KinWeave is a private family-tree service. This policy explains what we collect, how we use it, who we share it with, and the choices you have. Plain language, no surprises.
Your family tree is yours. It is private by default — never public, never searchable, never sold.
We only process the data we need to run the service you asked for: showing your tree, answering your history questions, and billing you if you upgrade.
You can export your whole tree as a GEDCOM file and delete your account at any time.
KinWeave (“we”, “us”) is the operator of kinweave.net and the data controller for the information described here.
Questions about privacy? Write to [email protected].
Account data: your email address and an encrypted password (managed by our authentication provider — we never see your plaintext password).
Family data you create or import: names, dates, places, relationships, occupations, notes, and any photos you upload or GEDCOM/JSON files you import from services such as MyHeritage, Ancestry or FamilySearch.
AI historian questions: the questions you type, plus the relevant slice of your own tree needed to answer them.
Billing data (only if you subscribe): handled entirely by Stripe. We store a subscription reference and status — never your card number.
Minimal technical data: standard server logs and the browser storage described under “Cookies” below. We do not run third-party advertising or cross-site tracking.
To provide the service: build and display your tree, run search, store your photos, and keep your edits and revision history.
To power the AI historian: when you ask a question, the question and a relevant portion of your tree are sent to our AI provider (Anthropic) to generate an answer. This content is processed to serve your request and is not used to train AI models.
To handle billing and support, secure the service, and comply with the law.
Supabase — authentication, database and photo storage. Your tree lives here, isolated per account by row-level security.
Cloudflare — hosting, content delivery and network security for kinweave.net.
Stripe — payment processing for subscriptions.
Anthropic — the AI model that answers your history questions.
That is the complete list. We do not sell your data or share it with advertisers, data brokers, or anyone else.
Every tree is isolated at the database level. Other signed-in users cannot see your tree.
Share links are read-only, scoped to a single tree, and expire. Anyone with a link can view but never edit, and you can revoke sharing at any time.
Your tree is never added to a public directory or search index.
Data is transmitted over encrypted connections (HTTPS/TLS) and stored on Supabase and Cloudflare infrastructure, which may process data in the United States and the European Union.
Access is protected by row-level security and least-privilege access controls. No system is perfectly secure, but we work to protect your data and to notify you if something goes wrong.
Access & export: download your entire tree as a GEDCOM file at any time.
Correction: edit any person or family. Every change is versioned and can be reverted from the revision history.
Deletion: delete individual records, a whole tree, or your entire account. Deleting your account removes your trees and photos from our active systems.
Depending on where you live (for example under GDPR or CCPA) you may have additional rights to access, portability, correction, restriction or erasure. Exercise them by writing to [email protected].
We use your browser’s local and session storage for essential things: keeping you signed in, remembering your language and light/dark theme, storing your AI chat history on your device, and holding a guest share code.
We do not use advertising cookies or third-party trackers.
A family tree naturally contains information about other people, living and deceased. You are responsible for having a reasonable basis to record information about living relatives, and for honoring any request from a living relative to correct or remove their details.
KinWeave is not directed to children, and accounts are intended for adults.
We keep your data while your account is active. When you delete a tree or your account, the associated data is removed from our active systems; routine backups are cycled out on a rolling basis.
If we make material changes we will update this page and the date below. Continued use after an update means you accept the revised policy.