Tunnda is a mobile app that lets a family keep its stories, its photos, its audio recordings and its kinship ties in a private space. This policy describes the data we process, why we process it, who we share it with, and the rights you have.
We have worked to write this document in plain language. If any point seems unclear, write to us: we will answer, and we will fix the text.
1. Who is responsible for your data
The data controller is the publisher of Tunnda. For any question about this policy or about your data, write to contact@tunnda.com.
2. The data we process
2.1 Account data
To create an account, we process your email address, your name and your password. Those elements are used to authenticate you and to let you find your family vault again.
2.2 Family data you enter
The core of the app consists of describing members of your family. Profiles may contain the following information:
- Identity: first name, surname, birth name, nickname, gender
- Life events: dates and places of birth, marriage, death and burial
- Contact details: email address, phone number, postal address, city, region, postcode, country
- Biographical elements: occupation, education, free-form notes, the confidence level attached to a piece of information
- Portrait photo
- Kinship ties between people
2.3 Content you create
- Stories: title, text, date, place, associated people
- Photos you add to a profile or to a story
- Audio recordings: name pronunciation, story, memory, with their duration
2.4 Technical data
- Error logs: error message, technical context, app and system version. Those logs are capped in number, kept on your device only, never transmitted, and you can switch off their recording in the settings.
- Fingerprint, face recognition and lock code: verified by your phone, kept in its secure store. We never have access to them.
2.5 What we do not collect
The app ships with no audience measurement, behavioural analytics or third-party crash reporting tool. We collect no advertising identifier, no browsing history, no background location data, and none of your phone's contacts.
3. Why we process this data
| Purpose | Legal basis |
|---|---|
| Create and secure your account | Performance of the contract between us |
| Keep and back up the content of your family vault | Performance of the contract |
| Let your family contribute according to roles | Performance of the contract |
| Keep data about people who do not use the app | The legitimate interest of your family in documenting its history, subject to the right to object set out in section 8 |
| Answer your support requests | Legitimate interest in assisting you |
| Meet our legal obligations | Legal obligation |
4. Who we share your data with
We do not sell, rent or transfer your data to anyone. We display no advertising and build no advertising profile. Your data is never pooled with that of other families, and there is no public directory in Tunnda.
We use the following technical providers, which act on our behalf and on our instructions:
| Provider | Role | Data concerned |
|---|---|---|
| Contabo GmbH (Germany) | Rental of the dedicated machine on which we run our database and our file storage | Account, person profiles, stories, photos, audio recordings |
| OVH SAS (France) | Delivery of our email: address verification, invitations, deletion notices | The recipient's email address and the content of the message |
| Stripe Payments Europe, Ltd. (Ireland) | Payment processing, when you subscribe to additional storage | Email address and billing details. Card details are entered at Stripe and never pass through our servers |
| Expo (EAS) | Distribution of app updates | The update request made at launch, including the app version and the device type |
The machine hosting our servers is located in Germany, within the European Union, and our email is sent from France. Two of our providers are established in the United States: Expo, for the distribution of app updates, and Netlify, which hosts this site. What reaches them is limited to what the table above describes, and those transfers are governed by the European Commission's standard contractual clauses.
We may also be required to disclose data where the law obliges us to, or to assert our rights in court.
5. Security
Exchanges between the app and our servers are encrypted in transit (HTTPS). Access to the app can be locked with a fingerprint, face recognition or a PIN code, verified locally by your device. The data in your vault is stored in a local database on your phone, and backed up on our infrastructure.
We recommend that you export your data from the app regularly, and keep that export somewhere safe.
6. How long we keep your data
- Account data and vault content: kept for as long as your account exists.
- After a deletion request: erased within thirty days, unless the law requires us to keep it.
- Error logs: kept on your device only, with a maximum number of entries, and erased when the app is uninstalled.
7. Children
Tunnda is not intended to be used independently by children. The app provides a read-only "Youth" role, whose use is the responsibility of the adults in the family. An account must be created by an adult. If you believe a child has sent us data without supervision, write to us and we will delete it.
8. Your rights
You have the right to access, rectify, erase and port your data, to object to processing and to have it restricted. The right to portability can be exercised directly from the app, through the GEDCOM export.
To exercise your rights, write to contact@tunnda.com. We reply within thirty days. If you believe your rights are not being respected, you may lodge a complaint with the competent data protection authority.
If you appear in a vault without being a user
If you learn that a member of your family has created a profile about you and you want it removed, write to contact@tunnda.com stating who you are. We will pass your request on to the family vault concerned and support you through the process.
9. Deleting your account
You may request the deletion of your account and the associated data at any time. The procedure, the time frames and the list of what is erased are set out on the page dedicated to account deletion.
10. Changes to this policy
We may update this policy. If a change is significant, we will tell you in the app. The date of the last update appears at the top of this page.
11. Contacting us
For any question about this policy or about your personal data: contact@tunnda.com.