Privacy Policy

1. Who is responsible

Sakdulur is operated by Fahmi Alfareza, an individual based in Indonesia, who is the data controller under Indonesia's Personal Data Protection Law No. 27 of 2022 (UU PDP).

For any question or request about personal data, contact fahmialfareza97@gmail.com.

2. What we collect

Your account:

• Name, email address, and username (for older accounts).
• Password — stored only as a bcrypt hash; we can never see your password.
• If you sign in with Google: your Google account ID, name and email as provided by Google. We never receive your Google password.
• Sign-in sessions: browser/device type, IP address, when they were created and last used.

Family tree content

What you and other members of a tree add about the people in it: names, nicknames, gender, birth and death dates and places, living status, photos, phone numbers, addresses, notes, and family relationships.

This often concerns living people who have no account, including children. Whoever adds it is responsible for being entitled to do so (see section 9).

Technical data

• Server logs (IP address, time, requested page, status code) for security and troubleshooting. Request bodies, passwords and tokens are not logged.
• Application error and performance data through a monitoring service.
• We use no advertising, third-party trackers, or behavioural profiling.

3. Why we use it (and on what basis)

• To provide the service you asked for: creating your account, storing your trees and showing them to the members you invite (performance of a contract — our Terms).
• To send necessary emails: address verification, password resets and invitations (performance of a contract).
• To keep the service secure: limiting sign-in attempts, detecting abuse, and backing up data (legitimate interests and security obligations).
• Tree content about other people is processed with consent and in the family's legitimate interest in recording its history; the people concerned may object (section 6).
• We do not sell personal data and do not use it for advertising or automated decisions with legal effect.

4. Who can see it

• Every tree is private. Only members invited by the tree's owner can open it.
• Roles decide access: owners manage everything, editors add and change people, viewers can only look. Owners can limit editors and viewers to specific branches.
• Members' email addresses are visible only to the tree's owners.
• Owners and editors can copy a branch (names, gender, dates, places and relationships — not photos, phone numbers, addresses or notes) into another tree they manage, for example a spouse's tree. The copy is then visible to that tree's members. In branch-shared trees, editors can only copy people shared with them.
• The operator accesses data only when needed for support you request, for security, or to meet a legal obligation.

5. Service providers (processors)

We use these providers, who process data on our behalf only to run the service:

• Railway — API servers and database.
• Cloudflare — the web app and database backup storage (R2).
• Cloudinary — photo storage and processing.
• Resend — transactional email delivery.
• New Relic — error and performance monitoring.
• Google — only if you choose Sign in with Google.
• Apple — only if you choose Sign in with Apple (iOS app).
• Google (Gemini) and Groq — only for trees whose owner turned on the AI assistant. When a member asks a question or asks for a change, their message and the names, dates, places, addresses and notes of the people involved are sent to one of these providers to write the answer or propose the change, which is saved only when the member presses Apply. Phone numbers and photos are not sent, and we do not store the conversation.

International transfers

These providers may store or process data outside Indonesia (for example in the United States, Europe or Asia). We choose providers that apply adequate protection and require them to keep data confidential and secure, in line with Article 56 of the UU PDP.

6. Your rights

Under the UU PDP (and the GDPR where it applies) you have the right to:

• Be informed about how your data is processed (this policy).
• Access your data and get a copy — download it from Account → Your data; tree owners can export a tree.
• Correct inaccurate data — directly in the app, or by asking the tree's owner.
• Delete data — delete your account from the Account page, or ask us to remove data about you from someone else's tree.
• Withdraw consent, object to processing, and ask us to restrict processing.
• Receive your data in a common machine-readable format (JSON).
• Complain to the personal data protection authority.

How to make a request

Email fahmialfareza97@gmail.com from the address on your account (or explain how the data relates to you if you have no account). We respond within 3 × 24 hours of receiving the request, as the UU PDP requires, and may ask you to verify your identity before acting.

7. How long we keep data

• Account data is kept while your account exists.
• Deleting your account immediately removes your account, sessions, memberships, and the trees only you belong to, with their content. If you are the only owner of a tree others use, you must hand ownership over first.
• People, families or trees deleted inside the app are hidden from all members, but the records are kept as history until the tree is deleted or you ask us by email to erase them permanently.
• Sign-in sessions end at most 30 days after last use; email links last 1 hour (password reset), 24 hours (verification) or 7 days (invitations).
• Daily database backups are kept for 14 days and weekly backups for 8 weeks; deleted data disappears from backups after that.
• Server logs and monitoring data are kept for a limited time, generally no longer than 90 days.

8. Security

All connections are encrypted (HTTPS). Passwords are hashed with bcrypt, sign-in tokens live in httpOnly cookies that page scripts cannot read, access is limited per tree and role, sign-in attempts are rate-limited, and backups are kept in encrypted storage.

No system is perfectly secure. If a personal data breach happens, we will notify you and the relevant authority within 3 × 24 hours as the UU PDP requires.

9. Other people's data and children

• Accounts are for people aged 13 or older. Users under 18 need permission from a parent or guardian.
• Children may appear in a tree as relatives added by adults. Only add a child's details if you are their parent or guardian or have their permission, as the UU PDP requires for children's data.
• For living relatives, ask before adding personal details such as photos, phone numbers or addresses.
• If you find data about yourself or your child in a tree and want it corrected or removed, contact fahmialfareza97@gmail.com; we will follow up with the tree's owner, or act directly where needed.

10. Cookies and local storage

We only use what the app needs to work:

• ft_access and ft_refresh — your sign-in session (httpOnly, up to 30 days).
• ft_oauth_binding — secures Sign in with Google (10 minutes).
• NEXT_LOCALE — your language choice (1 year).
• theme (browser local storage) — your light/dark preference.
• There are no analytics, tracking or advertising cookies, so no cookie consent banner is needed.

11. Changes to this policy

If we change this policy materially, we will tell you in the app or by email before the change takes effect. The effective date at the top always shows the current version.

12. Contact

Fahmi Alfareza — fahmialfareza97@gmail.com