Children’s Personal Information Rules

For these rules, a child is a person under 14. The app does not make children direct purchasers and has no stranger interaction, public archive search, or child accounts.

When creating an archive, the user must confirm that they are a parent, guardian, or authorized adult and actively agree to the relevant privacy notice. The choices are not preselected, and an archive is not created without them. Do not import, view, or share a child’s photos without authorization.

A new archive stores the consent time, policy version, and guardian confirmation. These records remain with the archive, can sync through iCloud, and can appear in a full ZIP. Recovery may retain consent records from the backup; it does not establish new consent to later policy changes.

An archive may contain a nickname, optional birthday, stage names, dates and their selected precision and confirmation state, stage memory notes, representative photos, ordering, and skipped stages. A full legal name, complete school name, address, identity document, health information, or unrelated information is not required.

For layout, the app stores selected face bounds, eye center, angle, confidence, crop, zoom, and alignment settings. Apple Vision detects subjects on device. It does not identify children, build identity profiles, predict their future appearance, send photos to online AI, or use them to train models. Disabling alignment does not erase existing parameters.

Drafts retain titles, captions, photo selections, templates, colors, and dimensions. Saved or shared JPEG/PDF files, preview thumbnails, and keepsake records may also remain locally. Existing keepsakes can contain copies of stage photos that have since been replaced.

Information is used to record growth stages, arrange photos, resume editing, create keepsakes, back up archives, and sync the selected data space. It is not used for advertising, cross-app tracking, third-party profiles, public recommendations, or model training.

Archives, stage memory notes, photos, alignment data, and consent records can sync through the Apple Account’s private CloudKit database. When the system account is available and archive choices allow it, the app loads the corresponding cloud archives. My Keepsakes, drafts, and reminder preferences do not automatically sync through the app’s CloudKit service. A full ZIP contains the archive and its existing keepsakes and drafts for recovery or migration.

iCloud arrangements and regions may vary with the Apple Account; see the Apple Privacy Policy. These rules do not guarantee one storage region, end-to-end encryption, or permanent storage.

Archives and local keepsakes generally remain until you delete them or remove app data. CloudKit records, external backups, exports, and recipients’ copies are managed separately. Temporary files can remain after interruptions or storage errors; cleanup is not guaranteed to be immediate.

New keepsake drafts hide nicknames and years by default. Photos, uniforms, backgrounds, stage names, titles, and captions may still reveal personal information. Restored drafts and existing keepsakes retain their content and choices rather than being anonymized again. Check the actual output and audience every time.

A full ZIP may contain birthdays, hidden nicknames, stage memory notes, photos absent from the poster, alignment data, consent records, and drafts. It is not anonymous and the app does not add password encryption. Use a trusted storage location.

Files or support information are handed to external destinations when you choose to export, share, or contact support. The iCloud sync described above operates according to system and archive choices. The app cannot recall copies in chats, Photos, Files, or another person’s device.

Import uses the system photo picker without requiring full photo-library access. Saving a keepsake to Photos asks for add-only permission. Declining does not grant other access.

School-start and yearly reminders are off by default and request notification permission only when enabled. They use fixed annual dates and contain no child nickname, birthday, photo, stage, or account information. Deleting a child archive does not disable generic reminders; turn them off separately in reminder settings.

Guardians can view, correct, replace, or delete archive information, export a full ZIP, delete keepsakes, and use the withdraw-consent-and-delete action. Save a usable backup first if you want to keep the memories.

Disabling iCloud does not delete cloud data. Use in-app deletion while sync is available, allow it to complete, and check other devices. Local archive deletion, file cleanup, and cloud propagation are separate steps. Other data spaces, independently restored archives, and external copies must be managed separately.

The children’s information lead, official contact channel, and support retention period appear in the operator details. Verification should be limited to the guardian relationship or identity information necessary for the request. Material rule changes will be explained and new consent obtained when required.

Read the full Privacy Policy for purchases, diagnostics, security, and retention. A draft label means this policy has not yet been approved to take effect.