Privacy Policy

Account information. When you register, we collect your name, email address, and a hashed password.

If you sign in with Google. We use Google Sign-In solely to authenticate you and create your account. We request only the standard openid, email, and profile scopes — your name, email address, and profile photo. We do not request or access your Gmail, Google Drive, Google Contacts, Calendar, or any other Google service data. This information is used only to create and secure your Family Edition account and is handled the same as any other account information described in this policy.

Date of birth. We collect your date of birth to verify you meet our minimum age requirement. We may also use it in the future to celebrate family birthdays within the Service.

Content you upload. Photos, captions, and messages you share within your family are stored on our servers solely to compile and mail your printed edition.

Payment information. Billing details are handled directly by Stripe, Inc. We store only a masked card summary and do not store your full card number.

Mailing addresses. Print destination addresses you add are stored to fulfil physical deliveries.

Usage, performance, and crash data. We collect standard server logs (IP address, device type, app version, timestamps) to operate the Service. We also use a third-party application performance monitoring provider to help us detect crashes, errors, and performance issues, and to understand how the Service is used. This includes device and OS information, app version, network request performance, crash and error reports, and user interactions (such as taps and page views). On our website, this may include a masked recording of your on-page interactions — any text you type into input fields (such as passwords) is automatically masked and never captured.

Push notification tokens. If you grant permission, we store a device token to send you family activity notifications. You can revoke this in your device settings at any time.

• To create and maintain your account.
• To compile, print, and mail your edition each period.
• To process payments and manage your family fund balance.
• To send transactional emails (confirmation codes, low balance alerts, print confirmations).
• To send push notifications about family activity (if you have opted in).
• To investigate abuse, resolve disputes, and enforce our Terms of Service.
• To improve the Service through aggregated, anonymised usage analysis.

We will never sell your personal data to third parties. We will never use your photos or family content for advertising or to train AI models without your explicit, separate opt in consent.

We share your data only with the following service providers, strictly to operate the Service:

• Stripe, Inc. for payment processing. Stripe handles all card data directly; we never see or store your full card number.
• Google Firebase for authentication, push notifications, and user database. Servers located in the United States.
• Amazon Web Services (AWS) for file storage, serverless computing, and transactional email delivery (SES). Servers located in the United States (us-west-2 region).
• An application performance monitoring provider for crash reporting, performance monitoring, and usage analytics across our website and mobile app. Data is used solely to maintain and improve the Service's reliability and performance.

All service providers are contractually prohibited from using your data for any purpose beyond providing the agreed service.

We may also disclose your information if required by law, court order, or to protect the rights and safety of Family Edition, our users, or others.

Content you share (photos, captions) is visible only to other members of the same family. Family managers and admins can see member email addresses and roles. No content is ever public.

If you are removed from a family, you will no longer have access to that family’s content. Your contributions made prior to removal may still be included in editions that were already in progress at the time of removal.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or to resolve disputes.

Compiled PDFs and printed edition records are retained for at least 12 months after the print date to support reprints and delivery disputes. We do not automatically delete this data after a fixed period, and you can request its deletion on demand at any time.

Family fund balances are subject to expiration after 24 months of account inactivity as described in our Terms of Service.

We use industry-standard security measures including TLS encryption in transit, encryption at rest, and strict access controls. Our infrastructure is hosted on AWS (SOC 1/2/3 certified). No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Breach notification. In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of the incident, along with details of what data was affected and the steps we are taking.

If you believe your account has been compromised, contact us immediately via our support page.

Our Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Account creation requires a date of birth and is blocked for anyone under 13. We do not allow children to create accounts, upload content, or interact with the Service directly.

Adult-managed service. Family Edition is designed so that an adult account holder manages the family. Children may appear in photos uploaded by an adult parent or guardian, but they never have their own login, username, or password. The adult account holder is the sole data controller for any content they upload, including images that depict minors.

Photos of minors. If an adult uploads photos of children, that adult warrants that they are the parent or legal guardian of the child depicted, or that they have obtained explicit parental consent to host those images privately through the Service. We never use photos of minors for any purpose other than producing the physical printed edition requested by the adult account holder.

Safe-harbor erasure. If you are a parent or guardian and believe your child under 13 has circumvented our age gate to create an account, please contact us immediately via our support page. We will promptly verify the report, terminate the account, and permanently delete all associated personal data from our servers.

No child profiles. We do not permit adults to create sub-accounts or child profiles that give a minor their own login credentials. Any account found to belong to a person under 13 will be terminated immediately and its data deleted.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Data portability: receive your data in a structured, machine-readable format (JSON).

To exercise any of these rights, contact us via our support page. We will respond within 30 days.

Push notifications: You can disable these in your device settings at any time.

Marketing communications: We may occasionally send you product updates or feature announcements. Every such email includes a one-click unsubscribe link. Transactional emails (receipts, verification codes, delivery confirmations) are not affected by marketing opt-out.

Account deletion: You can delete your account from within the app under Profile → Delete account.

We do not ask you to provide sensitive personal data such as health information, religious beliefs, or political opinions. However, photos and messages you share within your family may incidentally reveal such information (for example, photos from a medical visit or a religious celebration). We treat all content you upload with the same strict confidentiality standards and never use it for any purpose beyond operating the Service.

Oregon residents have rights under the Oregon Consumer Privacy Act (OCPA), including the right to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of any sale of personal data. We do not sell personal data. To exercise your rights, contact us via our support page.

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, to delete personal information, and to opt out of its sale. We do not sell personal information. California residents may also request disclosure of personal information shared with third parties for direct marketing purposes under the California “Shine the Light” law; we do not share data for such purposes.

Residents of other US states with applicable privacy laws (Virginia, Colorado, Texas, etc.) may exercise equivalent rights by contacting us via our support page.

The Family Edition mobile app does not use advertising cookies or third party trackers. Our website uses minimal first party session cookies required for authentication only. We do not use analytics cookies or advertising pixels.

We may update this Privacy Policy from time to time. When we do, we will post the revised policy with an updated effective date and notify you via email or in app notification at least 14 days before material changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

Questions or concerns about this Privacy Policy? Reach us via our support page.