Privacy Policy

Who we are

myancestors.co processes personal data as the data controller.

Data we collect

• Email address (to create your account and send receipts).
• Photo you upload (to generate your report).
• Onboarding answers (birth year, country, preferences).
• Billing details processed by Stripe — we never see your card number.
• Usage analytics (aggregated, non-identifying).

How we use it

To generate your heritage report, operate the service, process payments, and send service-related emails. Legal bases (GDPR): contract performance and legitimate interest.

Sub-processors

• Google (Gemini) — AI analysis of your photo (EU / US).
• Neon (Postgres) — database hosting (EU / US).
• Stripe — payment processing.
• Vercel — application hosting.

Retention

Photos are kept while your account is active and deleted on request. Reports are kept for the duration of your subscription + 30 days.

Your rights

Access, rectification, erasure, portability, objection. Contact privacy@myancestors.co.

Children

We do not knowingly collect data from users under 16.

Security

Encryption in transit and at rest, least-privilege access, audited sub-processors.