Privacy Policy

1. Purpose of this policy

At Mon arbre, protecting your personal data is a priority. This policy explains how we process your personal data when you use https://www.mon-arbre.com/ (the "Site") and the services it offers (the "Services").

We process your personal data in accordance with the French Data Protection Act of 6 January 1978 ("Loi Informatique et Libertés") and Regulation (EU) 2016/679 (the "GDPR").

2. What is personal data?

Personal data is any information that identifies a person, such as a name, an email address or an IP address. This includes information about relatives you record in your family tree when they can be identified.

3. Who is the data controller?

Mon arbre is the controller of the personal data processed through the Site. For any question about your data, contact us at:

4. What personal data do we collect?

• Account data: email address, display name, profile photo, preferred language, and the sign-in method you use.
• Family tree data: names, gender, birth and death dates and places, city and map location, relationships, photos, and the history of changes made to a tree.
• Notification preferences: whether you want birthday reminders, new-member alerts, or the weekly digest.
• Connection data: IP address and technical logs generated when you use the Site.
• Support data: the content of messages you send us.

Your email address is required to create an account. Other information is optional, but some features, such as the map, depend on it.

If you sign in with Google, we receive your name, email address and profile photo from Google. By choosing this option, you agree to this data being shared with us.

Relatives who do not use Mon arbre. Your tree may include people who have no account. You provide their information, so make sure you have the right to share it. We process it only to provide the Services. If you appear in someone's tree and want your information corrected or removed, contact us at the address above.

5. On what legal basis do we use your data?

• Contract: to create and manage your account and provide the features you use, such as trees, members, photos, the map and sharing.
• Legitimate interest: to keep the Site secure, prevent abuse, answer your questions, and measure audience in aggregate.
• Consent: to send the optional notification emails you have chosen. You can turn them off at any time from Notifications in your account menu.
• Legal obligation: when we must respond to a lawful request from a public authority or court.

6. For what purposes do we use your data?

• Manage your account, sign-in and password resets
• Provide family tree features, including sharing and invitations
• Send transactional emails, such as sign-in and password-reset emails
• Send the notification emails you opted in to
• Search for places and display the map
• Respond to your support requests
• Keep the Site secure and prevent abuse
• Measure audience in aggregate
• Comply with our legal obligations

7. Who receives your data?

We share personal data only with the following service providers, and only to the extent they need it to provide their service:

Other users: people you invite to a tree can see its content, as its sharing settings allow. Anyone who has an invitation or share link can use it to access the tree it points to.

Public authorities and courts receive data only when the law requires it. We never sell, rent or exchange your personal data.

8. How long do we keep your personal data?

• Account and family tree data: kept while your account is active. When you ask us to delete your account, we delete it without undue delay, unless the law requires us to keep it.
• Backups: deleted data may remain in backups for a limited time before they are overwritten.
• Connection logs: kept only as long as needed for security and troubleshooting.
• Support correspondence: kept only as long as needed to handle your request.

9. How do we keep your data secure?

We and our providers use appropriate technical and organisational measures to protect the security, integrity and confidentiality of your personal data. No online service is completely secure, so use a strong password and keep your sign-in details private.

10. Where is your data hosted?

Your data is stored on Supabase servers in Ireland (AWS region eu-west-1). Some providers, such as Vercel and Resend, are based in the United States and may process data there. Where this happens, transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as set out in each provider's data processing agreement.

11. Cookies and similar technologies

Mon arbre does not use advertising or social-media trackers. We use browser storage for what the app needs to work:

• Your sign-in session
• Your language and theme preferences
• Display preferences for the family tree view

This storage is strictly necessary to provide the Services. We also use Vercel Analytics to measure page views in aggregate.

12. What are your rights?

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data.
• Restriction: ask us to limit how we process your data in certain cases.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on our legitimate interest.
• Withdraw consent: at any time, for processing based on consent, without affecting earlier processing.
• Complaint: lodge a complaint with a supervisory authority. In France, this is the CNIL (cnil.fr).

13. How do you exercise your rights?

Write to us at the contact address in section 3. We may ask for information needed to confirm your identity. We will reply within one month, as the GDPR requires. For complex requests we may extend this period, and we will tell you if we do.

14. Changes to this policy

We may update this policy. We will notify you of material changes by email or in the application.