Privacy Policy

1. Introduction

Welcome to ChronicleTree. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal information, please contact us.

This policy covers the ChronicleTree website and app at chronicletree.com (the “Services”). It says what we collect, why, who we share it with, how long we keep it and how you can have it deleted.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services or otherwise when you contact us.

• Account data: name, email address and username. If you sign in with Google, Google gives us your name, email address and profile picture (see “Google user data” below). If you came to us from the badge on someone’s chronicle, we note which chronicle it was.
• Chronicle data: what you add to your chronicle (your page on ChronicleTree), including milestones, photos, links and dates.
• Visitor data: when someone visits a chronicle, we record the visit, the site they came from, which milestones they open and which of the chronicle’s links they tap. To count each visitor once, we keep a one-way hash of their IP address that changes every day, so nobody can be followed across chronicles or days.
• Reports: if you report a chronicle, we keep the reason and anything you write with it. The chronicle’s owner is not told who reported it.
• How you use the product: a few events tied to your account, such as finishing setup, sharing a chronicle or opening checkout, so we can see where people get stuck.
• Technical data: like every website, the companies that host ChronicleTree process your IP address and browser details to deliver pages and keep the service secure. We count page views with a tool that sets no cookies and doesn’t identify you.
• Cookies and browser storage: a cookie keeps you signed in, and your browser remembers small choices such as light or dark mode. We don’t use advertising cookies.
• Payment data: if you subscribe to Pro, the payment is handled by Dodo Payments, our payment partner. They collect your card details and billing address; we never see or store your card number. We keep a record of each subscription: the chronicle it is for, its plan, its status and when it renews.

3. Google User Data

If you choose “Continue with Google”, we ask Google only for your basic profile. We do not ask for access to your Gmail, Drive, Calendar, contacts or any other Google service.

• What we access: your name, your email address, your profile picture and the identifier Google uses for your account.
• How we use it: to create your ChronicleTree account, to sign you in, to send you emails about your account, and to suggest your name when your chronicle is set up.
• How we store it: in our database at Supabase, with your account. We never receive or store your Google password.
• Who we share it with: nobody, other than the service providers listed under “Sharing Your Information”, who process it only to run ChronicleTree for us. We do not sell it, use it for advertising, or use it to develop or train AI models.
• How to remove it: ask us to delete your account (see “Keeping and Deleting Your Information”). You can also remove ChronicleTree’s access at any time from your Google Account, under Security, “Your connections to third-party apps and services”.

ChronicleTree’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests.

• To facilitate account creation and logon process.
• To send you administrative information.
• To provide and manage your chronicle.
• To show owners how many people visited their chronicle.
• To take payments for paid plans and manage subscriptions.
• To protect our Services.

We do not use your information for advertising, and we do not sell it.

5. Sharing Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We do not sell your personal data to third parties.

What you put on a public chronicle (your name, photo, milestones and links) is visible to anyone who has its address. A chronicle you have hidden is visible only to you.

We rely on a small number of service providers to run ChronicleTree: Supabase (the database, photo storage and sign-in), Cloudflare (hosting and page view counts), Google (if you choose to sign in with Google) and, for paid plans, Dodo Payments, which processes payments as the merchant of record. They receive only the information they need to do that job.

6. Keeping and Deleting Your Information

We keep your account and what you add to your chronicles for as long as your account exists. You can edit or remove milestones, photos, links and whole chronicles yourself at any time from the dashboard.

To delete your account, email us at chronicletree@gmail.com from the address on the account. We then delete your sign-in details (including anything received from Google), your chronicles, milestones, photos and the visit counts for them. A chronicle with a Pro subscription has to have the subscription cancelled first. Records of payments are kept by Dodo Payments for as long as the law requires.

7. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.

8. Your Privacy Rights

In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right to request access and obtain a copy of your personal information, request rectification or erasure, and restrict processing. To use any of them, email us and we will answer within 30 days.

9. Children

ChronicleTree is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us theirs, email us and we will delete it.

10. Changes to This Policy

If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.

11. Contact Us

If you have questions or comments about this policy, you may email us at chronicletree@gmail.com.