Look What I HavePrivacy
The short version: your family's photos and stories live on a machine your family controls, and we do not read them.
The legal identity, postal address, data-protection contact and
governing law below are marked [TO BE COMPLETED]. This
page is written to be accurate about how the software behaves; the
parts only the operator can state are left blank rather than
guessed.
Where your archive lives
Photos are ordinary files on the machine that runs your family's archive. Stories sit beside them. The database holds where a file is and what is known about it — never the photo itself.
If that machine is in your house or your office, then your photos are in your house or your office.
What is collected
| What | Why | Where it goes |
|---|---|---|
| Photos you add | The archive | Your archive's storage. Nowhere else. |
| Stories — voice and, if the camera is on, video | The point of the product | Your archive's storage. Nowhere else. |
| Drawings on a photo | Shown during playback | Your archive's database. |
| Names and relationships you type | Working out who is who | Your archive's database. |
| Date, place and camera read from a photo's own metadata | Saying when a photo was taken | Your archive's database. Coordinates are never shown on screen and never leave in a shared story. |
| Which device signed in, when, and from what address | Security — noticing a tablet that should not be there | Your archive's database. |
What never leaves the tablet
- Face detection. The small camera window keeps her framed using detection that runs entirely on the tablet. No image, measurement or face data is transmitted for it, ever.
- Photos waiting to be sent stay in the app's own storage until the archive accepts them.
Who can see a story
- Before it is shared: only the person who recorded it. Whoever administers the archive can see that a story exists and when it was made — they cannot play it. That is enforced by the archive, not by policy.
- After it is shared: the family.
- A link sent outside the family: anyone with the link, and anyone they forward it to. A link can be given a PIN and an expiry, and can be revoked — but a link that has been sent cannot be recalled.
Deleting
A deleted story stops being served everywhere immediately, including through links already sent. The story's file is kept and can be restored by the person who made it, because a voice cannot be recorded again and a mis-tap should not be able to end it.
If you need a story genuinely destroyed, ask — it is a deliberate, human step and not a button. To remove an entire family archive, see delete my account.
What we do not do
- No advertising, and nothing is sold to anybody.
- Nothing in your archive is used to train any model.
- No third-party analytics, trackers or advertising cookies on this website.
- We do not read your photos or listen to your stories. If you ask us for help and we need to look at something, we will ask you first and say exactly what we need.
This website
Pages here are plain files. The web server keeps ordinary request logs — address, time, page, and whether it worked — for troubleshooting and abuse. There is no tracking, no cookie banner and nothing to consent to, because nothing is set.
Children
Children appear in family photos, which is the nature of family photos. The archive is private by default and nothing in it is published. Whoever administers the family archive decides what is shared outside it; please think about the children in a photo before sending a link.
Your rights
If your archive is run by your own family, the family controls the data and can export, correct or destroy any of it directly. Where we operate an archive on your behalf, you can ask us for a copy of everything, for corrections, or for deletion — contact below.
Contact
Data protection enquiries: contact us.
Operator: [TO BE COMPLETED]
Registered address: [TO BE COMPLETED]
Governing law: [TO BE COMPLETED]
Last updated: 17 September 2026.