Privacy Policy

Who is responsible for your data

The data controller is Websave VOF, Dotterbloemkreek 3, 2353 JA Leiderdorp, the Netherlands. For any privacy question or to exercise your rights, contact us at privacy@we-moments.com.

What we collect

• Account data: your email address, display name, chosen language, and password (stored only as a salted hash, never in plain text).
• Content you create: babies’ profiles, photos, videos, captions, milestones, measurements, comments and likes.
• Family graph: the families and groups you belong to, your role, and pending invitations.
• Device data for notifications: a push token for the devices you enable notifications on.
• Minimal technical logs needed to operate and secure the service.

What we do NOT do

• No advertising, no ad targeting, no selling or sharing your data with data brokers.
• No public feed and no discovery. Your archive is visible only to the family members and groups you invite.
• No third-party analytics on the content of your photos or videos.

Why we process it (legal bases)

We process account and content data to provide the service you signed up for (performance of a contract). We process the minimum technical data needed to keep the service secure and running (legitimate interest). Push notifications are sent only with your consent, which you can withdraw at any time in Settings or your device settings.

Where your data is stored

Your account, your family’s content and all media (photos and videos) are stored on servers in the European Union (Hetzner, Germany). All data travels encrypted (TLS). Media is kept in private storage that cannot be read publicly, and is delivered only through short-lived links, after we have checked that you are allowed to see it. Passwords are stored only as a one-way hash.

AI features

This version of we moments has no AI features and sends nothing to any AI provider. If we add them later they will be optional, they will send only text about your child (never your photos or videos), and we will update this policy and tell you before they are switched on.

Who can see your content

Only the people you invite. A moment is visible to the members of its home family plus any groups you share it to. Comments and likes are private to the group they were made in. Our staff do not browse your archive; access to production data is limited to what is strictly necessary to operate and support the service.

How long we keep it

We keep your data for as long as your account is active. When you delete your account, the data you solely own is permanently removed (see below). Content in families you share with others is anonymised rather than deleted, so the archive stays intact for the co-owners.

Your rights

Under the GDPR you can:

• Access and export your data: Settings → Export my data returns a complete machine-readable copy.
• Delete your data: Settings → Delete account permanently removes your account and the families you solely own.
• Rectify inaccurate data: edit it in the app, or contact us.
• Object to or restrict processing, and lodge a complaint with your national data protection authority.

Children’s data

we moments is used by adults (parents and the family they invite) to keep a private record of a child. Accounts are for adults. We treat a child’s data with heightened care, apply data minimisation, and never run third-party content analytics or advertising on it.

Data processors

We rely on a small set of processors, each under a GDPR data-processing agreement: Hetzner (EU hosting and storage), Resend (sending account and invitation emails) and Expo (push notification delivery). We add a processor only when a feature needs one, and update this policy when we do.

Changes to this policy

If we change this policy we will update the date below and, for material changes, notify you in the app. Continued use after a change means you accept the updated policy.

Contact

Questions or requests: privacy@we-moments.com.