Your record stays in the family.

A family decides who sees what. This is exactly what each person can see and do, as the server enforces it.

A carved wooden window with a lattice screen in Bhaktapur, photographed in 1976. — A carved window in Bhaktapur, 1976: a view in, but no way in.

What the code opens

A relative types the code the owner chose. They see the tree and can find how they are related, without an account and without any way to change it.

The family code screen: one field for the code shared by the family admin and a button to open the banshawali. — The relative types the code.

The family tree as a family-code visitor sees it, with no button to add or change anyone.

Who sees what

A person’s page as a family-code visitor sees it: name, photo, gotra and native place, with no edit buttons and no phone number. — What someone with the family code sees: no edit buttons, no phone number.

Who can see and do what in a family register
In the register	Owner and admins	Editors	Viewers and family-code visitors
Names, relationships and photos	Yes	Yes	Yes
Full birth dates of living people	Yes	Yes	Year only
Phone numbers and email	Yes	Yes	Hidden
Add and correct people	Yes	Yes	No
Export the tree as GEDCOM	Yes	Yes	No
Invite relatives and choose their role	Yes	No	No
Read the change history and undo	Yes	No	No
Print the register as PDF (paid plans)	Yes	No	No

Nothing changes quietly

Every addition, edit and removal is written to the family’s history with who made it and when. Owners and admins can put any change back with one click.

The change history screen: a relationship added, Anil Adhikari added and Krishna Bahadur Prasad Adhikari edited, each with an Undo this change button.

How it is kept safe

The family code opens a view, never an edit.

Anyone with the code can look at the tree without making an account. They cannot add, change or remove anything.

Change the code, and old visitors are out.

When the owner sets a new family code, everyone who used the old one has to enter the new one.

Living people keep their birthdays to themselves.

Code visitors see only the birth year of a living relative: enough to know who is older, not enough to answer a bank’s security question.

Phone numbers never travel round WhatsApp.

Phone and email are withheld from code visitors for everyone, living or not, so the code cannot double as a phone directory.

Each family’s register is kept apart.

Every request belongs to one family’s own address. One family can never read another family’s people, history or files.

Every change is written down.

The history shows who changed what, in plain words. Owners and admins can undo a change, and a removed person comes back with their relationships.

Your data is yours to take.

Export the whole register as GEDCOM on every plan, free. No plan can switch that off.