nappi Album

Privacy Policy

Last updated: May 2026

What we collect

When you create an account, we store your email and a password hash. When you upload a photo, we store the photo and the baby's age at the time the photo was taken (which we compute from the photo date and the birthday you told us about). When a family member reacts or comments, we store the reaction or comment with their chosen display name.

What we don't do

We don't sell your data. We don't share photos with advertisers. We don't run an ad business at all. There are no public profiles, no discover feed, and no follower system. Photos are visible only to people you explicitly invite.

Where photos live

Photos are stored on Supabase, our backend provider. Connections to the backend are encrypted in transit. Photos are stored at rest with the storage provider's standard encryption.

Family invites

When you invite someone with a link, the link is a long random token. Anyone with the token can view the album. If you suspect a link has been shared too widely, you can revoke it in the app. Revoking a link does not delete reactions or comments your family already left.

Deleting your data

You can delete individual photos or your entire account from the app. Deleting your account removes your photos and your family invites within 30 days. Reactions and comments from family members are deleted along with the album they were left on.

Children

The album is for parents and family members to share photos of children. It is not for children to use directly. We do not knowingly create accounts for users under 13.

Contact

Questions about privacy can go to [email protected].