Privacy Policy
Last updated: September 26, 2026
Your family's memories are precious and private. This Privacy Policy explains what data KidSay handles and how.
1. Free Tier: Local-Only, Encrypted
On the free tier, everything you enter (kid names, photos, quotes, milestones) stays on your device in your browser's local storage. Before it's saved, it's encrypted with AES-GCM using a key derived from your Family Lock passphrase (via PBKDF2). We never see this data, never transmit it anywhere, and have no server-side copy of it.
2. KidSay Plus: End-to-End Encrypted Sync
KidSay Plus adds optional cloud sync so your memories reach your other devices and invited family members. Encryption happens on your device before anything is sent: our sync servers only ever store and relay ciphertext. Your family passphrase (and the encryption keys derived from it) never leave your device. KidSay's servers cannot read your photos or quotes, even if compelled to try — there is no plaintext copy on our infrastructure.
3. What We Do Collect
For KidSay Plus accounts, we collect an email address (for magic-link sign-in and billing) and standard billing metadata from our payment processor (Stripe). We do not sell your data to anyone.
4. Payments
Subscription payments are processed by Stripe. We never see or store your full card number. Printed book orders are fulfilled by a third-party print partner who receives only what's needed to produce and ship your book.
5. Your Choices
You can export your data (as an encrypted JSON file) or delete it at any time from Settings. If you forget your Family Lock passphrase and Recovery Key, we cannot recover your data — by design, neither can anyone else.
6. Children's Privacy
KidSay is designed for parents and guardians to record memories about their children. KidSay is not directed at children and is not intended for use by children themselves.
7. Changes to This Policy
We'll update this page if our practices change and update the "Last updated" date above.
8. Contact
Questions about privacy? Reach us at privacy@kidsay.app.