Family Digital Record System

Privacy Policy

Last Updated: January 2025

1. Information We Collect

We collect the following information to provide our family digital record services:

• Personal identification information (Name, Email, Phone Number)
• Family details (Head of Family, Number of Members, Address)
• Account credentials (encrypted passwords)

2. How We Use Your Information

Your information is used exclusively for:

• Managing your family digital records
• Authenticating your account access
• Sending important notifications via OTP
• Improving our service quality

3. Data Storage and Security

All data is stored locally in your browser using secure localStorage technology. We do not transmit your data to external servers without your explicit consent.

4. Data Sharing

We do NOT share, sell, or distribute your personal information to third parties. Your data remains private and confidential.

5. Your Rights

You have the right to:

• Access your stored data at any time
• Modify or delete your records
• Request complete data deletion
• Opt-out of notifications

6. Children's Privacy

Our service is designed for family record management and may include information about minors. We ensure all data is handled with utmost care and security.

7. Contact Information

For privacy-related queries, contact the developer:
Mohammad Haris, Class 12th Student
Saiyyed Hamid Senior Secondary School, AMU, Aligarh

Security Policy

Last Updated: January 2025

1. Data Encryption

We implement industry-standard security measures:

• Passwords are hashed and encrypted before storage
• Sensitive data is protected using encryption algorithms
• OTP verification for critical operations

2. Authentication Security

Multi-layer security approach:

• Two-factor authentication via OTP
• Secure password requirements (minimum 6 characters)
• Account lockout after multiple failed attempts
• Session management and automatic logout

3. Data Protection Measures

• Regular security audits and updates
• Secure local storage implementation
• Protection against XSS and CSRF attacks
• Input validation and sanitization

4. Access Control

Strict access control policies:

• Only authenticated users can access their data
• Each user can only view/edit their own records
• Role-based permissions for different operations

5. Incident Response

In case of security incidents:

• Immediate notification to affected users
• Detailed investigation and resolution
• Implementation of preventive measures
• Transparent communication about the issue

6. Best Practices for Users

We recommend users to:

• Use strong, unique passwords
• Never share OTP codes with anyone
• Logout after each session on shared devices
• Keep their contact information updated
• Report suspicious activities immediately

7. Compliance

This system complies with:

• Data protection regulations
• Privacy laws and standards
• Security best practices

8. Security Updates

We continuously monitor and update our security measures to protect against new threats and vulnerabilities.