Privacy Policy
Last updated: March 2026
Short version: Sulala stores your family data securely in the cloud so you can share it with relatives. We do not sell your data, run ads, or share your information with third parties. Your family's information is private and only accessible to members of your family group.
01
What We Collect
To provide the App's features, we collect and store the following:
- Account information — email address and password (used for authentication via Supabase Auth)
- Family data — names, dates of birth, dates of death, gender, and family relationships you enter into the App
- Invite codes — 8-character codes generated by family admins to add members
- Device information — basic device and session data collected automatically by Supabase for security and authentication purposes
We do not collect location data, contacts, photos, or any information beyond what you explicitly enter.
02
How We Use Your Data
Your data is used solely to operate the App:
- Display your family tree and compute dynamic relationships between members
- Maintain your personal Dua list of deceased family members
- Allow family members you invite to view and contribute to the shared tree
- Enable family discovery — connecting families that share names in their trees
We do not use your data for advertising, analytics, or any purpose beyond the above.
03
Data Storage & Security
Your data is stored securely on Supabase (PostgreSQL), hosted on cloud infrastructure. Access to family data is enforced through Row Level Security (RLS) — meaning each user can only access data belonging to their own family group. No one outside your family group can read your data.
All data is transmitted over encrypted connections (HTTPS/TLS). We do not store passwords in plain text — authentication is handled by Supabase Auth.
04
Third-Party Services
Sulala uses the following third-party services to operate:
- Supabase — database, authentication, and cloud storage. Governed by Supabase's Privacy Policy.
- Kilakona SMS — used to deliver family invite codes via SMS. Only the phone number and invite code are transmitted; no other personal data is shared.
We do not integrate advertising networks, social media SDKs, or analytics platforms.
05
Data Sharing
Your data is never sold or shared with third parties for commercial purposes. Family data is shared only within your family group — between members you have explicitly invited using your family's invite code.
The Family Discovery feature may surface your family's name publicly to other Sulala families that share matching names in their trees. No personal details beyond shared names are revealed through this feature.
06
Data Deletion
You may request deletion of your account and all associated data at any time by contacting us at the address in Section 8. Upon request, your account and personal data will be permanently removed from our systems within 30 days.
Family data entered by other members of your group may remain accessible to those members after your account is deleted.
07
Children's Privacy
Sulala is designed for family use and may be used by or on behalf of children. We do not knowingly collect personal data directly from children under 13. Family members (including children) may be added to the tree by an adult administrator — only their name, date of birth, and gender are stored.
08
Changes to This Policy
If this policy changes, the updated version will be posted at this URL with a revised "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.