Privacy
Data we collect
Plain-language summary of data types Olulyo handles. Use this alongside the full Privacy policy when filling app-store Data Safety forms. Effective 15 October 2026.
Collected and required for the core product
| Type | Examples | Why |
|---|---|---|
| Account info | Username, role | Sign-in and permissions |
| Personal info in the tree | Names, dates, places, relationships | Family lineage records |
| Photos | Portraits, gallery images | Family gallery and profiles |
| App activity | Pages you open while signed in | Provide the product and basic security logs |
| Device or other IDs | Session tokens; IP in server logs | Keep you signed in; protect the service |
Optional / situational
- Contact email or phone — if your administrator stores them on your user profile or onboarding form.
- Event RSVP data — if your family uses events.
- Clan surname catalog — traditional names; may sync with the hub when an admin chooses Sync.
What we do not do (current product)
- We do not sell personal data.
- We do not use your family tree for third-party advertising.
- The Android app does not currently require location, contacts, SMS, or microphone access.
Encryption and deletion
- Data in transit uses HTTPS.
- Passwords are stored hashed on family sites.
- Deletion: Delete your account.