Privacy Policy

Last updated: January 2025

Vanshdhara ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and website (together, the "Service").

1. Who We Are

Vanshdhara is a family tree and genealogy application operated by Xyracel Services Limited, a UK-based company. We are the "data controller" responsible for your personal information.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, and phone number (if using phone login) when you create an account.
• Age Verification: Date of birth, collected only when you create your first family tree (required to verify you are at least 13 years old).
• Family Tree Data: Names, dates (birth, death, marriage), relationships, places, life events, photos, notes, and other information you add about family members.
• Cultural Information: Optional details such as Gotra, Nakshatra, Kula, and place of origin that you choose to record.
• Communications: Messages and feedback you send to our support team.

Information Collected Automatically

• Device Information: Device type, operating system, app version, and unique device identifiers.
• Usage Data: Features used, session duration, and error logs to help us improve the app.
• General Location: Country or region based on your IP address. We do not collect precise GPS location.

Payment Information

Subscription payments are processed through Google Play or Apple App Store. We receive transaction references and subscription status but never your full payment card details.

3. Device Permissions

Our app may request the following permissions, all of which are optional:

• Camera: To take photos directly in the app. You can still upload existing photos without this permission.
• Photo Library: To select existing photos for upload. We only access photos you specifically choose.
• Biometric (Face ID/Fingerprint): For quick, secure login. Your biometric data never leaves your device.
• Push Notifications: To notify you about co-ownership requests, family matches, and account updates.

You can manage these permissions anytime in your device settings.

4. How We Use Your Information

We use your information to:

• Provide and maintain the Service, including creating and syncing your family tree
• Process subscriptions and payments
• Enable family collaboration through co-ownership features
• Send important account and service updates
• Respond to support requests
• Improve the app and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

5. Privacy Controls

Your family tree data is private by default. You control who sees your information:

• Private (Default): Only you and approved co-owners can view profiles. Other users cannot see this information in search results.
• Public (Optional): Limited information (name, birth year range, general location) may appear in search results to help relatives find you. Full details remain visible only to you and co-owners.

Profiles of people under 18 are automatically set to Private and cannot be made Public.

Co-Ownership

You can invite up to 4 family members as co-owners to collaborate on your family tree. Co-owners can view and edit shared content. You can revoke co-ownership at any time.

6. Information Sharing

We share your information only in these circumstances:

• With Your Consent: When you grant co-ownership or use community search features.
• Service Providers: With trusted third parties who help us operate the Service (cloud hosting, analytics, payment processing), under strict contractual obligations.
• Legal Requirements: When required by law, court order, or to protect our legal rights. We will notify you if legally permitted.
• Business Transfers: If Xyracel Services Limited is acquired or merged, your data may transfer to the new owner under this Privacy Policy.

7. Data Storage and Transfers

Your data is stored on servers located in India. If data is transferred internationally (for example, to service providers), we use appropriate safeguards including Standard Contractual Clauses and encryption.

8. Data Retention

• Active Accounts: We retain your data as long as your account is active.
• Account Deletion: When you delete your account, personal data is permanently deleted within 30 days, and backups within 90 days. You can choose whether family members you created remain accessible to other connected trees.
• Inactive Accounts: Accounts inactive for 3 years may be deleted after notification.
• Legal Requirements: Some data may be retained longer for legal compliance or dispute resolution.

9. Data Security

We implement appropriate technical and organisational measures to protect your information:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure password hashing (bcrypt)
• Secure on-device storage for biometric credentials
• Regular security assessments
• Access controls limiting employee access to data

No system is completely secure. If a data breach affects you, we will notify you promptly and explain what steps we are taking.

10. Children's Privacy

Account Creation

Users of any age may create an account. Account creation requires only minimal information: name and email address or phone number.

Family Tree Features

You must be at least 13 years old to create or manage a family tree. We collect date of birth only when you attempt to create your first family tree, solely to verify you meet this age requirement. This complies with:

• Children's Online Privacy Protection Act (COPPA) — United States
• General Data Protection Regulation (GDPR) — European Union
• Digital Personal Data Protection Act, 2023 (DPDP Act) — India

Profile Visibility for Minors

Your profile will not appear in search results or be visible to other users unless:

• You are at least 13 years old; AND
• You have explicitly made your profile public in privacy settings

Profiles of people under 18 are automatically set to Private and cannot be made Public.

Parental Rights

If you are a parent or guardian and believe your child under 13 has provided personal information beyond what is permitted, please contact us immediately at data-privacy@vanshdhara.com. We will promptly delete such information.

If you are between 13 and 17, we recommend having a parent or guardian review this Privacy Policy with you.

11. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data (Settings → Data & Privacy → Export Data).
• Correction: Update inaccurate information directly in the app or contact us.
• Deletion: Delete your account and data (Settings → Data & Privacy → Delete Account).
• Portability: Export your family tree in GEDCOM, PDF, or JSON format (Premium features).
• Objection: Object to certain processing, such as marketing communications.
• Withdraw Consent: Withdraw consent for optional processing (e.g., marketing emails, push notifications).

To exercise your rights: Use the in-app settings or email data-privacy@vanshdhara.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to your local data protection authority.

Regional Rights

• UK/EU (GDPR): You have rights to access, rectification, erasure, restriction, portability, and objection.
• California (CCPA/CPRA): You have rights to know, delete, correct, and non-discrimination. We do not sell personal information.
• India (DPDP Act): You have rights to access, correction, erasure, and grievance redressal.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects. Automation is used only for helpful features like search ranking and duplicate detection, which you control.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For minor changes, we will update the "Last updated" date. For significant changes, we will notify you by email or push notification and give you 30 days to review before changes take effect.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Vanshdhara (Xyracel Services Limited)
Email: data-privacy@vanshdhara.com
Location: Staines, United Kingdom