What we keep
Profile: email, display name, date of birth, gender, profile photo and the ID others use to connect with you.
Content: posts, comments, messages, photos, videos, audio and the albums you create.
Relationships: who you are connected to and how, so your family tree can be drawn.
Usage and errors: anonymous statistics on how the app is used and crash reports, used only to fix problems and improve the app.
Signing in with Google or Apple
We receive only your email and name, not your contacts or anything else.
If you hide your email when signing in with Apple, we only see the relay address, never your real one.
Who sees what
By default nobody outside your circle sees anything. Each post has its own audience that you choose: only you, close circle, wider circle, or specific people.
Photos and videos open only for people allowed to see them. There are no public links to them.
On the family tree you can stay anonymous: people you are not connected to see only that someone is there, not who.
Notifications and messages reach only their recipients.
Storage and protection
Your data is stored with established cloud infrastructure providers, sent over encrypted connections, and accessible only according to each person's permissions.
We do not share your data with third parties for advertising or marketing.
Payments are handled by the App Store, Google Play or our payment provider. We only know which plan is active and until when.
Automated assistance (AI)
Support messages may be answered first by an automated assistant. To answer, it reads the conversation and basic facts about your vaults (name, plan, storage used, renewal date), never your photos or posts. You can ask for a person at any time.
Posts in Hearts & Dating may be checked automatically against the community rules before they show. Anything uncertain is left to the team.
This is done through OpenRouter, which passes the text to the AI model provider we choose. The text is used only to produce that answer or review, never for advertising.
How long we keep things
Deleted photos stay in the bin for 9 days, then go. A permanent delete removes every copy, including thumbnails and previews.
A vault more than 30 days past expiry is deleted along with everything inside it.
Old notifications are cleared automatically after a while.
Deleting your account deletes your data. Technical backups may hold copies for up to 30 more days before they expire.
Your rights
You can view and edit your profile, download your photos, delete individual items or your whole account, all within the app.
You can turn push notifications off at any time in settings.
For a copy of all your data, or to raise a complaint, write to us at the address at the bottom of this page.
Children
Ohanaki is not for anyone under 13. If we learn an account belongs to a child under that age, we delete it.
Cookies
The website stores only what it needs to work: keeping you signed in and remembering your language.
There are no measurement or advertising cookies. Page visits and errors are counted without storing anything on your device and without identifying you, so there is nothing to accept or refuse.