Privacy Policy

1. Introduction

Family Folio Safe ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal data in connection with our services.

2. Data We Collect

  • Account Information: Email, name, profile information you provide
  • Family Data: Photos, videos, memories, and family member information
  • Usage Data: Login information, pages visited, features used
  • Technical Data: Device type, browser, IP address

We do NOT collect: Behavioral tracking, analytics from third parties, advertising data, location data (unless you share it voluntarily)

3. How We Use Your Data

  • Provide and improve the Family Folio Safe service
  • Send service notifications (e.g., memory reminders, family invitations)
  • Protect against fraud and security issues
  • Comply with legal obligations

We will never: Sell your data, share it with advertisers, or use it for targeted advertising

4. Data Security & Encryption

How your photos are protected:

1. On Upload: Sent over encrypted HTTPS (TLS 1.2+)

2. At Rest: All data stored with AES-256 encryption

3. Access Control: Only authenticated family members can decrypt

4. Authentication: JWT tokens with automatic 30-day session expiry

  • All backups are encrypted and geographically redundant
  • Photos never exist unencrypted on our servers
  • Family membership is verified on every access request
  • No third-party vendors have access to your data

5. Data Retention Policy

  • Active Accounts: Data is retained as long as your account is active
  • After Account Deletion: All personal data is permanently deleted within 30 days
  • Service Logs: Automated logs are retained for 90 days for security purposes only
  • Legal Holds: We may retain data longer if required by law

6. GDPR Compliance (EU Users)

Your Rights:

  • Right to Access: Request a copy of your data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request permanent deletion ("right to be forgotten")
  • Right to Data Portability: Export your data in machine-readable format
  • Right to Object: Object to certain processing activities

Contact us at privacy@familyfoliosafe.com to exercise these rights.

7. COPPA Compliance (Children Under 13)

Family Folio Safe is not intended for children under 13 without parental consent. If you have a child under 13:

  • Parent/guardian must create and manage the account
  • We collect minimal data from children
  • Children cannot share photos outside the family group
  • Parents can review and delete child's data at any time

If we learn we've collected data from a child under 13 without parental consent, we will delete it immediately.

8. Permanent Data Deletion

You can permanently delete your account and all associated data at any time:

  • Go to Settings → Account → Delete Account
  • Confirm your email address
  • All data will be permanently deleted within 30 days
  • This action cannot be undone

9. Third-Party Services

We use the following third-party services:

  • Stripe: Payment processing (PCI-DSS compliant)
  • Base44: App hosting and data management

These services are bound by their own privacy policies. We do not share family photos or memories with any third parties.

10. Contact Us

If you have questions about this Privacy Policy or your data: