FamDynasty Privacy Policy
Last updated: 23 October 2026 · Deutsch
FamDynasty is a family tree app. You can use it entirely on your own device, without an account. If you choose to, you can also sign in and subscribe to FamDynasty Cloud, which backs your tree up and keeps it in sync across your devices. This policy explains what happens to your data in both cases.
Who is responsible
Simon Mitev
m. Zaharidevo 601
4108, Plovdiv
Bulgaria
Email: privacy@famdynasty.com
We are the controller for the data FamDynasty Cloud processes on our servers (GDPR Art. 4(7)). We don't need, and haven't appointed, a data protection officer.
1. Using FamDynasty without an account
Everything you enter — people, relationships, dates, places, stories and photos — is stored in a database inside the app's private storage on your device. It is not sent to us. Deleting the app deletes it.
- Photos: when you add a photo, the app copies the picture you pick into its own storage. It never reads the rest of your photo library.
- GEDCOM import: an imported file is read and processed on your device only.
- Map view is the one screen that uses the internet without an account. To show places on a map, the place names you entered for births and deaths are sent to your device's geocoding service (Apple's on iPhone and iPad, Google's on Android), and map tiles are loaded from OpenStreetMap's servers, which see your IP address and which map area you looked at. Coordinates are kept in memory only while the app runs. If you don't open Map view, none of this happens.
2. FamDynasty Cloud (optional, with a subscription)
Signing in
You sign in with Apple or Google. Sign-in is handled by Firebase Authentication (Google). It receives your email address and a user id from Apple or Google — with Google also the name and the link to the profile picture of your Google account — and records when you created the account and last signed in. With "Hide My Email" Apple gives us a relay address instead of your real one. We never see your Apple or Google password.
What we store
- Your account: email address, the Firebase user id, an internal account id, and when the account was created; with Google sign-in, Firebase also keeps your Google account's name and profile picture link.
- Your family trees: everything you put in a synced tree — names, dates and places of birth and death, whether someone is living, relationships, stories, galleries — as well as the time and device of every change, so your devices can merge edits.
- Photos in your synced trees, stored once per distinct file and identified by a checksum (SHA-256). Thumbnails are produced on the fly and not stored.
- Your devices: a random device id generated by the app, and whether it is an iPhone or an Android phone.
- Your subscription: which plan, its status and when it renews or ends, which tree it covers, and the purchase notifications we receive about it (store transaction id, product, price, country, timestamps).
- Server logs: for each request, the time, your IP address, the address requested and the response, for operating and securing the service. These logs are deleted after 30 days.
A family tree is mostly information about other people — your relatives. Only add what you are comfortable keeping in the cloud, and be especially careful with details of people who are still alive.
Where it is stored, and who processes it for us
| Service | What it does | Where |
|---|---|---|
| Google Cloud (Cloud Run, Cloud SQL, Cloud Logging), Google Ireland Ltd. | runs our server and its database, keeps the server logs | Frankfurt, Germany |
| Firebase Authentication, Google | sign-in | Google's global infrastructure, which may include the USA |
| Cloudflare R2, Cloudflare, Inc. | stores the photos | EU jurisdiction (data kept in the EU) |
| RevenueCat, Inc. | processes subscription purchases and tells our server about them | USA |
They process data only on our instructions under data processing agreements. Where data goes to the USA, it is protected by the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.
Payments are made through Apple's App Store or Google Play. Apple and Google process your payment details under their own privacy policies; we never receive them. RevenueCat receives the purchase receipt from the store, a random id for the app installation, your device model, operating system, country and IP address, and our account id for you, so it can link the subscription to your account.
Why (legal basis)
- To provide FamDynasty Cloud — sign-in, backup, sync and your subscription: performance of our contract with you (GDPR Art. 6(1)(b)).
- Server logs, to run the service securely and investigate faults: our legitimate interest in a working and secure service (Art. 6(1)(f)).
- Keeping purchase records where tax and commercial law require it (Art. 6(1)(c)).
How long we keep it
- While you have an account, we keep your cloud data so it can be synced and restored. If your subscription ends, syncing stops; the data stays until you delete your account.
- When you delete your account (in the app: Me → FamDynasty Cloud → Delete account), we immediately delete your account, your trees, your photos (unless another account uses the very same file), your devices, your subscription records and your sign-in. Our database backups still contain the data for up to 14 days, after which it is gone everywhere.
- Server logs: 30 days.
Deleting your account does not cancel a subscription with Apple or Google. Cancel it in your device's subscription settings, or it keeps renewing.
Deleting your account without the app
If you no longer have the app, email us at privacy@famdynasty.com from the address you signed in with (or tell us which Apple or Google account you used) and ask us to delete your FamDynasty Cloud account. We delete it as described above, within 30 days at the latest, and confirm by email.
Security
All connections are encrypted (HTTPS). Only you can read your trees; every request is checked against your sign-in. Photos are fetched through signed links that expire within minutes. Our providers encrypt stored data.
Analytics, advertising and tracking
None. FamDynasty contains no analytics, advertising or crash-reporting service, doesn't use the advertising identifier (IDFA/AAID), and doesn't track you across apps or websites.
Children
FamDynasty is not directed at children, and FamDynasty Cloud is intended for people aged 16 and over.
Your rights
Under the GDPR you can ask us for access to your data (Art. 15), its correction (Art. 16) or deletion (Art. 17), restriction of processing (Art. 18), a copy in a machine-readable format (Art. 20), and you can object to processing based on our legitimate interest (Art. 21). Write to the email address above. You can delete your account yourself in the app at any time. You also have the right to complain to a data protection supervisory authority (Art. 77): the one responsible for us is Bulgaria's Commission for Personal Data Protection (Комисия за защита на личните данни, cpdp.bg), and you can also turn to the authority in the country where you live.
Changes
If FamDynasty starts processing data in a new way — for example when sharing a tree with relatives arrives — we will update this policy before that version is released and change the date at the top.