How we collect, use, protect, and handle your personal information
🔍 1. Information We Collect
Data Type
What We Collect
Purpose
Account Info
Name, email, phone, date of birth
Account creation & communication
Uploaded Photos
Facial images (3-angle scan)
AI ancestry analysis
Payment Data
Transaction records (no card numbers stored)
Processing purchases
Usage Data
Pages visited, features used, device info
Service improvement
IP Address
Approximate location data
Security & localization
Referral Data
Referral codes & relationships
Referral program tracking
💡 2. How We Use Your Data
Ancestry Reports: Photos and data are analyzed by our AI engine to generate your DNA ancestry report.
Account Management: Contact information is used for account verification, password resets, and support.
Communication: We may send you report results, updates, and important service notifications via email.
DNA Pool: If you opt in, limited profile info (name, ancestry) is shared in the community DNA Pool. Your photos and personal data are never shared in the DNA Pool.
Improvement: Anonymous, aggregated usage data helps us improve our algorithms and service quality.
🔐 3. Data Protection & Security
All data transmissions use industry-standard TLS/SSL encryption.
Uploaded photos are encrypted at rest and in transit.
Access to user data is restricted to authorized personnel only.
We use Firebase Authentication with secure session management.
Payment processing is handled by PCI-DSS compliant providers. We never store your credit card information.
🗑️ 4. Data Retention & Deletion
Account data is retained as long as your account is active.
Uploaded photos may be retained for up to 90 days after report generation for quality purposes, then deleted.
You may request complete deletion of all your data at any time via Settings → Delete Account.
Upon account deletion, all personal data, photos, and reports are permanently removed within 30 days.
🤝 5. Data Sharing
We do not sell, rent, or trade your personal information to third parties.
We do not share your photos or biometric data with advertisers or data brokers.
We may share data with law enforcement only when required by valid legal process.
Service providers (hosting, payment, email) may process data on our behalf under strict confidentiality agreements.
🍪 6. Cookies & Tracking
We use essential cookies for authentication and session management. We use analytics tools (privacy-friendly) to understand usage patterns. You can control cookies through your browser settings.
👶 7. Children's Privacy
Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with their data, please contact us immediately.
✉️ 8. Your Rights
Access: Request a copy of all personal data we hold about you.
Correction: Update or correct inaccurate personal information.
Deletion: Request permanent deletion of your data.
Portability: Receive your data in a portable format.
Objection: Opt out of non-essential data processing.
To exercise any of these rights, contact us at privacy@dnaoriginmap.com
📝 9. Policy Updates
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a prominent notice on our website. Continued use of the Service after changes constitutes acceptance of the updated policy.