Family Sharing & Privacy Model
Two consent-driven paths to share your tree, both bounded. Your tree is never made public.
Path 1: Family Access (Direct Invitations)
Directly invite specific family members you know and trust to view or contribute to your tree.
- Explicit consent: Invitees must explicitly accept the invitation.
- Bounded: Bounded to the specific people you invite.
- OTP verified: Invitation verified via secure email OTP.
- Revocable: Revoke access instantly from your settings page.
Path 2: Cluster Trees (Opt-in Anonymized Matching)
Discover extended branches and share genealogy research anonymously with other discovered relatives.
- Disabled by default: This setting is completely opt-in and OFF by default.
- Evidence-bounded matches: Matches fire only with strong evidence (e.g., common ancestor or matching phone numbers).
- Anonymous contributor: Other users see you only as "Contributor #N". Your real name/identity is never exposed.
- Permanent matching model: Shared contributions stay in the graph to maintain history, with narrow exits.
What FamiVox Will Never Do
- Never make your family tree publicly searchable or anonymously browsable.
- Never sell or license your genealogy tree to third parties, advertisers, or AI trainers.
- Never auto-share your tree with strangers — sharing is always bounded to the two consent paths.