Privacy Policy

Last updated: April 2026

Vanshdhara is a mobile application operated by Xyracel Services Limited ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and safeguard your information when you use the Vanshdhara app and website (together, the "Service").

1. Who We Are

Vanshdhara is a family tree and genealogy application, the flagship product of Xyracel Services Limited, a company registered in England and Wales. We are the "data controller" responsible for your personal information.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, and phone number (if using phone login) when you create an account.
• Age Verification: Date of birth, collected only when you create your first family tree (required to verify you are at least 13 years old).
• Family Tree Data: Names, dates (birth, death, marriage), relationships, places, life events, photos, notes, and other information you add about family members.
• Cultural Information: Optional details such as Gotra, Nakshatra, Kula, and place of origin that you choose to record.
• Family Member Contact Details: Tree owners may optionally record an email address or phone number for individual family members to enable invitations and family updates. These details are stored encrypted, are never visible to other users, and are used solely for tree management and invitation purposes. Family members whose details are recorded may request their removal by contacting us. You should only record contact details for relatives where you have a legitimate reason to do so.
• Communications: Messages and feedback you send to our support team.

Information Collected Automatically

• Device Information: Device type, operating system, app version, and unique device identifiers.
• Usage Data: Features used, session duration, and error logs to help us improve the app.
• General Location: Country or region based on your IP address. We do not collect precise GPS location.

Payment Information

Subscription payments are processed through Google Play or Apple App Store. We receive transaction references and subscription status but never your full payment card details.

3. Device Permissions

Our app may request the following permissions, all of which are optional:

• Camera: To take photos directly in the app. You can still upload existing photos without this permission.
• Photo Library: To select existing photos for upload. We only access photos you specifically choose.
• Biometric (Face ID / Fingerprint): For quick, secure login. Your biometric data never leaves your device.
• Push Notifications: To notify you about co-ownership requests, upcoming family events, and account updates.

You can manage these permissions at any time in your device settings.

4. How We Use Your Information

We use your information to:

• Provide and maintain the Service, including creating and syncing your family tree
• Process subscriptions and payments
• Enable family collaboration through co-ownership features
• Send important account and service updates
• Respond to support requests
• Improve the app and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

5. Privacy Controls

Your family tree data is private by default. You control who sees your information:

• Private (Default): Only you and approved co-owners can view profiles. Other users cannot find this information in search results.
• Public (Optional): Limited information (name, birth year range, general location) may appear in search results to help relatives find you. Full details remain visible only to you and co-owners.

Profiles of people under 18 are automatically set to Private and cannot be made Public.

Co-Ownership

You can invite eligible family members (your spouse or children) as co-owners to collaborate on your family tree. Co-owners can view and edit shared content. You can revoke co-ownership at any time from the app settings.

6. Information Sharing

We share your information only in these circumstances:

• With Your Consent: When you grant co-ownership or use community search features.
• Service Providers: With trusted third parties who help us operate the Service (cloud hosting, analytics, payment processing), under strict contractual obligations.
• Legal Requirements: When required by law, court order, or to protect our legal rights. We will notify you if legally permitted.
• Business Transfers: If Xyracel Services Limited is acquired or merged, your data may transfer to the new owner under this Privacy Policy.

7. Data Storage and Transfers

Your data is stored on secure servers operated by our cloud providers. Xyracel Services Limited is registered in England and Wales, and data may be stored in the United Kingdom or on servers operated by our cloud infrastructure partners. If data is transferred internationally, we use appropriate safeguards including Standard Contractual Clauses and encryption.

8. Data Retention

• Active Accounts: We retain your data as long as your account is active.
• Account Deletion: When you request account deletion, your account enters a 30-day cancellation window during which you can change your mind. After this period, your account and personal data are permanently deleted. You can choose whether family members you created remain in other connected trees or are also removed.
• Accounts With Family Tree Data: We will never automatically delete an account that contains family tree data. Your family's lineage records belong to your whole family — not just you. If your account has been inactive for 24 months, we will send a notification to remind you it exists, but your data will remain safe indefinitely until you choose to delete it yourself.
• Unverified Accounts (No Tree Data): Accounts that remain unverified with no family tree data for 90 days are scheduled for deletion. If an unverified account contains family tree data, it will not be automatically deleted.
• Inactive Accounts (No Tree Data): Accounts with no activity for 24 months and no family tree data will receive a notification. If no action is taken within 30 days of that notice, the account will be scheduled for deletion.
• Legal Requirements: Some data may be retained longer where required for legal compliance or dispute resolution.

9. Data Security

We implement appropriate technical and organisational measures to protect your information:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Field-level encryption for sensitive personal information (names, email addresses, phone numbers, cultural identifiers)
• Secure password hashing (bcrypt)
• Secure on-device storage for biometric credentials
• Regular security assessments
• Access controls limiting employee access to data

10. Children's Privacy

Account Creation

Users of any age may create an account. Account creation requires only minimal information: name and email address or phone number.

Family Tree Features

You must be at least 13 years old to create or manage a family tree. We collect date of birth only when you attempt to create your first family tree, solely to verify you meet this age requirement. This complies with:

• Children's Online Privacy Protection Act (COPPA) — United States
• General Data Protection Regulation (GDPR) — European Union
• Digital Personal Data Protection Act, 2023 (DPDP Act) — India

Profile Visibility for Minors

Your profile will not appear in search results or be visible to other users unless:

• You are at least 13 years old; AND
• You have explicitly made your profile public in privacy settings

Profiles of people under 18 are automatically set to Private and cannot be made Public.

Parental Rights

If you are a parent or guardian and believe your child under 13 has provided personal information beyond what is permitted, please contact us immediately (see contact details below). We will promptly delete such information.

If you are between 13 and 17, we recommend having a parent or guardian review this Privacy Policy with you.

11. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data (Settings → Data and Privacy → Export Data).
• Correction: Update inaccurate information directly in the app or contact us.
• Deletion: Delete your account and data (Settings → Data and Privacy → Delete My Account).
• Portability: Export your family tree in GEDCOM, PDF, or JSON format (available to all users).
• Objection: Object to certain processing, such as marketing communications.
• Withdraw Consent: Withdraw consent for optional processing (e.g., marketing emails, push notifications).

To exercise your rights: Use the in-app settings or contact us using the details at the bottom of this page. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to your local data protection authority. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

Regional Rights

• UK/EU (GDPR/UK GDPR): You have rights to access, rectification, erasure, restriction, portability, and objection.
• California (CCPA/CPRA): You have rights to know, delete, correct, and non-discrimination. We do not sell personal information.
• India (DPDP Act): You have rights to access, correction, erasure, and grievance redressal.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects. Automation is used only for helpful features like search ranking and duplicate detection, which you control.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For minor changes, we will update the "Last updated" date. For significant changes, we will notify you by email or push notification and give you 30 days to review before changes take effect.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Vanshdhara — Xyracel Services Limited
Email: [email protected]
Location: Staines, United Kingdom