Skip to main content
Our Privacy Promise

Your family's photos
are yours. Only yours.

We built Smalldays for our own families. We'd never put our kids' photos in a system we didn't trust. So we built one we do.

Local by default, your choice to sync

Every photo, video, voice note, and text moment lives on your device by default. You can optionally enable iCloud sync to keep your Apple devices in sync — encrypted by Apple, never accessible to Smalldays.

Photo selection happens on your phone

Finding photos and matching faces happens on your device. Artwork capture saves the artwork for you to describe in your own words. These features do not upload photos for analysis.

48-hour photo deletion

When you choose to print a book, your selected photos are uploaded via encrypted connection. They are permanently deleted within 48 hours of your book shipping. The one exception is material we are required by U.S. law to report to the National Center for Missing & Exploited Children, which is preserved for as long as the law requires. Before printing, each photo is screened against known illegal imagery: we compute a PhotoDNA hash of the photo on our own servers and send only that hash, never the photo itself, to Microsoft's PhotoDNA service for matching.

AES-256 encryption

Any data in transit uses TLS 1.3. Any data temporarily at rest during book printing is encrypted with AES-256. We meet or exceed banking-grade security standards.

No tracking, no ads, no data sales

We use privacy-respecting analytics only (no Google Analytics). We don't run ads. We never sell, share, or monetize your data. Our business model is selling printed books.

Explicit consent for everything

Sharing a preview link, continuing a book in a browser, or ordering a printed book uploads selected book assets. Optional iCloud sync uses your Apple account. You choose which of these features to use.

Right to deletion

Request account deletion at any time. We'll remove all account data within 72 hours. Local data on your device is yours and always has been — we never had it.

Transparency

Data lifecycle during book printing.

Data Type

Retention

Notes

Uploaded photos

48 hours after shipping

Encrypted at rest (AES-256)

Rendered PDF

30 days after delivery

User can re-download in window

Order metadata

Business records

No media — just order details

Moment text/tags

Deleted with photos (48hr)

Only stored for rendering

Payment data

Managed by Stripe

We never store card numbers

Compliance & standards

Built to meet every standard.

Smalldays is designed to comply with COPPA, GDPR, CCPA, and Apple's Kids Category guidelines. We regularly review our practices against evolving standards.

Questions about privacy? privacy@smalldays.app