Your data & privacy
Krio Griot stores the research you entrust to it. This page explains what is kept, where it goes, and what you can ask for, including a copy of your data or deleting your account.
What is kept
| What | What it is | Why it is kept |
|---|---|---|
| Your account | Your name, email address, plan, and your password stored only as a one-way hash (bcrypt). Your password itself is never stored and cannot be read back. | To sign you in and to send account email such as password resets. |
| Your research | People, family links, life events, notes, research questions, sources, research log entries, search records, DNA tests and matches, archive items and collections. | This is the workspace itself. It is private to your account. |
| Your files | Photographs, scans and PDFs you upload. | So they can be shown with your research. Each file can be opened only by the account that uploaded it. |
| Your settings and usage | Your home person, your place in Speak to Me, and how many research engine searches, scans and how much storage you have used this month. | So your place follows you to any device, and to apply your plan's limits. |
| Problem reports | What you write in Report a problem, the email you give for a reply (or your account email if you are signed in), the page you were on, and your browser type. | So the problem can be fixed and you can be answered. Each report is also emailed to support@kriogriot.com. Deleting your account deletes the reports sent while you were signed in. |
| Server records | The web server records each Legacy Search run: your account number, the name searched, how many searches it made, and its cost. | To keep the service running and to watch its costs. |
Where it goes
Your research is not sold, licensed or shared for advertising. To do its work, Krio Griot sends some of it to these services:
Where it lives
Pages and uploads are served over an encrypted connection. Every record is tied to your account, and the server checks that the account asking for a record or a file is the one that owns it.
The hosting provider keeps backups of the server on its own schedule. After a record or an account is deleted, copies can remain in those backups until they expire.
Your rights
Every person, record, note and entry can be edited or deleted in the app at any time. Edits replace the earlier value; there is no history of changes. Deleting an archive item, source or person also removes its uploaded file from the server.
The Research Log can be downloaded as a PDF or a spreadsheet (CSV), and the Legacy Search report, follow-up answers, the Ancestor Dossier and each profile as PDFs. For a full copy of everything held for your account, email privacy@kriogriot.com. There is no export button in the app yet.
Email privacy@kriogriot.com from the address on your account. Deleting an account removes your account, all of your research and your uploaded files from the server. Ask in the same email for the copies on the archival storage drive to be removed as well. There is no delete button in the app yet.
Your browser
When you sign in, Krio Griot gives your browser a sign-in token that lasts 7 days. It is kept in your browser's local storage and in a secure cookie that pages cannot read. Your browser also keeps a few things on that device: sound on or off, whether the how-known legend is open, a copy of your home person and your Speak to Me place, and the contact details you enter in Account settings (phone and address), which are kept only in that browser and are not sent to the server. No tracking or advertising cookies are used, and there are no third-party analytics.
Signing out, or clearing your browser's storage for this site, signs you out on that device.
Contact
For questions about your data or privacy, contact privacy@kriogriot.com. For general support, use the Report a problem link in the footer of any page.
This page was last updated October 2026. Material changes will be sent by email to all account holders before they take effect.