Privacy

What happens to your details.

We will not tell you we cannot be hacked. Nobody can promise that, and any supplier who does is either misinformed or misleading you. What we can tell you is exactly what a breach would and would not expose, and we have written that down.

What we collect

A family name, one email address, and for each person: gender, age, a coarse health band, and an occupation. Optionally a province and country preferences, and a band for what your family would bring. That is everything.

What we deliberately do not collect

No ID numbers. No physical addresses. No phone numbers. No exact net worth. No race, ever. And no names for the people in your family - only yours, as the contact.

How it is stored

Your family name and email address are encrypted before they reach the database, and the key is held outside the database entirely. Everything that identifies you is encrypted; the demographic figures that make up the public statistics are not, because they are meaningless without an identity attached.

What a breach would and would not expose

If our database alone were stolen - the most common kind of breach - what an attacker would get is a list of ages, genders and job titles with nobody's name on it. No names, no email addresses, no way to contact or find anyone.

If our server itself were fully compromised, they would get everything, in plaintext. The application has to be able to decrypt in order to email you a code, so the key must be reachable by the running code. No system that sends you email can honestly claim otherwise, and we would rather tell you that than pretend.

Who we share it with

Combined, anonymous statistics are shared with prospective governments: how many people, which occupations, what capital. No individual family's details are shared with anyone without asking you separately and explicitly first.

Your rights

You can see everything we hold, change it, or delete it permanently, yourself, from your profile. Deletion is immediate and real. We cannot restore it for you afterwards, and that is the point.

POPIA and cross-border transfer

The Protection of Personal Information Act applies to this register. Data may be stored outside South Africa, and you consent to that when you enrol. Aggregate statistics may be shared with governments outside South Africa. This notice will name our Information Officer and registration details before enrolment opens publicly.

Third parties

We use Google Analytics to count visits and see which pages are read. It sets a cookie and tells Google that somebody visited, but not who: we never send it your name, your email address, or anything you type into this site. It does not run on your family dashboard, on the sign-in pages, or anywhere you are signed in. There is no advertising here and no social widgets, and our fonts are served from our own server rather than from Google.

Ask us anything about this