Privacy Policy

Your account.When you sign up we store your email address, a display name, an optional profile photo, and the short note you write about how you're related to the family (used by a moderator to review your request to join).

Family tree content.Approved members contribute the family record itself: names and nicknames, birth and death dates (sometimes approximate), marriages and other relationships, godparents and close family friends, notes and stories, and photos or documents. This information is about family members — including relatives who don't have accounts — and is added by their own family.

Activity records. We keep records of submissions, moderation decisions, and other privileged actions (an audit log), plus in-app notifications and an activity feed of approved changes.

If you choose "Continue with Google," we receive only your basic Google profile: your name, email address, and profile picture. This is used solely to create and sign in to your Puno account. We do not request or receive access to your Gmail, Drive, contacts, or any other Google data, and we never post to or act on your Google account.

Only to run the family tree: to review who joins, to show the tree and its stories to approved family members, to let moderators review proposed changes, and to send notifications about things like account or submission decisions. That's it. We do not use your information for advertising, profiling, or anything unrelated to the family tree.

Data lives in Supabase (a hosted Postgres database and private file storage), and the site runs on Vercel. Photos and documents are kept in a private storage bucket and are only served to signed-in, approved members through short-lived signed links — there are no public image URLs.

Approved family members. The tree is visible only to accounts a family moderator has approved. Visitors, pending accounts, and suspended accounts can see nothing.

Moderators and admins. A small number of trusted family members additionally see pending join requests, proposed changes awaiting review, and the audit log, so they can keep the tree accurate and safe.

Share links. A member may create a revocable link that shows a limited slice of their own branch to someone without an account (for example, in-laws). Shared views deliberately show less: living people appear with minimal detail, and everyone outside the shared branch is anonymized or omitted. Share links can be revoked at any time and are not indexed by search engines.

We use only the essential cookies needed to keep you signed in (set by Supabase Auth). There are no advertising cookies and no third-party analytics.

A family tree naturally includes minors and relatives who don't use the site — their names, dates, and relationships are family facts entered by adult relatives. Accounts themselves are for adults. If you are (or are the parent or guardian of) someone in the tree and want details corrected, minimized, or removed, ask any family moderator and it will be honored.

You can delete your own account from Settings; this removes your account but not the family record itself, which belongs to the family. Separately, any living person can ask a moderator to correct or remove their personal details from the tree — such requests are honored, though a minimal placeholder may remain so the structure of the family stays intact. Routine backups are kept privately so the family record isn't lost.

We never sell, rent, or trade your information. We don't run ads, we don't use third-party analytics, and we don't share family data with anyone outside the mechanisms described above.

If this policy changes, we'll update this page and its effective date, and let members know in the app about anything significant.

Questions or requests about your information? If you have an account, message a family moderator through the app. Otherwise, contact the site administrator — the family member who invited you can put you in touch.