Privacy

Your tree

The names, surnames, dates and places you enter or import are stored only in your browser’s storage (IndexedDB), encrypted with a key created on your device that can’t be extracted. They are never sent to a server of ours: we have none.

GEDCOM files are read on your own device. Backups and exports are files you download yourself.

If you add a photo for the images you share, it is cropped and re-encoded on your device (so no hidden data such as location survives) and stored encrypted with your tree. It only appears on images you choose to share.

INE data

To show how common your surnames are, the app downloads public INE files from this same site, grouped by first letter (all surnames starting with G, say), so the server never learns which surname you look up.

Google Drive sync (optional)

If you turn it on in Settings, the app saves an encrypted copy of your trees in your own Google Drive, in a hidden folder only this app can see (Google’s drive.appdata permission: it can’t see any of your other files). It is compressed and encrypted on your device (AES-256) with a random sync key before it leaves, so Google stores only unreadable data; without the key nobody can open it, not even Google or us. Each device keeps the key encrypted like your data.

To add another device, the app shows the key as a QR code and a recovery code. The QR opens the app with the key in the part of the address after “#”, which browsers never send to any server; the app reads it on arrival, keeps it only for that browser tab until you connect, and removes it from the address bar.

Google gives the app a short-lived access token (one hour) that stays in your browser’s memory; we never receive it. Your browser’s local storage notes, unencrypted, whether Drive is connected and when it last synced. Disconnect any time in Settings, and delete the Drive copy in Google Drive → Settings → Manage apps.

This app’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. The app uses Drive only to store and read back your own encrypted copy: no ads, no AI training and no sharing with anyone.

Hosting

Cloudflare hosts the site. Like any web host it processes your IP address and technical details of each request to deliver the pages and protect them from attacks (https://www.cloudflare.com/privacypolicy/). It doesn’t see your tree: the app sends it nothing.

Visit statistics

We may use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.

Advertising

The site may show Google AdSense ads, which use cookies or identifiers to serve and measure ads and, if you allow it, to personalise them. Google asks for your consent where the law requires it. More at https://policies.google.com/technologies/ads.

The Android app

The Android app (Google Play) is the same app, kept on your phone: your tree stays encrypted on the device, just like on the web. What changes:

Ads come from Google AdMob, which may use your device’s advertising ID and, if you allow it, show personalised ads. In the European Economic Area, the UK and Switzerland, Google’s consent message asks first; change your choice any time in Settings → Ad privacy choices. You can reset or delete the advertising ID in your phone’s settings (Google → Ads). More at https://policies.google.com/technologies/ads.

Images, backups and GEDCOM exports you save go to your phone’s Documents folder; when you share, they are handed to the app you pick. The camera is only used if you choose “Take a photo”.

Drive sync works as on the web, except that you sign in with your phone’s own Google account screen (Google Play services) instead of a browser window. It asks for the same drive.appdata permission, and the access token stays in the app’s memory.

Your rights

We don’t keep your data, so there is nothing for us to look up, correct or delete: you control it all in your browser, and “Delete everything” in Settings removes it (a Drive copy, if you have one, is deleted from Google Drive). Questions: write to us through nubuza.com.