Your memories, kept safe
Photos of your children are special and personal. Below we explain honestly and in plain words how we protect them.
Built on proven infrastructure
Supabase (database) · Cloudflare (photo storage) · HTTPS everywhere · Separate, locked backup
How we protect your data
Your photos & memories
Where are my photos stored?
Your photos are stored with Cloudflare, one of the largest and most reliable infrastructure companies in the world. Cloudflare stores your photos encrypted and only delivers them to the app over a secure HTTPS connection. Nobody can intercept your photos along the way.
On top of that, we keep an extra copy of every original photo in a separate, locked place. You can read more about that below under Deleting, restoring & backups.
Can anyone else see my photos?
No, your photos are private by default. Every photo is linked to your account, and the database checks on every request whether you are the one allowed to see it.
To show a photo, the app creates a temporary, secure link that expires on its own after a short time. If someone copies such a link, it stops working later.
To be fully honest: some older photos still use a fixed link without an expiry date. We are working on moving those photos over as well.
Can Little Chapters look at my photos?
We do not look at your photos. Only when you ask us for help can our support team look into your account to solve a problem. That is always logged, so it is clear afterwards who looked and when.
Are my photos shared with third parties or used for advertising?
No, never. Your photos and memories are not shared, sold or used in any way for marketing, advertising or other external purposes. They belong to you alone.
Your account & signing in
How does signing in without a password work?
We use a 'magic link': you tap Sign in, enter your email address, and receive a secure one-time sign-in link in your inbox. Tap the link and you are signed in. No password to make up, remember or type.
The link works once and expires within minutes. After that it is useless to anyone who might intercept it.
Why is this safer than a password?
Passwords are the weakest link in online security. People reuse them, make them too simple, or get tricked by fake sign-in pages (phishing). Big data breaches that leak millions of passwords happen all the time.
With a magic link that risk does not exist. There is no password, so there is nothing to steal or guess. Your security is as strong as your email account, which is guarded by Gmail, Apple or Outlook with all their own security layers such as two-step verification.
In short: you rely on the security of some of the largest tech companies in the world, instead of on a password you have to keep track of yourself.
Is my connection to the app secure?
Yes. All communication between the app and our servers goes over HTTPS, the same encryption banks and governments use. Your data is encrypted while it travels and cannot be intercepted or read by others.
How do I stay signed in?
After you sign in, your phone receives a secure digital key that shows it is you. That key is renewed automatically while you use the app, and expires as soon as you sign out or your session ends. No passwords are stored anywhere, not with us and not on your phone.
Sharing & visibility
How do shared chapters work?
When you share a chapter, we create a unique share link with a long, random code that cannot be guessed. With this link someone can only view. The recipient cannot change, comment on or delete anything. The link is temporary and expires automatically after 7 or 30 days.
Is my profile or timeline visible to others by default?
No. By default all your content, such as photos, chapters and child profiles, is visible only to you. Others see nothing unless you create and send a share link yourself.
Can I revoke or stop a shared link?
Yes. You can stop sharing from the app at any time. Existing share links also expire automatically after the chosen period, so no links are created that work forever.
Deleting, restoring & backups
Why is a deleted photo not removed right away?
Because that protects you in two ways.
For you: everyone taps the wrong button sometimes. A deleted photo therefore stays in Recently deleted for 30 days first, so you can simply undo a mistake. The same goes for your whole account: there is a waiting period. That way a mistake, or someone else briefly using your phone, cannot wipe everything at once.
Against people with bad intentions: suppose someone ever managed to get into an account or into our systems. They still could not make your photos disappear in one go. Deleting always goes through that waiting period, it can be undone, our team is alerted about unusually many deletions, and on top of that we have the locked backup copies that nobody can erase early.
What happens when I delete a single photo?
The photo disappears from your timeline and books right away and goes to Recently deleted (Settings). You can restore it there for 30 days. After 30 days the photo is permanently removed from our database and from the photo storage at Cloudflare.
If you delete a child profile or a book, its photos are no longer silently deleted along with it. The same 30-day waiting period applies to those photos.
What exactly is the extra backup?
For every original photo you upload, we automatically keep an extra copy in a separate place, apart from where the app loads your photos from. That place is locked: for 180 days nobody can delete or change a copy, not even us. As long as your photo exists, we renew that lock regularly.
We use these copies for one thing only: to restore your photos if something ever goes wrong, through a mistake or an attack. They are not used for anything else and are not visible in the app.
What happens when I delete my account?
To delete your account you need to have signed in recently. That way we know for sure it is you. After your request you can no longer sign in.
Within 14 days we delete your profile, child profiles, chapters and notes. Your photos are permanently removed after the 30-day waiting period. That waiting period gives you a chance to change your mind, and protects you if someone else tries to delete your account using your phone.
The locked backup copies cannot be erased early, not even by us. They expire on their own afterwards and are not used for anything until then. This is in line with the GDPR, the right to be forgotten.
How can I request or delete my data?
You can delete your account yourself in the app settings. Do you have questions, want a copy of your data, or need help? Send an email to [email protected]. We reply within 24 to 48 hours.
Being honest: can we be hacked?
Can Little Chapters be hacked?
Yes, and every honest company will admit that. No system is 100% invulnerable. Big names like LinkedIn, Facebook and even government services have been hit by data breaches in the past. That is the reality of the internet.
What we do: we make every point of attack as small and hard as possible. Not with one measure, but with several layers at once. And we make sure that, if something does go wrong, your photos cannot simply be gone.
Which points of attack do you try to close?
We think about security in layers:
No passwords: the biggest leak in most hacks is a stolen or guessed password. We do not store any.
Everyone sees only their own: the database itself checks on every request whether you are the owner. Others do not get to see your data.
Private photos: photos are shown through temporary links that expire on their own.
Safe uploads: every upload gets its own short-lived permission. There is no permanent access to the photo storage.
Less power per key: our systems only have access to what they really need. That way a single leaked key can do as little damage as possible.
Deleting with a waiting period: photos can be restored for 30 days and there is a locked backup that nobody can erase early.
Alarm bells: automated attacks are slowed down, there is a limit on how much can be deleted at once, and our team is alerted about unusual activity.
Checks on our own team: actions in our admin tools are checked again and looking into an account for support is logged.
What happens if something does go wrong?
We will tell you honestly. If we ever discover a security incident that could affect your data, we will let you know as soon as possible. We explain what the problem is, what we are doing about it, and what you can do.
We believe honesty matters more here than saving face. Your trust is worth more than a perfect image.