Kutumb privacy policy
We collect no data. We share no data. Ever. There is no account, no analytics, no advertising, no tracking and no server of ours that your information could reach.
What stays on your device
Everything you enter, including names, dates, relationships, photographs, notes and messages, is stored only on your phone or computer. The developer has no way to see it, because the app never sends it to the developer. We run no servers that receive it.
What we collect
Nothing. The app contains no analytics, crash reporting, advertising, telemetry or third-party SDKs that collect data. We do not know who uses Kutumb, how often, or what is in anyone's tree.
What we share
Nothing. We have nothing to share, so we do not sell, rent, trade or disclose any information to anyone, for any reason, including advertising, research or legal requests: we hold no data to hand over.
Things you can choose to do, and what they involve
These happen only when you start them. Each moves information to someone you picked, never to us.
- Exporting or sharing a file. A
.ftreefile or a family book PDF goes wherever you send it, through the share sheet or a file you save. - Nearby sharing. Phones on the same Wi-Fi network exchange a tree directly with each other. Nothing passes through the internet or through us.
- Sync with family over the internet (off by default). If you turn this on and choose relay servers, the app connects to those relays and exchanges messages that are end-to-end encrypted on your phone before they leave it. A relay's operator can see that a message passed through and the network address it came from, but not its content. Relays are run by third parties, not by us, and have their own policies. Choose ones you trust, or leave sync off, in which case the app contacts no server at all. No relay is built in or used until you pick one.
Permissions
- Camera, only to scan a pairing code. Nothing is recorded or kept.
- Notifications, for birthday reminders and incoming messages, generated on your phone.
- Internet and network state, for nearby sharing and for sync, if you turn it on.
- Start at boot, to restore reminders after a restart.
Photographs and files are read only when you choose them, using the system picker.
Children
We collect nothing from anyone, including children. The app does not ask for an age and has no account to create.
Deleting your data
Delete a person or a whole tree inside the app, or uninstall it, and the data is gone from the device. There is nothing on our side to delete. Copies you exported or shared stay with whoever received them.
Changes to this policy
If the app ever changed in a way that affected this policy, the new policy would be published here before that release, with a new date. The promise at the top will not be weakened quietly.
Contact
Questions: open an issue. The source code is public, so every claim above can be checked.