GenoCanvasPrivacy policy
SmallHoursSoftware is the controller of the personal information described here. Contact: [email protected]. Last updated 3 October 2026.
What we do not collect
We do not collect anything you draw or type in GenoCanvas. The app runs on your device and sends nothing to us (see the security statement). We use no analytics, advertising or tracking, and this website and the app set no cookies.
What we collect, and why
| When | What | Why (legal basis) |
|---|---|---|
| You visit this website or the free app | Your IP address and the page requested, in the ordinary logs of our hosting provider (Cloudflare). | Running and securing the site (legitimate interests). |
| You buy a licence | Our payment provider, Paddle, takes your payment details and collects your name, email, country and tax details. It passes us your email address and the order details. We never see your card number. | Completing your purchase (contract); keeping tax records (legal obligation). |
| You use your account | Your email, the names and emails you put on licences, your orders, and a sign-in cookie (strictly necessary) on account.genocanvas.com that keeps you signed in for 30 days or until you sign out. Sign-in links are sent by our email provider, Resend. | Providing the licence and downloads you bought (contract). |
| You email us | Your message and email address. | Answering you (legitimate interests). |
Who else handles it
- Paddle is the merchant of record for sales and an independent controller of your payment information; see Paddle’s privacy notice. Its checkout loads only when you press Buy.
- Cloudflare hosts the website, the free app and the account area, and stores account records.
- Resend sends sign-in emails.
We do not sell personal information or use it for marketing. Some of these providers process data outside the UK; they rely on approved safeguards such as the UK addendum to standard contractual clauses.
How long we keep it
Account and order records are kept while your licence exists and for up to six years afterwards for accounting purposes, then deleted. Sign-in links expire after 15 minutes and are deleted after a day. Emails to us are kept as long as needed to deal with them.
Your rights
You can ask to see, correct or delete the information we hold about you, object to how we use it, or ask for a copy. Email [email protected]. If you are unhappy with how we handle it you can complain to the Information Commissioner’s Office (ico.org.uk).
Information in your genograms
Because genograms stay on your device, you and your organisation are the controller of any personal information you put in them, and your own policies apply.