Privacy Policy

Effective July 19, 2026

Little Years is a private memory time-capsule app for parents. Your family's memories are the entire point of the app — so protecting them is the entire point of this policy. The short version: your data is private by default, we don't run ads, we don't use analytics or tracking, and we never sell or share your information with anyone for marketing purposes.

Information we collect

We collect only what the app needs to work:

Your account: the email address and password you sign up with. Passwords are stored securely hashed; we never see them in plain text.
Your child's profile: the name, birthday, optional profile photo, and optional email address you choose to provide for each child.
Your memories: the letters, notes, photos, videos, milestones, and scheduled future letters you create in the app.
Family newsletter list: email addresses you add for the optional weekly family digest.

That's the complete list. We do not collect analytics, advertising identifiers, location data, contacts, or browsing data. The weekly writing reminder, if enabled, is scheduled locally on your device.

How your information is used

To store and sync your memories across your devices and restore them if you get a new phone.
To deliver memories and scheduled future letters by email to the child email address you provide, when you choose to send them.
To send the weekly family newsletter to the addresses you add, if you turn that feature on.

Emails include the memory's content — including photo or video attachments — precisely so the recipient's inbox holds a permanent copy independent of us.

Children's privacy

Little Years is an app for parents and guardians, not for children. Accounts are created and controlled by adults. Information about children (such as a name, birthday, photos, or a future email address) is provided voluntarily by the parent or guardian who controls the account, and is used solely to organize and deliver that family's own memories. We never use children's information for advertising, profiling, or any purpose other than operating the features described here. Parents can edit or permanently delete this information at any time (see "Your control and deletion" below).

Where your data lives

We use a small number of infrastructure providers to run the service:

Supabase — database, authentication, and encrypted file storage for your memories, photos, and videos.
Resend (with Amazon SES) — email delivery for memories, future letters, and newsletters.
Vercel — hosts the small server that prepares and sends emails.

These providers process data only to provide their service to us. Data is encrypted in transit. Access to your memories is restricted at the database level so that each account can only ever access its own data. A copy of each memory also remains on your device for offline access.

Your control and deletion

You can edit or delete any memory, child profile, or newsletter recipient at any time in the app.
You can delete your entire account in Settings → Delete account & all data. This permanently erases all memories, letters, photos, videos, child profiles, and account information from our systems. This cannot be undone.
Emails already delivered to an inbox you designated (for example, your child's email account) are outside our systems and remain in that inbox — that permanence is a core feature of the app.

Payments

Optional subscriptions are processed by Apple through your App Store account. We never see or store your payment details.

Security

We use industry-standard protections: encrypted connections (TLS), hashed passwords, database-level access rules, and private file storage. No system is perfectly secure, but we've designed the app so that even our own code cannot read another family's data.

Changes to this policy

If we make meaningful changes, we'll update this page and the effective date above. We will never change the fundamental promise: your memories are yours, private by default.

Contact

Questions or requests: support@littleyears.org