Privacy Policy

1. What we collect and why

On the website we collect waitlist email and language; for a founding reservation, email, qualifier answers, shown price and wording, campaign tags, and funnel progress. Stripe hosts and stores card details; we receive only a customer reference, card brand, and last four digits. Nothing is charged until your invite opens and we email first. Vercel provides cookie-free page, referrer, country, and device analytics. Functional cookies remember your language for one year and, where used, the shown price for 30 days. In the app we collect account email, family display names and invites, private video letters and metadata, push tokens, anonymous usage events, and crash diagnostics. We do not watch, scan, transcribe, analyse, or train on videos.

2. Children

A parent or legal guardian creates and controls every account. Children do not sign up and we do not knowingly collect personal information directly from a child under 13, or under 16 where that is the local threshold. Kid mode runs on a parent’s device with no child login, profile, friend list, ads, advertising SDKs, or contact outside the invited family. Recordings are made under the parent’s account, and a parent can review or delete them.

3. Legal basis

We rely on consent for the waitlist, reservations, and recordings; legitimate interests to run, secure, and evaluate the service; and performance of the reservation agreement for payments. In Canada we follow PIPEDA and British Columbia’s Personal Information Protection Act. EEA and UK visitors have the GDPR rights in section 7.

4. Who we share it with

We do not sell personal information or share it with advertisers. Providers receive only what their work requires: Vercel for hosting and cookie-free website analytics; Neon for website records; Stripe for card storage and processing; Supabase for app database, sign-in, and private video storage through expiring signed links; Expo for push delivery through Apple and Google; Resend for transactional email; and PostHog and Sentry for anonymous app analytics and crash reports. We may disclose information when legally required or to protect a child or the service.

5. Where it is stored

Providers store data in the United States. Use from Canada, Europe, or elsewhere transfers information there under providers’ contractual safeguards. Transit uses TLS, videos are private objects reached only through expiring links, and production access is limited to the operator.

6. How long we keep it

Waitlist and reservation records remain until launch and account conversion or cancellation, and no longer than 12 months after pre-orders close; uncharged saved cards are then released at Stripe. Video letters remain until a sender or parent deletes them or the family is deleted; unsent recordings are removed within a few weeks. Accounts remain until deletion is requested, after which family data and recordings are removed and backups expire within 30 days. Anonymous analytics and crash data remain up to 12 months.

7. Your rights

Wherever you live, you may ask what we hold, correct or delete it, receive a portable copy, restrict a use, or withdraw consent. Email vvnechyporenko@gmail.com from the account address; we will act within 30 days and confirm. Parents may act for their children. You may complain to the Office of the Privacy Commissioner of Canada, the British Columbia OIPC, or your EEA or UK data-protection authority.

8. Security incidents

If a breach creates a real risk of significant harm, we will notify you and the relevant regulator as required and explain what happened and what we are doing.

9. Changes

We will post changes here with a new effective date. Before a material change to how information is used takes effect, we will email account holders and pre-order customers.

10. Contact