How we care for your memories

Viewing and contributing to family albums

Memories are visible to the owner and invited members. The owner reviews contributions before sharing them. We do not automatically publish them to search engines or social media.

A personal contribution link lets someone send a memory without an account. It does not let them view existing stories or photos. Referring a family, including through a temple or community, does not grant viewing access.

Keep photos and captions in a friends group

Friends groups require an account with a confirmed email address. Owner invitations are tied to one email address, valid for seven days and usable once. Members can view past and future shared photos and released answers in that group. We do not automatically publish them to search engines or social media.

Every group member can post photos. We store photos, captions, votes, nicknames, visibility and book selections. During submissions you see only your own captions; voting hides writers and totals. Each writer chooses whether their nickname appears after results, and anonymous captions stay anonymous in saved collections. Each member has one vote per photo and cannot vote for their own caption. This is display anonymity, not anonymity from the operator.

Authors and owners can hide photos or captions. Members can report content to the owner. Hiding is not permanent server deletion. Copies already saved and previously issued short-lived photo links cannot be recalled. Contact the operator for deletion, account closure or rights requests.

Group photos are converted to display JPEGs without location metadata and stored privately. We do not retain originals; keep yours separately. Free beta limits are three owned groups, twenty members and thirty photos per group. We do not guarantee a fixed number of years or permanent retention.

Sharing a photo by public link

Only the photo uploader can choose to create its public link after confirming permission from the people pictured and the audience. Anyone with the link can view the photo, its title and public comments without signing in. Links can be forwarded and do not restrict access to invited members. Private group captions and member lists are not included.

Public-page comments do not require registration. You can enter a self-reported nickname or post anonymously; a name is not a verified identity. Comments are visible to anyone with the link. The photo uploader and group organizer can hide comments. Commenters can withdraw their comments while the original tab retains its withdrawal information.

Links expire after 30 days and can be revoked by the uploader or organizer. Creating a replacement invalidates the previous link; its comments do not move to the new page. Hidden photos cannot be viewed through public pages. Previously issued image URLs can remain valid for up to 60 seconds, and saved copies cannot be recalled. Commenting can also be closed separately.

Six ways to play with a photo

Caption this, Name it, What happens next, Said vs. thought, Make it a movie and Rate this moment are edited locally in your browser. We do not upload or store these photos or answers on our server. Closing the page loses the edits.

An image is passed to your device or a selected app when you choose to save or share it. A sample challenge link contains only the format and public sample choice. Your own photos and answers are not included in a link; share a question image to use your own photo. Exchange answers in your usual chat.

Take turns on one phone

Pass the phone lets 2–6 people answer the same photo prompt in turn. Your selected photo and answers are held only in the open page’s memory, not on our server or in browser storage. Closing, reloading or leaving the page loses them.

The turn-by-turn reveal is a game mechanic on one shared device. It does not authenticate each player or secure secrets. If you take a screenshot, agree with the other players on where to share it.

Original photos and display copies

New uploads keep the original, a display copy and a thumbnail in private storage. The page owner can download the original, which may still contain metadata such as the location where it was taken.

Display copies and images prepared for the viewing PDF do not carry over location metadata. We cannot restore the quality of older resized uploads. Please keep your own original files too.

Storage and operator access

We use Supabase for authentication, memories and photo storage. The database is currently configured in the Japan (Tokyo) region. Services used for site delivery and operations include overseas providers; this does not mean all processing takes place in Japan.

Connections use HTTPS and data access is checked against authentication and permissions. The operator dashboard mainly shows usage totals. Authorized staff may access necessary data for support, maintenance or requests such as deletion.

Deletion, leaving and taking a copy

Owners can export a person’s photos and text together as ZIP files. Self-service deletion and account closure are not yet available. Contact us to request deletion, correction, account closure or access to your data. Contributors and people shown in photos can also contact us. We verify identity, authority and the records concerned before responding.

“Keep without sharing” does not delete a contribution. Signing out does not remove records. For account closure, we first discuss other people’s contributions, ownership and the scope of deletion.

Owners can download originals individually, export photos and text as ZIP files, and export selected shared memories to a viewing PDF. ZIP exports include pending and unshared records and split large photo collections into parts. We cannot retrieve copies that other people have already saved.

Keeping memories over time

We do not guarantee a fixed number of years or permanent storage. If the service closes, our policy is to announce it in advance and explain when and how to retrieve data. Operator-managed bulk return and automatic transfer of ownership are not yet available.

We review the requested records, any legally required retention and operational storage when handling deletion. We will explain the applicable deletion timing, including backups, when responding to your request.

Before sharing a photo or story

Explain the intended audience and purpose to contributors, people in photos and people mentioned in stories, and seek their permission. For children’s photos, obtain a guardian’s agreement and respect the child’s wishes too.

Rights to text and photos remain with their rights holders. Private records are not used in marketing, advertising or public examples without separate permission.

AI and printed books

We do not currently offer AI generation or rewriting using your submitted text or photos. Public examples use fictional stories with illustrative real photographs or generated images and illustrations, labeled as examples. If AI features are introduced, we will explain their purpose and any external data transfer in advance.

Printed-book orders and payment are not yet available. We are not currently sending families’ records or shipping details to printers for book production. Before sales begin, we will explain the data shared, production and delivery arrangements, pricing and return terms.