Privacy Policy

Last updated: October 20, 2026

Hi there! 👋 This policy explains how we handle your data in 12 Months. We’ve tried to keep it simple and honest—your family’s memories are precious, and we treat them that way.

12 Months is operated by Codan Creative AB, Sweden (organisation number 559149-3498), the controller responsible for the personal data described here. Our website is 12monthsapp.com. For privacy questions or requests, contact hello@12monthsapp.com.

📱What We Collect

Things you give us:

• Your email, name, and optional profile photo when you sign up
• The photos, milestones, optional weight and length entries, and written memories you choose to add to your baby books
• Book metadata, including baby names, birthdays or due dates, and who has access
• Messages, feedback and attachments you send to our support team

Memory text, measurements, memory photos and baby profile photos are encrypted on your device before upload. We store their encrypted records and the operational metadata needed to provide the service. Account details, book metadata, optional account-profile photos and support content use a different protection model, explained below.

Original memory photos can contain embedded information such as capture time and location. That information stays inside the encrypted photo when retained. Choose carefully what you share with family or send separately to support.

Things we collect automatically:

• Basic device info (iOS version, app version) so we can help if something breaks
• Account, installation and device identifiers used for authentication, security and notification delivery
• Technical request and security information, such as IP addresses, request times and error categories, processed by us and our service providers
• Crash reports and usage analytics—disabled by default and sent only if you opt in using the separate Settings controls

🔧How We Use It

We use your data to:

• Show you your baby books (obviously!)
• Let you invite family to view or contribute
• Deliver the notifications you enable and necessary service messages, including account verification and device-approval messages
• Operate and secure the service, answer support requests, and improve the app using optional analytics and crash reporting when enabled

Why We May Use Personal Data

Our purposes and legal bases are:

• Your account and requested service: our contract with you covers account administration, delivering the service you request, and related support and service communications.
• Private family books and other people’s information: our legitimate interests are to provide the private storage and sharing that parents and authorised adults request. We consider the interests and rights of the people described, especially children, and use access controls, content encryption and limited administrative access. This is separate from our contract with the adult account holder.
• Security and abuse prevention: our legitimate interests in protecting accounts, users and the service.
• Optional analytics and crash reports: your separate, default-off choices. You can withdraw these permissions in Settings without losing the core service.
• Legal requirements: compliance with applicable duties when we must retain or disclose a particular record.

Acknowledging this policy is not blanket consent for every possible use of information. Weight and length are optional family-book entries, not a diagnosis or health-scoring service. Information revealing someone’s health or other sensitive characteristics can require additional legal safeguards; please do not use support chat as a medical record service.

🤝Who We Share With

We use a few services to make the app work:

We do not sell your personal data or share your baby-book content with advertisers. Our providers process service data under their applicable terms and data-processing arrangements. They may also process technical service information for security, operation and improvement of their services.

🔒How We Protect It

• All data is encrypted in transit and at rest
• Baby-book memory content and baby profile photos also use end-to-end encryption: authorized devices and the people you give access to hold the decryption keys
• Account details, book metadata, optional account-profile photos and customer support content are not protected by that baby-book encryption
• Optional account-profile images use authorised, short-lived access links and protected app caching. Expiring a link does not recall a picture someone has already saved
• Authorized administrators can access account and operational information and support content. The support dashboard does not receive baby-book decryption keys
• Our admin access requires multi-factor authentication

Keep a trusted device or set up recovery and protect your recovery code. We cannot recover encrypted memories without the required keys. Removing access protects future encrypted content but cannot recall copies or keys someone already saved while authorized.

🗑️Data Retention

• Your account & baby books: Kept as long as your account is active
• Account deletion: Access is locked when the request is submitted. You can choose a 30-day cancellation period or begin permanent deletion immediately. Scheduled cleanup and provider retries remove active-service data after it becomes due
• Shared books: Books with another Contributor may remain available to that person. Removing your account does not necessarily remove contributions from a shared book and does not recall copies other people already exported
• Support chats: Archived after 90 days and submitted for hard deletion after 180 days from the latest customer message, together with their service-managed attachments, unless a documented legal hold applies
• Recovery copies: Deleted Storage objects may remain in restricted soft-delete recovery storage for 30 additional days. Firestore point-in-time recovery covers seven days, daily backups expire within 30 days and weekly backups within 14 weeks. These copies are not available through normal app access
• Optional analytics: eligible detailed user and event data has a 14-month retention setting without resetting the user-retention clock on new activity. Aggregated reports and necessary service/security records have separate retention rules
• Support email and security records: kept for as long as needed to handle the request, protect the service or meet applicable record-keeping and legal obligations. Provider logs and recovery copies have their own retention schedules; deleting an app account is not a promise that all provider copies disappear that day

✨Your Rights

You can always:

• View, edit, or delete your data in the app
• Export your baby book photos
• Turn off analytics and crash reporting in Settings
• Delete your entire account (Settings → Account → Delete Account)

Depending on the law that applies and the circumstances, you can request access, correction, deletion, restriction, or a portable copy of your personal data, and object to processing based on legitimate interests. You can withdraw consent for optional processing without affecting the lawfulness of earlier processing. Contact hello@12monthsapp.com; we may need to verify your identity. We normally respond within one month, with any permitted extension explained to you.

You may complain to Sweden’s Integritetsskyddsmyndigheten (IMY) or your local data-protection authority. Applicable local privacy rights remain available. We do not sell personal information or share it for advertising targeted across other businesses’ services.

👶A Note About Kids

12 Months accounts are for adults aged 18 or older, not children. Adults provide the information about a child or other family members; we do not ask children to create accounts. Add and share information only when you have the necessary parental responsibility, permission or other authority. A child or another person described in a book can have privacy rights of their own; contact us about a concern even if you are not the account holder. The app does not diagnose, monitor or score health.

🌍Where Your Data Lives

Selected database, storage and application services run in Europe, and our Stream support-chat project is hosted in Europe. This does not mean all processing is limited to Europe. Some processing occurs elsewhere: Firebase Authentication operates in the United States, and Resend stores transactional email and delivery data in the United States. Google’s global services and our providers’ subprocessors may process information in other countries under their applicable data-processing and transfer arrangements.

Transfers outside the EU/EEA must use an applicable transfer arrangement, such as an adequacy decision or standard contractual clauses with appropriate safeguards. Contact us for information about the arrangement relevant to your data and how to request a copy of available safeguards. We do not make decisions with legal or similarly significant effects about you using automated profiling.

Changes to This Policy

We update this page when our processing changes and show the revision date above. We will provide appropriate notice of material changes and ask for a new permission when required; an updated notice alone does not create consent.