1. Who we are and what this policy covers
Alabaster Digital LLC, doing business as Smalldays (“Smalldays,” “we,” “us,” or “our”), operates the website at smalldays.com, the Smalldays app, and related book preview, ordering, and support services. This policy covers personal information handled through those services.
You can contact us about this policy or your information at privacy@smalldays.com. Our Terms of Service explain the terms for using Smalldays.
2. Information we collect
- Account and contact information. Information used to sign you in, such as an Apple sign-in identifier or email address, and information you send when you contact support.
- Waitlist information. Your email address, the optional child-stage answer you provide, your signup time, and the IP address associated with the request.
- Content you choose to upload. Selected photos, captions, moment text, book layouts, dedications, and family details included when you share a preview, continue a book in a browser, or order a book. Your full on-device library is not automatically uploaded to Smalldays.
- Order information. Book selections, recipient name, delivery address, contact details, order status, transaction references, and information submitted about a delivery or printing issue. Payment card details are handled by our payment processor; we do not store full card numbers.
- Technical information. Request and upload IP addresses, timestamps, browser or device information, error reports, performance information, and app diagnostic events such as feature timings and error codes (never the content of your moments). If you enable notifications, we use a device notification token to deliver them.
3. On-device storage and optional iCloud sync
Your photos, videos, voice notes, and text moments are stored on your device by default. Photo selection and face matching take place on your device, for the children and any other family members you add. The face data the app keeps for matching stays on your device, or in your own iCloud account if you turn on sync, and is removed when you delete your data in the app; it is never sent to Smalldays. Capturing a moment does not by itself upload your library to our servers.
If you enable iCloud sync, Apple processes the synced information through your Apple account under its own terms and privacy policy. Smalldays does not receive a server-side copy through that sync. Choosing a preview, browser, or printing feature separately uploads the information needed for that feature.
4. How we use information
We use information to sign you in, create and display book previews, render and fulfill orders, process payments, deliver requested emails or notifications, respond to support requests, diagnose service problems, prevent misuse, and meet legal obligations.
Waitlist details are used for signup and launch communications. We do not sell your personal information or use family photos for advertising. Where applicable privacy law requires a legal basis, processing depends on the purpose: providing the service you request, your consent for optional features or communications, legitimate interests in operating and protecting the service, or compliance with law.
6. Website storage and diagnostics
The website uses cookies or similar browser storage where needed for functions such as authentication and maintaining a session. Your browser settings let you manage this storage; blocking it may prevent some features from working.
We use diagnostic tooling to understand errors and performance. When enabled, this includes sampled browser session replays that can record page interactions and technical events to help reproduce a problem. These tools are used for service diagnostics, not advertising. We do not run advertising on Smalldays or use Google Analytics.
7. How long we keep information
Retention depends on the information and the feature you use. The printing-partner periods below describe each partner's own practice and are separate from retention on Smalldays servers.
- Book photos and print files on our servers
- Within 48 hours after your book ships. This covers the uploaded photos, the rendered book files, and the print-ready page images for that order.
- Linen and fabric books at our printing partner
- Production files are deleted within 48 hours of printing; backup copies are purged within 90 days.
- Layflat books at our printing partner
- Production files are deleted after the order is fulfilled, typically within two weeks. The partner may keep order records, such as the recipient name and address, for reprints, disputes, and legal compliance.
- Preview and browser sessions
- Temporary photo uploads and session records expire according to the feature used. Preview photos have a 48-hour availability window; session records generally expire after 30 days.
- Delivery or printing issue reports
- Photos and details you send about a damaged, misprinted, or missing order are kept for 180 days after the issue is resolved, to cover reprints, refunds, and payment disputes.
- Account and waitlist information
- While needed to provide the account or requested communications, subject to deletion requests and the exceptions below.
- Support emails
- Kept for 180 days after the conversation is closed, to cover refunds, reprints, and payment disputes, then deleted. If you delete your account, messages about an order are kept until those 180 days have passed; other messages are deleted right away.
- Order and transaction records
- Retained as needed for fulfillment, accounting, tax, disputes, and other legal obligations. Deleting an account does not erase records we must retain.
Deletion periods are subject to legally required preservation. Information covered by a legal hold is retained for the required period, as explained in section 8. Deleting an account does not delete copies held on your own devices, in your Apple account, or saved by people with whom you shared content.
8. Safety and legal obligations
Screening uploaded photos
Photos uploaded for book production are subject to automated matching against known child sexual abuse material to prevent unlawful content from being printed. This applies to uploaded content, not a search of the photo library on your device.
Screening uses specialist safety services. Depending on the screening method, these services process an image fingerprint (a hash) or the uploaded image. We also process screening results and related upload information, such as timestamps and IP addresses, to handle safety incidents. A match can stop an order from proceeding.
Required reporting and preservation
Where required by law, we report apparent violations to the National Center for Missing & Exploited Children or other appropriate authorities and provide the relevant content and account, upload, or transaction information. We preserve information subject to these obligations for as long as the law requires, even when an ordinary deletion period has ended or an account-deletion request has been made.
For questions about a safety-related restriction, contact safety@smalldays.com.
9. Your choices and privacy rights
You choose which moments to capture, whether to enable iCloud sync, and which content to upload or share. You can manage app permissions and notifications in your device settings and request removal from launch communications by contacting us.
Use the account-deletion option in the app or email privacy@smalldays.com for help. An order still being fulfilled may need to finish before account deletion can be completed. Required business records and information under legal preservation may remain.
Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to certain processing, or withdraw consent. Contact us to exercise a right. We may need to verify your identity, and some requests are subject to legal exceptions. You may also have the right to raise a concern with your local data-protection authority.
10. Children and family information
Smalldays is intended for parents and other adults preserving family memories. It is not intended for children to create accounts themselves. Adults choose which information about children or other family members to include and share, and should have permission to provide it.
If you believe a child has provided information directly to us without appropriate authorization, contact privacy@smalldays.com so we can investigate and address it.
11. Security and international processing
No internet service or storage system can guarantee absolute security. Keep your device and account access protected, and take care when sharing book links.
Our service providers and printing partners may process information in the United States, the United Kingdom, or other countries, including countries outside your place of residence. Applicable data-protection requirements depend on the service and location. Contact us for information about processing relevant to your account or order.
12. Updates and contacting us
We may update this policy when our services or practices change. The date at the top identifies the latest revision. We will provide additional notice of material changes where required by law.
For privacy questions and requests, email privacy@smalldays.com.