Privacy Policy

Last Updated: February 15, 2026

1. Introduction & Who We Are

Welcome to Genogramo ("we," "our," or "us"). We provide a Software-as-a-Service (SaaS) platform for creating professional genograms at https://www.genogramo.com (the "Service"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our application. By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

2. Personal Data We Collect

We collect information that you voluntarily provide to us when you register on the Service or communicate with us.

Account Information

  • Identification: Full Name, Email Address, Username.
  • Security: Hashed passwords (we do not store your actual password).
  • Subscription Data: Subscription plan type, status, and validity dates.

Usage & Technical Data

  • Device Information: Internet Protocol (IP) address, browser type, and operating system (collected automatically for security and rate limiting).
  • Log Data: Login times, last activity timestamps, and session identifiers.

Important: Genogram Data

We do NOT store your genogram data on our servers. All family maps, medical history, and emotional usage data you create within the application are encrypted and stored locally on your device (Client-Side Storage). We do not have access to, nor do we collect, the sensitive family data you input into the tool.

3. How We Use Data

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

  • To provide the Service: Managing your account, authentication, and subscription access.
  • To ensure security: Detecting and preventing fraudulent activity, rate limiting (preventing brute force attacks), and maintaining the integrity of our Service.
  • To improve our Service: Analysing usage trends via Google Analytics to better understand how users interact with our website.
  • To communicate with you: Sending administrative information, such as updates, security alerts, and support responses.

4. Sharing & Processors

We do not sell your personal data. We only share information with the following third-party service providers (Processors) to specific purposes:

  • Secure Payment Processors: We use Stripe to manage subscriptions. We do not store your credit card information on our servers.
  • Google Analytics (Analytics): We use Google Analytics to collect aggregated, anonymous data about website traffic and usage patterns.

5. International Transfers

Our servers and third-party service providers may be located in various jurisdictions, including the United States, European Union, and United Kingdom. By using the Service, you acknowledge that your information may be transferred to, stored, and processed in these facilities. We enable appropriate safeguards to protect your personal data during such transfers.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide you the Service. We may also retain usage logs (like IP addresses) for a shorter period for security auditing purposes.

Account Deletion & Trial Abuse Prevention: You can delete your account at any time from the application settings. While this action permanently removes your ability to log in and deletes your personal profile from our active database, we retain a secure, minimisation record of your account identity (such as an email hash) solely to prevent the creation of multiple accounts for the purpose of bypassing free trial limitations. This record is used strictly for fraud prevention and ensuring fair usage of our trial periods.

7. Your Rights (GDPR, UK GDPR, CCPA)

Depending on your location (e.g., EU, UK, California), you may have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can update your account details directly within the application or ask us to correct inaccruacies.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data, subject to certain legal exceptions.
  • Right to Restrict Processing: You can ask us to limit how we use your data.

To exercise these rights, please contact us at privacy@genogramo.com.

8. Cookies & Analytics

We use cookies to maintain your session (authentication) and to analyse site traffic.

  • Essential Cookies: Required for you to log in and use the secure areas of the application.
  • Analytics Cookies: Used by Google Analytics to help us improve user experience.

You can control cookie preferences through your browser settings.

9. Security Measures

We implement technical and organisational security measures to protect your personal data, including:

  • Hashing passwords using strong algorithms.
  • Using HTTPS/TLS encryption for data in transit.
  • Rate limiting login attempts to prevent brute-force attacks.
  • Client-side encryption for your genogram data.

10. Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and will be effective as soon as it is accessible.

12. Contact Information

If you have questions or comments about this policy, you may email us at privacy@genogramo.com.