Your family's photos
are yours. Only yours.
We built Smalldays for our own families. We'd never put our kids' photos in a system we didn't trust. So we built one we do.
Local by default, your choice to sync
Every photo, video, voice note, and text moment lives on your device by default. You can optionally enable iCloud sync to keep your Apple devices in sync — encrypted by Apple, never accessible to Smalldays.
Photo selection happens on your phone
Finding photos and matching faces happens on your device. Artwork capture saves the artwork for you to describe in your own words. These features do not upload photos for analysis.
48-hour photo deletion
When you choose to print a book, your selected photos are uploaded via encrypted connection. They are deleted from our servers within 48 hours of your book shipping, and our print partners delete production files within 30 days. The one exception is material we are required by U.S. law to report to the National Center for Missing & Exploited Children, which is preserved for as long as the law requires. Before printing, each photo is screened against known illegal imagery: we compute a PhotoDNA hash of the photo on our own servers and send only that hash, never the photo itself, to Microsoft's PhotoDNA service for matching.
Printing and shipping
To produce a book we send the finished pages, along with the recipient's name and shipping address, to the print and fulfillment partners who manufacture and ship it. They may use that information only to produce and deliver your order, and they delete production files within 30 days. Some of our partners produce and ship from outside the United States.
AES-256 encryption
Any data in transit uses TLS 1.3. Any data temporarily at rest during book printing is encrypted with AES-256. We meet or exceed banking-grade security standards.
No tracking, no ads, no data sales
We use privacy-respecting analytics only (no Google Analytics). We don't run ads. We never sell or monetize your data, and we share it only with the partners who print and ship your book and the service providers named in this policy. Our business model is selling printed books.
Explicit consent for everything
Sharing a preview link, continuing a book in a browser, or ordering a printed book uploads selected book assets. Optional iCloud sync uses your Apple account. You choose which of these features to use.
Right to deletion
Request account deletion at any time. We'll remove all account data within 72 hours. Local data on your device is yours and always has been — we never had it.
Transparency
Data lifecycle during book printing.
Data Type
Retention
Notes
Uploaded photos
48 hours after shipping (our servers)
Encrypted at rest (AES-256)
Print production files
30 days (print partners)
Used only to produce and ship your order
Rendered PDF
30 days after delivery
User can re-download in window
Order metadata
Business records
No media — just order details
Moment text/tags
Deleted with photos (48hr)
Only stored for rendering
Payment data
Managed by Stripe
We never store card numbers
Compliance & standards
Built to meet every standard.
Smalldays is designed to comply with COPPA, GDPR, CCPA, and Apple's Kids Category guidelines. We regularly review our practices against evolving standards.
Questions about privacy? privacy@smalldays.app