Our privacy promise
Your memories belong to you.
These aren't marketing lines. They're how the software is built — enforced in the database, not just hidden in the interface.
- 1
Your memories belong to you.
You keep ownership of everything you add. We only store it, show it to the people you choose, and keep it safe. You can download any original, or your whole archive, whenever you like — whether or not you ever pay us.
- 2
We will never hold them hostage.
No paid plan is ever needed to see, download or export what you uploaded. If you stop paying, the extras stop. Your memories don't go anywhere.
- 3
Private is the default.
There is no public feed and no way to browse other families. Pages are marked do-not-index. Photos are delivered through private links that expire in minutes.
- 4
Sharing is one hop, and deliberate.
Share an album with your cousin and your cousin sees it — not their spouse, not their friends. People you share with can't pass it on. Anything marked private stays private, even from family admins.
- 5
We don't look.
Our team sees counts, costs and technical logs — not your photos. The only time anyone here sees a memory is when someone reports it as harmful, and every such view is recorded.
- 6
No ads. No selling. No training ads on your family.
We don't sell data, show ads, or use your photos for marketing. Our analytics count visits to our public pages only, without cookies.
- 7
Faces are opt-in, and stay in the family.
Face recognition is off until a family turns it on. It compares faces only within that family's own archive, never across families, and anyone can ask not to be recognized — which erases their face data.
- 8
AI sees as little as possible.
Most of our intelligence runs on our own servers when you upload. When you ask a question, only a small handful of relevant details goes to an AI provider — never your whole archive — and we never keep a copy of what was asked.
- 9
Deletion means deletion.
Delete a memory and it's gone from Trash after 30 days, original and every copy. Delete your account and, after a two-week change-of-heart window, everything you added is erased.
- 10
Built to outlast us.
Your originals are stored with redundancy in two regions, and your export opens in any photo app — no special software, no us required.
The details are in our privacy policy, AI notice and facial recognition notice.