Privacy Policy

Effective July 7, 2026

Wirasat ("we", "us") is a private family-tree service available at wirasat.net and through the Wirasat mobile app. Your family's story is exactly that — your family's. This policy explains what information we collect, why we collect it, and the choices you have. It applies equally to the website and the mobile app.

Information we collect

• Account information. When a family account is created we collect a family name, your display name, a username, your email address and a password. Passwords are stored only as secure one-way hashes — we cannot read them.
• Family tree content. The information you and your family members add to your tree: names, relationships, dates and places of birth or death, current locations, contact details, social profile links, notes, and photos. This may include information about people other than yourself (see "Information about your relatives" below).
• Messages you send us. If you use the contact form we receive your name, email address and message so we can reply.
• Technical information. We record IP addresses for security purposes (such as limiting repeated failed sign-in attempts and abuse of public forms) and we use Google Analytics on our public pages to understand overall visitor traffic. The tree application itself is behind sign-in.
• Cookies. A session cookie keeps you signed in. Google Analytics sets its own cookies on public pages. We do not use advertising cookies.

Information about your relatives

A family tree naturally describes people besides the account holder, including living relatives. When you add information about others, you are responsible for having their agreement to include them. Every tree is private to its own family: it is visible only to the members and guests that a family administrator has invited. If you believe information about you appears in a Wirasat family tree and you would like it corrected or removed, contact us at [email protected] and we will work with you and the tree's administrator to resolve it.

How we use your information

• To provide the service — storing and displaying your family tree and photos to the people your family has authorised.
• To secure accounts — email verification, password resets, session management and abuse prevention.
• To send service email such as verification links, password-reset links and replies to your enquiries. We do not send marketing email.
• To understand overall usage of our public pages through aggregate analytics.

What we never do

• We never sell your data or your family's data.
• We never share tree content with other families, advertisers or data brokers.
• We never use your family's photos or story for advertising or AI training.

Who can see your family tree

Only people your family's administrators authorise: members they create (as admins, editors or viewers) and guests holding a time-limited access code, which administrators can revoke at any time. Wirasat staff access account data only when needed to operate the service or to respond to a support request you make.

Service providers

We rely on a small number of processors to run Wirasat: Amazon Web Services (hosting, database and private photo storage), Twilio SendGrid (transactional email) and Google Analytics (aggregate statistics on public pages). Each receives only what is necessary to perform its role.

Security

All traffic is encrypted in transit with TLS. Photos are kept in private storage and are served only through authenticated requests scoped to your family. Passwords are hashed with bcrypt. Sessions expire automatically and can be ended by signing out.

Data retention and deletion

We keep your account and tree data for as long as your family's account is active. You may delete individual people, photos or members at any time from within the app. To delete an entire family account and its data, email us at [email protected] from the administrator's address and we will remove it.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] and we will respond as quickly as we can.

Children

Wirasat accounts may only be created and operated by adults. Family trees may include information about children when added by an adult family member who is responsible for that information.

Changes to this policy

If we change this policy we will post the new version here and update the effective date above. Material changes will be announced to account administrators by email.

Contact

Questions about privacy? Email [email protected] or use our contact form.