Our privacy commitments

These are product requirements, not marketing copy. If a release would break one, the release does not ship.

• No ads. No trackers. No analytics SDKs. No data sale, ever. Our only revenue is your subscription.
• No passwords. Emailed one-time codes, Sign in with Apple or Google. Nothing to steal, nothing to reuse.
• Kids are a name and an avatar. We do not collect a kid's email, birthdate, school, location, or contacts. Parents create kid profiles; kids' devices are paired by a parent, never signed up.
• Your family's data is invisible to every other family, enforced twice: in the application and again by row-level security inside the database.
• Photos stay private to your family, behind short-lived signed links.
• Export anytime. Your data comes out as ordinary files (JSON plus your photos).
• Delete means delete. Removing your hive removes its data immediately, and backups age out within 30 days.
• Backups are encrypted before they leave the server.
• Feelings are not a leaderboard. Mood sharing is opt-in per moment, and nothing ever shows who has not shared.

Questions about any of this: [email protected]