Privacy Policy

Tiny Yearbook Privacy Policy

Tiny Yearbook is a parent-managed family workspace. We store guardian email addresses and names, child profile names and optional email addresses, invitations and access status, private uploaded photos (or a public HTTPS link when a guardian chooses the legacy link option), photo titles and dates, yearbook settings, assignments, and review status.

Newly imported photos are guardian-only unless a guardian explicitly selects a child. When a guardian enables the optional Dropbox picker, the browser loads Dropbox's picker and Dropbox processes that interaction under its own privacy terms. Temporary links for only the selected photos are downloaded in the browser, are not stored or logged by us, and are discarded after the normalized private copies are uploaded. We do not request ongoing access to the guardian's Dropbox library.

Before removing source metadata from an imported image, the browser reads only its available capture-date fields so the private photo library can group it by month. We store the resulting calendar date, not location, camera, or other source metadata. Guardians can correct or clear that date at any time.

For each memory, we store the raw spoken transcript, the child-reviewed caption, OCR text, and the processed handwriting image. In-progress text drafts become inaccessible after 30 days and are deleted during the next workspace cleanup. A processed handwriting draft may also stay in that device's private browser storage for up to 30 days or until the memory is saved. The original audio recording is held only in browser memory and is discarded after transcription.

Speech transcription, grammar checking, photo cleanup, and handwriting recognition run in the browser. Model files are cached on the device. A deployment with self-hosted model files makes only same-origin model requests; otherwise the browser downloads model files from Hugging Face on first use. Child recordings, photos, captions, and handwriting are not sent to Hugging Face or another AI inference service.

We collect content-free reliability events during pilots, such as the workflow stage, success or error outcome, and duration. These events never include captions, transcripts, filenames, links, recordings, or recognized writing. They expire after 90 days and are deleted during the next workspace cleanup.

Guardians can download a family data export and approved yearbook PDFs. Photos and editions use recoverable trash until a guardian permanently purges them. The family owner can permanently delete the workspace from the dashboard; yearbook content, profiles, invitations, and logins are then removed and the organization is disabled. Records required for billing, fraud prevention, or legal obligations may be retained where applicable.

Because this product is made for families with children, an authorized parent or guardian must create and manage the workspace, decide what a child can see, and supervise microphone and camera use. We do not sell personal information or use child content for advertising or model training.

For privacy questions, contact support@yearbook.makefile.fyi.