Privacy

What TSUGENA is

TSUGENA is a private place where a family keeps and shares its story: memories, photographs, voices and letters for the future. What is shared is seen only by the members of that family.

This text explains what data TSUGENA keeps, why, where and for how long, according to what the service does today.

Who is responsible

For any question about your data you can write to info@tsugena.com.

Legal review required: The identity of the data controller, their address and, where applicable, the data protection officer.

What data we keep

Account: your name; the sign-in email Apple or Google provides (only if they have verified it); the account identifier at that provider; the moment you confirmed you are an adult; your language. We do not store Apple or Google passwords.

Sessions: a hashed session identifier, the device name and when it was last used.

Family and people: the families you belong to and your role in each; the people in the tree (names, dates of birth and death at the precision known, whether they are alive, and their relationships), which any member can add.

Family content: posts, memories, stories, comments, reactions, questions and answers, life moments and tags of who appears. What your family writes is never translated or analysed.

Photographs and voice: photos are re-encoded on the server and their metadata (including location) is removed; voice recordings last at most 5 minutes.

Capsules: letters, photos and recordings for the future, their recipients and the date or age at which they open.

Invitations: a token stored as a hash, who invites, to which family and, if given, for which person in the tree.

Security email: a second, verified address for the important notices about your account.

Notifications: the push notification identifier of each installation of the app, and its platform.

Technical data: error logs without query contents, tokens or email addresses; the delivery status of each notice (type, channel and status, not its text); and a security audit log with event types, without content.

What we use it for

So that you can sign in, be part of your family and share with it; to deliver capsules when their time comes; to send you security notices and, if you turn them on, family notifications; and to keep the service running safely.

We do not use your data for advertising, for profiling or to train artificial intelligence models.

Legal review required: The legal basis for each processing activity.

Who sees what

What is shared in a family is seen only by its members. A capsule is opened only by its recipient, and only when its time comes.

Providers involved

Hosting: TSUGENA's server and database are hosted by Okitup.

Photographs and recordings: they are kept in Cloudflare R2, in private storage under European Union jurisdiction, and are only shown through signed links that expire after 30 minutes.

Email: email notices are sent through Mailgun from its European Union region, without open or click tracking.

Push notifications: they are sent through Expo, which delivers them via Apple Push Notification service or Google's Firebase Cloud Messaging. The text of a notice may include a first name and the family's name, never content.

Sign-in: Apple and Google, if you choose to sign in with them.

Domain: DNS resolution for tsugena.com is provided by Cloudflare.

Legal review required: The classification of each provider, the hosting location, the data processing agreements and any international transfers.

No advertising or tracking

TSUGENA has no advertising, uses no third-party analytics or tracking tools, and this website uses no cookies.

How long we keep it

Current technical periods: sessions expire after 180 days without use and, in any case, after a year; invitations expire after 14 days unless another period is set (at most 90); uploaded photos and recordings that are never used are deleted after 24 hours; the notice delivery log is deleted after 90 days; failed notices, after 30 days; error logs rotate daily.

Family content is kept while it exists and its author has not deleted it. The security audit log is kept indefinitely.

Legal review required: Retention periods from a legal point of view, including those for deleted content and for the audit log.

Deleting your account

You can delete your account from the app, under You → Delete my account.

Your name, your email addresses, your sessions, your app installations, your links to Apple and Google, your reactions and your link to the person who represents you in the tree are deleted.

What stays in the family, as part of its story: what you shared (signed as “Deleted account”), the person in the tree, the capsules someone can already open and the security audit log. If you do not want something to stay, you can delete it first.

Minors and people without an account

During the beta, only adults can have an account. When you create it you confirm you are an adult; we do not ask for your date of birth.

A family's tree may include people without an account, including minors or people who have died, with the memories and photos their relatives add.

Legal review required: The processing of data about minors, people without an account and people who have died.

Your rights

You can see and correct most of your data in the app and delete your account yourself. For any other request, including a copy of your data, write to info@tsugena.com.

Legal review required: The applicable rights, how to exercise them, response times and the supervisory authority.

Security

Connections are encrypted (HTTPS). Photographs and recordings are stored privately and only served through signed, temporary links. Notices waiting to be sent are stored encrypted. Sensitive actions ask you to confirm it is you.

Changes

If this text changes, the version and date shown above will be updated.

Contact

For any question about privacy: info@tsugena.com.