Your family's photos
are yours. Only yours.
We built Smalldays for our own families. We'd never put our kids' photos in a system we didn't trust. So we built one we do.
Local by default, your choice to sync
Every photo, video, voice note, and text moment lives on your device by default. You can optionally enable iCloud sync to keep your Apple devices in sync — encrypted by Apple, never accessible to Smalldays.
Photo selection happens on your phone
Finding photos and matching faces happens on your device. Artwork capture saves the artwork for you to describe in your own words. These features do not upload photos for analysis.
48-hour photo deletion
When you choose to print a book, your selected photos are uploaded via encrypted connection. They are permanently deleted within 48 hours of your book shipping. The one exception is material we are required by U.S. law to report to the National Center for Missing & Exploited Children, which is preserved for as long as the law requires. Before printing, each photo is screened against known illegal imagery: we compute a PhotoDNA hash of the photo on our own servers and send only that hash, never the photo itself, to Microsoft's PhotoDNA service for matching.
AES-256 encryption
Any data in transit uses TLS 1.3. Any data temporarily at rest during book printing is encrypted with AES-256. We meet or exceed banking-grade security standards.
No tracking, no ads, no data sales
We use privacy-respecting analytics only (no Google Analytics). We don't run ads. We never sell, share, or monetize your data. Our business model is selling printed books.
Explicit consent for everything
Sharing a preview link, continuing a book in a browser, or ordering a printed book uploads selected book assets. Optional iCloud sync uses your Apple account. You choose which of these features to use.
Right to deletion
Request account deletion at any time. We'll remove all account data within 72 hours. Local data on your device is yours and always has been — we never had it.
Transparency
Data lifecycle during book printing.
Data Type
Retention
Notes
Uploaded photos
48 hours after shipping
Encrypted at rest (AES-256)
Rendered PDF
30 days after delivery
User can re-download in window
Order metadata
Business records
No media — just order details
Moment text/tags
Deleted with photos (48hr)
Only stored for rendering
Payment data
Managed by Stripe
We never store card numbers
Compliance & standards
Built to meet every standard.
Smalldays is designed to comply with COPPA, GDPR, CCPA, and Apple's Kids Category guidelines. We regularly review our practices against evolving standards.
Questions about privacy? privacy@smalldays.app