Skip to main content
Our Privacy Promise

Your family's photos
are yours. Only yours.

We built Smalldays for our own families. We'd never put our kids' photos in a system we didn't trust. So we built one we do.

Local by default, your choice to sync

Every photo, video, voice note, and text moment lives on your device by default. You can optionally enable iCloud sync to keep your Apple devices in sync — encrypted by Apple, never accessible to Smalldays.

Photo selection happens on your phone

Finding photos and matching faces happens on your device. Artwork capture saves the artwork for you to describe in your own words. These features do not upload photos for analysis.

48-hour photo deletion

When you choose to print a book, your selected photos are uploaded via encrypted connection. They are deleted from our servers within 48 hours of your book shipping, and our print partners delete production files within 30 days. The one exception is material we are required by U.S. law to report to the National Center for Missing & Exploited Children, which is preserved for as long as the law requires. Before printing, each photo is screened against known illegal imagery: we compute a PhotoDNA hash of the photo on our own servers and send only that hash, never the photo itself, to Microsoft's PhotoDNA service for matching.

Printing and shipping

To produce a book we send the finished pages, along with the recipient's name and shipping address, to the print and fulfillment partners who manufacture and ship it. They may use that information only to produce and deliver your order, and they delete production files within 30 days. Some of our partners produce and ship from outside the United States.

AES-256 encryption

Any data in transit uses TLS 1.3. Any data temporarily at rest during book printing is encrypted with AES-256. We meet or exceed banking-grade security standards.

No tracking, no ads, no data sales

We use privacy-respecting analytics only (no Google Analytics). We don't run ads. We never sell or monetize your data, and we share it only with the partners who print and ship your book and the service providers named in this policy. Our business model is selling printed books.

Explicit consent for everything

Sharing a preview link, continuing a book in a browser, or ordering a printed book uploads selected book assets. Optional iCloud sync uses your Apple account. You choose which of these features to use.

Right to deletion

Request account deletion at any time. We'll remove all account data within 72 hours. Local data on your device is yours and always has been — we never had it.

Transparency

Data lifecycle during book printing.

Data Type

Retention

Notes

Uploaded photos

48 hours after shipping (our servers)

Encrypted at rest (AES-256)

Print production files

30 days (print partners)

Used only to produce and ship your order

Rendered PDF

30 days after delivery

User can re-download in window

Order metadata

Business records

No media — just order details

Moment text/tags

Deleted with photos (48hr)

Only stored for rendering

Payment data

Managed by Stripe

We never store card numbers

Compliance & standards

Built to meet every standard.

Smalldays is designed to comply with COPPA, GDPR, CCPA, and Apple's Kids Category guidelines. We regularly review our practices against evolving standards.

Questions about privacy? privacy@smalldays.app