Munnaluru

Privacy policy

Last updated: 19 October 2026

Munnaluru is a family-tree app. This policy explains what the Munnaluru Android app and this website record, who can see it, and how to remove it. Questions: support@munnaluru.org.

What is recorded

About people in the family tree. Members add themselves and their relatives, including relatives who have died. A profile can hold:

About your account. Your user name, your password (stored only as a salted hash, never as text), who invited you, your sign-ins with the device's name and model, and the internet address of sign-ins and of security events such as password resets. Password reset codes and account deletion links are stored only as hashes; codes expire after 15 minutes and deletion links after 24 hours.

If you sign in with Google. Google gives Munnaluru your Google account's ID and, when Google has verified it, its email address. They are used only to sign you in and to show in Preferences which Google account is linked. Munnaluru never receives your Google password, contacts or anything else from your Google account, and does not share this information. If you registered with Google, you may have no Munnaluru password at all.

On your phone. The app keeps your sign-in in encrypted storage. If you turn on fingerprint or face unlock, Android keeps the key; Munnaluru never receives your fingerprint or face.

Who can see it

How it is used

Only to run Munnaluru: to show the family tree, to sign you in and keep your account safe, and to send the emails you ask for or need for security (reset codes, notices that your password was changed, account deletion links). There are no advertisements, no tracking and no analytics in the app or on this website, and this website sets no cookies.

Sharing

We do not sell or rent information, and we do not share it with advertisers. It is stored on servers rented for Munnaluru, and emails are sent through Munnaluru's email server. We disclose information only when the law requires it.

Keeping and deleting

Children

Accounts are for adults. Children appear in the family tree when their family records them; their profiles are managed by a parent or relative.

Security

All connections use HTTPS. Passwords, reset codes and deletion links are stored only as hashes. Sign-ins and password resets are recorded, and you are told when a reset code is issued for your account.

Changes

If this policy changes, the new version is posted here with a new date.