Privacy policy

1. Controller and contact

The controller is Antonio Ivanovski, an individual in North Macedonia. For privacy questions, a copy of personal data, correction or deletion, contact [email protected]. If the service transfers to a business, we will notify you of the new controller and contact details.

2. Data we use

Account data includes email, first and last name, language, an optional photo, preferences, authentication and session data. If you choose Google sign-in, we receive permitted identification and account-linking data, not access to your Google photos or documents.

Books contain information the family supplies about the child and loved ones: names or nicknames, dates, relationships, text, photos, video, voice, contributions, audiences, invitations and book actions. Content can reveal sensitive data such as health or religious events. Include it only if you wish to preserve it and have appropriate authority and a legal basis.

Wishlists involve items, notes, links and information supplied for reservations or notifications. Support involves contact details and messages you send us. Service operation and protection involve technical data such as IP addresses, browser details, request times, sessions and limited error and action records.

3. Purposes and legal bases

We process account data and requested features to provide the service and perform the contract with the adult user. That basis does not replace the necessary authority or other legal basis for data about the child or other people. Where law requires consent, including for certain child or sensitive data, we obtain it from the appropriate person or authorized parent or guardian.

Minimal processing to prevent abuse, protect access and resolve technical issues relies on legitimate interests after assessing the effect on your rights, or a legal obligation where applicable. Legal requests and responses to rights requests are processed to meet applicable duties.

Optional marketing messages and future offer personalization have separate consents. You can withdraw them without losing the basic free book. Withdrawal does not affect the lawfulness of earlier processing.

4. Children and other people in a book

The service primarily serves adults preserving family memories. We normally receive child data from parents, guardians and invited loved ones, rather than directly from the child. Parents and guardians should consider the child’s privacy, interests and maturity when adding and sharing information.

Reader accounts aged 14–17 require a parent or legal guardian permission process before that access opens. Accounts under 14 are not allowed. Minor accounts receive no ads. A child or another person described in content may contact us about their rights without having an account; we assess the request while respecting others’ rights.

5. Who can see content

Private books are not a public gallery. Current co-authors and readers have access according to their role and the particular memory’s audience. Private working drafts belong to their author; readers cannot see Trash or history. Co-authors receive submitted contributions for review and may edit them before acceptance.

Someone with a shared wishlist link can see that list under its name-display settings, but not the book. Opening an external shop link takes you to a separate operator with its own policy.

Authorized service staff access private content only as necessary for your support request, a concrete abuse or security issue, or a legal duty. They do not routinely browse it. For legal requests, we disclose only data appropriately required.

6. Providers and transfers

Cloudflare supplies hosting, database services, photo and audio storage, job processing, security and service-email delivery. Mux processes uploaded video for storage, preparation and controlled playback. Google is used if you choose Google sign-in. Providers may also process their own technical data under their respective roles and agreements.

When the question assistant is enabled, conversation text is sent through OpenCode Go to the configured model provider. The assistant cannot access your book or account. Do not enter memories, child data, passwords, codes, invitations or files in the conversation. Not storing the conversation in our database and requesting “do not store” do not guarantee that an external provider has no records or retention of its own. The active model and important processing terms are explained before use.

Providers may process data outside North Macedonia or your country. Before a transfer, we establish locations, roles and the required legal mechanism, such as adequacy or contractual safeguards. We do not promise storage in one country. New payment, printing, marketplace or AI-import providers will be explained before activation.

7. How long memories are kept

Saved memories remain until deleted. We do not delete saved books solely for inactivity. A private synced draft expires after 30 days without an active open or edit. A previous saved version remains for 30 days after replacement. Trash for memories, removed attachments and rejected contributions lasts 30 days. Simply browsing Trash or history does not extend the deadline.

Pending contributions remain until review or withdrawal. A withdrawn contribution is a private draft with a 30-day inactivity limit. A temporary ZIP archive is available for seven days after completion and may be invalidated sooner if relevant content is deleted. Unfinished temporary uploads are cleaned up according to their use; abandoned submission attachments are cleaned up after 24 hours. Minimal book-action and account-deletion audit records remain for 365 days.

If physical-book import is enabled in the future, original scanned pages will be deleted after review completes or after 30 inactive days. This does not delete content accepted as a memory.

8. Account deletion and copies

Confirmed account deletion removes sign-in data, active sessions, personal preferences, private drafts and unaccepted contributions. You cannot delete an account while you are a book’s last co-author: another co-author must first accept access, or the book must be deleted.

Saved memories and accepted contributions in books retained by other co-authors remain with necessary authorship attribution. A name remains while that attribution is needed. This does not preserve the former account’s access. Statutory erasure or correction requests are assessed separately and are not limited to ordinary app controls.

Permanently deleted data becomes unavailable through the app, and exclusive files are removed in the background with retries on failure. Independent active uses of the same file remain protected. Backups have a separate lifecycle, and we do not promise an unverified backup-erasure deadline. We cannot erase copies already downloaded by someone else. Issued video tokens remain valid until expiry.

9. Other records and security

Acceptance records contain the terms version, language and server time of acceptance. Legal-notice delivery records are separate and do not prove consent. These records are kept as needed for the relationship and applicable legal claims; dispute and statutory retention depends on the particular basis.

Support messages and technical records are kept only as needed to resolve the request, protect the service or meet a specific legal duty. Security records are not used to select ads.

We use permission checks, protected sessions and restricted access to private files. No service can guarantee absolute security. We respond to incidents and give notice in accordance with applicable legal duties.

10. Cookies and visit measurement

Sign-in uses necessary session cookies. Your browser may store language, preferences, temporary recovery text for unsaved work and assistant conversation history locally. This local storage is not a permanent book backup.

On the public site, when configured, Umami Cloud measures visits and selected actions. Our integration does not set analytics cookies, respects Do Not Track and does not send names, emails, messages or free-text answers as event data. Page addresses are transmitted automatically; do not put private data in public-page addresses. Provider terms and any need for consent are assessed separately.

11. Future ads and optional email

We do not sell family data or use private memories to train AI models. Possible future general ads for adult readers will not be selected by reading private stories or analyzing photos, video or voice.

Personalized offers using limited child data, such as an age band or gender, are possible only after legal review and prior separate express permission from an authorized parent or guardian, with the exact fields, purpose, audience and withdrawal explained. They are not enabled by accepting general terms. Advertisers supply offers; selection is internal. Advertisers receive only aggregate results, without family identities, child profiles or tracking pixels. Minor readers receive no ads.

Product-news and partner-offer emails have separate optional consents and easy unsubscribe. Service messages about access, security, invitations, requested reminders and legal changes are distinct from promotion. A sponsor receives no book access.

12. Your rights

Under applicable law you may request information and access, a copy, correction, erasure, restriction or portability, and object to processing. You can withdraw consent and object to direct marketing. Statutory exceptions and protection of others’ rights may apply. We do not make solely automated decisions producing legal or similarly significant effects on you.

Contact [email protected]. We verify identity proportionately and respond within the applicable legal deadline. Personal-data copies are support-assisted; a book archive is not a complete copy of every account record. If you want a copy before deletion, wait for delivery before confirming deletion.

You may submit a request or complaint to North Macedonia’s Agency for Personal Data Protection, azlp.mk, and another competent authority under applicable law. You do not have to waive that option or hold an account with us.

13. Policy changes

We publish the version, effective date, short change summary and previous published versions. Existing accounts receive email notice of initial publication and material changes, without a mandatory renewed-acceptance screen. New purposes requiring consent activate only after that consent is obtained. Macedonian guides interpretation if translations differ, except where mandatory law requires otherwise.