← All projects
Live

FamilyTree App

A family-tree and heritage platform for people of Nordic descent. Built for B2B2C: heritage associations get dedicated society workspaces for their members and archives.

A family-tree and heritage platform that helps people of Nordic descent trace, document and share their family history, with dedicated workspaces for heritage associations and their archives.

Stack

Next.js (App Router)TypeScriptReact FlowReact Native / ExpoElectronNeo4jCloudflare R2InngestStripeResendSentryVercelSignicat (Nordic eID)EN/DE/FI/SV/NO/DA

How it works

INPUT
Family data entered, invited or imported (GEDCOM 7.0, desktop helper for Google Takeout, OneDrive, Dropbox)
CODE
People and relationships stored as nodes and edges in Neo4j
CODE
Privacy guard and central policy guard on every read and write
HUMAN
Families and society reviewers verify records and approve archive items
CODE
Files encrypted at rest; tamper-evident audit log

AI boundary

Where AI is used

  • In the build: AI-assisted development across web, mobile and desktop, directed and reviewed by a human lead
  • Considered, not shipped: duplicate-person suggestions — human merges, never auto-merge

Where AI is excluded

  • No generated ancestors or inferred relationships presented as fact
  • Tree structure from explicit input, GEDCOM import and review
  • Access from identity (Nordic eID), role and policy, not AI judgments

Guardrails

  • Organisation-scoped queries and a central policy guard on every society read and write
  • Multi-axis privacy guard in front of all family-graph reads
  • AES-256-GCM at rest, separate personal and society vault keys
  • Tamper-evident audit log retained for seven years
  • GDPR Article 15 data export built in

What it demonstrates

Graph modeling (nodes, edges, traversals)Policy-guarded multi-tenancyPrivacy by design for sensitive PIIRestraint: when not to use AI
  • Interactive family-tree canvas with kinship-path navigation, person profiles and GEDCOM 7.0 import.
  • Secure vault for family documents and photos, with family-aware sharing permissions.
  • Society workspaces with a curated archive, collections, a community wall and an archival-review workflow.
  • Web hardening: nonce-based CSP, HSTS preload, CSRF protection. Mozilla Observatory A+ (125/100). CSA STAR Level 1 self-assessment.

Notes

Role: founder. Product strategy, IP and trademark strategy (FI/EU/US/Middle East), grant funding and go-to-market. Hands-on technical lead, directing AI-assisted development across web, mobile and desktop.

The data model is graph-native, with one shared platform for personal and society use. Every society read and write goes through organisation-scoped queries and a central policy guard, so access depends on identity, role and policy rather than hardcoded rules.

Privacy is GDPR by design: files encrypted at rest with AES-256-GCM and separate keys for personal and society vaults, a multi-axis privacy guard in front of all family-graph reads, a tamper-evident audit log kept for seven years, and built-in GDPR Article 15 data export.

In genealogy, a confident wrong answer is worse than no answer. The product invests in evidence and review instead of generated relationships.