Privacy Policy

This policy covers the private family tree at videetnimsarkar.com/family. It is run by Videet Nimsarkar as a personal project for one family. It is not a commercial service, it has no users beyond people who have been individually invited, and nothing on it is sold, shared or advertised against.

The rest of videetnimsarkar.com is a public portfolio. It sets no cookies, runs no analytics, and collects nothing about you.

Who is responsible

Videet Nimsarkar. For anything in this policy — including a request to see or delete your information — contact him directly. Under India's Digital Personal Data Protection Act 2023 he is the data fiduciary for this application.

What is collected

When you sign in. Your name, email address and profile picture, from Google or from the email address you verify. Only email addresses that have been added to an invitation list can create an account at all.

Family tree information. Names, dates, places, occupations, relationships, contact details and photographs — entered by family members about themselves and about their relatives, living and dead.

Health information, only if you choose. Blood group, allergies, hereditary conditions, medications, procedures and related notes or documents. This is optional, off by default, and nothing is stored until you have given explicit consent and been shown the exact wording you are agreeing to.

No government identifiers are collected — no Aadhaar, PAN or passport numbers. There is deliberately nowhere to put them.

Who can see it

Not everyone in the family sees everything. Access is decided by the database on every single request, not by hiding things in the interface:

• You see your own relatives — ancestors, descendants, siblings, cousins — and the people married into that line.
• You see your spouse's parents, brothers and sisters, but not their wider family. Their grandparents, aunts and cousins remain theirs.
• Health information marked as family history — hereditary conditions, blood group, allergies — is visible to blood relatives, because that is the reason a family keeps it.
• All other health information is visible only to you, and to anyone you have explicitly granted access. Administrators are deliberately excluded: running the family tree does not entitle anyone to read your medical history.
• Every read of health information is logged, and you can see who has read yours.

Your rights

You can see everything held about you, correct it, export it, or have it deleted. Health records can be erased by you at any time and the deletion is permanent — the rows are removed, not hidden. Withdrawing consent is always available and does not require a reason.

If you are in the EU or UK, health information is special-category data under Article 9 of the GDPR and is processed only on the basis of your explicit consent.

Where it is stored

On Supabase (PostgreSQL) and Vercel. Data is encrypted in transit. Access is restricted at the database level rather than by the application, so a bug in the interface cannot expose information the database would refuse to release.

Nothing is shared with any third party. There is no advertising, no analytics, no tracking, and no automated decision-making of any kind.

How long it is kept

Family tree entries are kept indefinitely — that is the point of a family record, and it includes information about people who have died. Anything about you personally is deleted on request. Access logs for health information are kept so that you can audit them.

Children

Children appear in the tree as family members, entered by their parents. No child holds an account, and no health information is recorded for a child except by a parent or guardian.

Changes

If this policy changes in a way that affects how your information is handled, everyone with an account will be told directly rather than left to notice a new date at the top of a page.