Who's responsible
JamaaRich is operated by Damien Blythers (Atlanta, Georgia). We act as the data controller for your account and the data processor for the content inside your family's tenant. You — as the family admin who created the tenant — are the data controller of the family content.
What we collect from you
- · Account basics: email, your name, relationship, birth year, optional birthday/anniversary, optional contact info you choose to share with your family.
- · Content you create: posts, comments, reactions, photos, videos, family-tree relationships, and documents you place in the family vault.
- · Voice recordings: voice stories, voice introductions, and voice answers you choose to record. We store the recording itself so your family can listen to it. We do not analyze your voice to identify you — no voice recognition, no voiceprints, no fingerprinting of any kind.
- · Private messages: 1:1 messages you send to another family member are stored so your conversation persists between visits. They're visible only to the two of you — we don't read them, except if the law requires us to.
- · Operational data: session timestamps, a salted hash of your IP address, and basic browser type — for security and audit. More on this under "Security logs."
- · Billing data: processed by Stripe; we receive the customer/subscription identifiers but not card details.
What we don't collect
- · Third-party advertising trackers inside the family portal.
- · Cross-site tracking cookies.
- · Biometric identifiers. To be precise: we store the voice recordings you choose to make (they're your family's keepsakes), but we never process a voice, face, or anything else to recognize or identify a person.
- · Anything you haven't typed, uploaded, recorded, or chosen to share.
Information about family members who aren't users
A family tree naturally includes people who never sign up — a grandmother who passed before JamaaRich existed, a cousin who hasn't joined yet. Members may record family history about relatives who aren't users: names, birth years, birthplaces, memorial records, and parent connections. That's what makes the tree whole.
- · It stays private to the family. These records are visible only inside your family's portal, never publicly, and never used for anything except showing your family its own history.
- · Cross-family requests reveal nothing without confirmation. If another family on JamaaRich asks to connect a shared relative, nothing about your family's records is shown to them unless your side confirms the connection.
- · Non-users can ask. If you're not a member and want to know whether a family has recorded information about you — or want it corrected or removed — write to privacy@jamaarich.com and we'll work it out with you and the family.
Photos & location
Photos taken on a phone usually carry hidden camera metadata — including the GPS location of where the picture was taken, which is often your home. When you upload a photo, we remove that location metadata from the stored copy. The picture itself is kept at full quality; the hidden location data is not. Videos don't get this treatment yet — if a video's location is sensitive, consider trimming it with your phone's editor before uploading (that usually removes the metadata).
Presence & activity
- · Online presence: your family can see when you were last active ("last seen"), so the portal feels alive.
- · Glimpse view receipts: when you watch a family member's glimpse, the person who posted it can see that you watched.
- · Product events: we record which features you use (for example, "posted a photo," "opened the family tree"), attributable to your account, so we can fix what's broken and improve what your family actually uses. This is about features, never the content — we don't mine your posts, photos, messages, or recordings.
Security logs
When you sign in, and in our audit trail of important account actions, we keep a salted, truncated hash of your IP address and your basic browser type. A hash is a one-way scramble — it lets us notice abuse patterns (like someone hammering the sign-in page) without keeping your actual IP address on file. These records exist to protect your family's space, and we keep them only as long as the session and audit records they belong to.
How we use it
- · To operate the family portal you signed up for.
- · To send the digest emails and invite emails you (or your family) have asked for.
- · To keep things secure (rate limits, abuse detection, fraud prevention).
- · To improve JamaaRich — using the product events described above (which features are used), never the substance of your family's content.
Who we share it with
- · Service providers who help us run the service: Supabase (database + object storage), Vercel (hosting), Resend (transactional email), Stripe (billing), and — when enabled — Upstash (rate-limiting, which may process IP addresses to tell apart visitors).
- · Our own operations backend: operating metrics and telemetry about the service (uptime, feature usage, error rates) are processed by the company's internal operations system (called Beaman). It's part of how we run JamaaRich — internal, not a third party, and never a sale of your data.
- · Members of your family — to the extent the post visibility you choose allows.
- · Nobody else. We don't sell your data and don't share it with advertisers.
Your rights
- · Access + export: download everything as JSON + a media archive from your settings, anytime.
- · Correction: edit your profile and posts directly in the app.
- · Deletion: email privacy@jamaarich.com and we complete deletion requests within 30 days.
- · Object / restrict: for EU/UK residents under GDPR — same email; we honor lawful requests within 30 days.
- · California residents: CCPA rights to know, delete, and opt out apply. We don't sell or share personal information for cross-context advertising.
Children
JamaaRich is built for families and supports youth members (under 18) under parental supervision via the "youth" role. A youth member joins only when a family admin invites them and, in doing so, attests that they have the authority to do so — we rely on that admin's attestation as the parental consent for the invitation. We don't knowingly collect data from children under 13 outside that admin-supervised path, and we never serve children ads. If you believe a child is using JamaaRich without proper consent, write privacy@jamaarich.com and we'll act on it.
Business transfers
If JamaaRich is involved in a merger, acquisition, reorganization, or sale of assets, your data and your family's content may be transferred to the successor as part of that transaction. Any successor must honor the same privacy commitments in this policy. We'll notify family admins of any material changes that result.
Changes
If we change this policy in a way that materially affects you, we'll email every family admin at least 30 days before it takes effect. The effective date at the top of this page always reflects the current version.