How privacy works on Cheta
Family history includes living people and sensitive memories. These are the rules the system enforces, not just promises in a policy.
- 1
Family spaces are private
Only signed-in members with an active, approved membership can see a family's tree, people, photos, documents and stories. Our servers check this on every request, including every photo download.
- 2
Public profiles are a separate, approved copy
When a family publishes someone, they choose exactly what to show: a name, a short biography, a hometown, links and, for people who have died, their years of life. Public pages never show relatives, relationships or how many people are in a family.
- 3
Living people decide for themselves
A living person's profile can only be made public by that person, from their own account. Once a living relative links their account to their record, only they or a family admin can change it. Children are never public.
- 4
Family codes open a door, not the house
A family code or invitation lets you ask to join. By default an admin must approve you. Codes can expire, be limited to a number of uses, and be switched off at any time. Removing a member takes effect immediately.
- 5
Hidden data in photos is removed
When you upload a photograph, we remove hidden information such as GPS location and camera details before storing it.
- 6
Nothing is merged automatically
Two people with the same name stay separate unless a family member deliberately links them. Every new relationship starts as unreviewed, and disputes are kept visible.
- 7
Every important change is recorded
Family admins can see who added, changed, published or removed what, and when. The record cannot be edited.
- 8
Your data is yours
You can download your account data at any time and request deletion from your account page.
This pilot is pending a review under the Nigeria Data Protection Act 2023. A full privacy notice and terms will be published before public launch.