Privacy policy

Who is responsible

Genogram Builder is operated by Northpine Labs LLC. Contact: [email protected].

What stays on your device

• Everything in the chart: names, initials, genders, years, notes, conditions, relationships, households, titles and course details. The editor keeps it in your browser’s local storage so your work survives a reload.
• Files: .genogram project files you download, and the PDFs, PNGs and SVGs you export, are created by your browser on your computer. They are never uploaded to us.

Because none of this reaches our servers, we cannot read it, lose it, or hand it to anyone. It also means we cannot recover it: clearing your browser’s site data deletes the autosaved chart, so keep a .genogram file of work that matters.

What we receive

When you pay

Payments go through Stripe Checkout. Stripe collects your email address and card details; we never see your card number. From Stripe we receive the email address, the pass you bought, the amount, and whether the payment is complete or refunded. We use the email only to answer you if you write to us and to find your payment if you ask for help or a refund. We don’t send newsletters or automatic emails; Stripe may email you a receipt.

Your pass

After payment your browser stores a cookie with your Stripe Checkout Session id, signed by our server, so we can tell it was issued by us. When you export, the browser sends it and our server asks Stripe whether the payment is still valid. We keep no database of buyers; the server remembers Stripe’s answer in memory for a few minutes. The same id is in the access link we show after payment, so keep that link private.

Analytics

We use PostHog (US cloud), loaded through our own domain, to count how the site is used: page views, which buttons and options were used, and coarse numbers such as “6 to 10 people in the chart” or which pass was chosen. Analytics never include names, ages, years, notes, condition or line labels, file names or anything else from the chart. Session recording is off, text and attributes in clicked elements are masked, Stripe session ids are removed from every address before an event is sent, and automated browsers are not tracked. Heatmaps and error reports are off. PostHog stores a random visitor id in a cookie and in local storage so repeat visits can be counted, and receives your IP address with each event, from which it derives an approximate location (country and city). When you buy a pass, that random visitor id is stored with the Stripe payment so a purchase can be counted with the visit it came from; it does not contain your name.

Server and network logs

Our server and Cloudflare, which sits in front of it, process your IP address and the pages you request in order to deliver the site, stop abuse and rate-limit requests. Cloudflare may also measure how fast pages load (the page address without its query string, and timings). None of this contains chart content.

Cookies and local storage

• Pass cookie (only after you buy a pass): strictly necessary for clean exports; sent only to our payment check, lasts until the pass ends.
• Editor storage: your chart and export settings in local storage, on your device only. After a payment it also keeps your access link, and while a checkout is open, that checkout’s id (so a payment still unlocks if the page closed before Stripe sent you back).
• PostHog: a random visitor id for usage counts.
• Cloudflare: may set strictly necessary security cookies.

Who else processes data

Stripe (payments), PostHog (analytics), Cloudflare (network and security) and our hosting provider (the server that runs the site). We don’t sell or rent personal information, and we don’t use it for advertising.

Client and health information

Genogram Builder is a drawing tool, not a clinical record system. We never receive the genogram, so no client information reaches our servers, and we don’t sign business associate agreements (BAAs). Follow your agency’s rules for where client records may be stored, and use initials or roles (the de-identify switch) when you share or submit a chart.

Keeping and deleting data

• Chart data: only on your device, until you delete it.
• Payment records: kept by Stripe and by us as long as tax and accounting law requires.
• Analytics events: kept in PostHog under our plan’s retention period.

To delete what is on your device, clear this site’s data in your browser. To take a pass off a shared computer, use “Remove it from this browser” in the export dialog (the access link still works on your own devices). To ask about payment records, write to [email protected]. You can block analytics with your browser or an ad blocker; the editor keeps working.

Children

Genogram Builder is meant for students and professionals and is not directed at children under 13.

Changes

If this policy changes, the date at the top changes too. We will never start uploading charts without changing what this page and the homepage say first. See also the terms of service.