Pinkas

Trust

Privacy & Family Permissions

Private by default is only the beginning. Pinkas also gives families roles, item visibility, groups, and narrow guest access so sharing can match the situation.

A member invitation can open the archive. A guest link opens only the task named by that link.

Family roles

  • Viewer — reads material shared with them.
  • Contributor — submits material for family review without receiving ordinary editing authority.
  • Editor — creates and changes family content.
  • Family admin — manages members and can see private entries when administration requires it.
  • Account owner — controls the archive, billing relationship, ownership transfer, and family deletion.

Private records, groups, and branches

Private records are hidden from ordinary family members: they are visible to the creator and family administrators. Group visibility shares an item with a selected private group inside the family.

Pinkas does not treat a branch as a separate family tenant. To restrict a branch or a sensitive set of records, use private people, private items, or a group rather than assuming everyone in that branch has a separate wall around them.

Living and deceased people

A person profile is never public merely because the person is deceased. Marking someone deceased enables memorial and calendar behavior; it does not waive family privacy. A living person's dates, portrait, and stories deserve particular care and can be marked private.

A private person stays off shared tree and derived calendar surfaces.

Photos and recordings

Choose visibility when adding photos and other media. Family members should upload only what they have permission to share, especially images of children, medical details, and interview recordings.

Original media is stored privately. Authorized downloads use short-lived links rather than permanent public file addresses.

Member invitations name an email, carry a role, expire, and can be revoked. Guest links and family access codes are narrower but should still be treated like keys. Close them when the contribution window ends, and remove a member immediately if access is no longer appropriate.

Exports leave the permission boundary

A family export is available only to an authorized member and is delivered through expiring download links. Before sharing an exported ZIP, remember that it is now a copy outside Pinkas permissions. Store it securely and share it intentionally.