copy of everything you have shared from Settings, Download my data. Delete your account from Settings, Delete account. You can also email us to access, correct or erase your data, or to object to how it is used; we answer within 30 days.
Security
All traffic is encrypted in transit. Sign-in is by a one-time code that expires in ten minutes, or by Sign in with Apple; you may also set a password, which is stored only as a slow one-way hash and never in readable form. Access to production systems is limited to the operator and protected by keys, not passwords.
Changes
If this policy changes in a way that matters, the app tells you before the change takes effect. The date at the top is the date of the current version.