Privacy Policy

Information we collect

We collect information that is needed to provide and operate the service:

• Account and profile information: your name, email address, account identifier, profile photo, authentication details, magazine memberships, and notification preferences.
• Family and magazine content: photos, captions, descriptions, dates, image descriptions, contributor information, invitations, and other content you or your family members add to a magazine.
• Pending invitation names: names a magazine owner enters for people they want to invite. Please enter a name only when you have permission to use it for this purpose.
• Recipient and delivery information:a recipient's name and mailing address, along with the magazine and issue information needed to prepare and deliver it. Please only provide another person's information when you have permission to do so.
• Website magazine setup information: your name and email address, recipient names and mailing address, print-plan choice, and pending invitation names when you create a magazine on our website.
• Subscription and transaction information: your plan, renewal dates, consent records, subscription and invoice status, purchase history, and billing references. Stripe handles payment-card and billing information. We may receive limited payment-method details, such as card brand and last four digits, for support, but we do not receive or store complete card numbers or security codes.
• Android waitlist: your email address, optional phone number, text reminder consent, and signup date. We use these details only to tell you when the Android app is available, with one text if you request it. They are not added to marketing lists. Waitlist signups have no automatic expiry. Email privacy@thefamilypress.com to remove your signup.
• Support conversations: messages and screenshots you send through Contact support or email, your email address, and correspondence details. Requests submitted in the app are linked to your account. Follow-ups continue by email.
• Reports and moderation information:the reason and optional details provided when a member reports a post, the reported post, the accounts involved, and the report's date and review status.
• Automatic safety-check information:each new or edited caption and photo, the result of its safety check, and the related post and author information. If the author asks us to review a decision, we also keep the request, the reviewer's decision, and any internal note.
• Notification information: a device notification identifier linked to your account, your notification preferences, and delivery records, used to send the reminders you turn on.
• Diagnostics: limited technical information about the app, your device type, and errors and crashes, so we can fix problems. Server logs may contain technical request and error details.
• Website and network information: our hosting and network providers process information normally sent with a request, such as IP address, browser or device type, requested page, and request time, to deliver and protect the website and service. For signed-in requests, these short-lived logs can associate that request information with the account and session so we can diagnose failures and investigate abuse.
• Website analytics: pages visited, referring sites, browser and device type, approximate time spent, clicks, scrolling, and App Store link selections. We may use session replays to understand website use.
• App analytics and session replay: how you use the app, such as screens viewed, setup progress, and purchases. PostHog also records replays of app sessions, which can include what appears on screen.
• Website ad measurement: when you use our website, we share your activity there (such as page visits, sign-ups, checkouts and purchases, including the order value), technical information about your browser and device, and ad identifiers with Meta and Reddit to measure our ads. Meta and Reddit may also receive your contact information, such as your email address. We use cookies to remember ad clicks for up to 90 days. We turn this off when your browser sends a Global Privacy Control signal.

How we collect information

We receive information:

• directly from you when you create an account, edit a profile, add content, report a post, contact support in the app or by email, or ask us to review an automatic safety decision;
• from family members who invite you or add information to a shared magazine;
• from Apple when you use Sign in with Apple or allow notifications;
• from Stripe when you begin or manage a subscription;
• automatically when you use the app;
• automatically when someone visits a website page; and
• from your browser and website request when you visit our website.

How we use information

We use information to:

• create and secure accounts and authenticate users;
• save and resume signed-in magazine setup on the website;
• let invited family members collaborate on shared magazines and let an owner keep track of invitations that have not been claimed;
• prepare, print, mail, and manage magazine issues;
• send the deadline reminders, shipping updates, and activity reminders you enable;
• manage subscriptions, billing, and payment recovery;
• provide support and respond to privacy requests;
• understand app and website use and interest in downloading the app;
• automatically check new and edited captions and photos before they are shared with family members or included in a printed issue;
• review reports and automatic decisions challenged by an author, enforce our content standards, and protect member safety;
• diagnose failures, protect the service, and improve reliability;
• measure visits, App Store clicks, magazine-setup progress, purchases, and the performance of our ads; and
• comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use Family Press account information or family content for targeted advertising. PostHog provides website analytics, app analytics, and app session replay. PostHog may use cookies or browser storage for website analytics. We do not use this information to personalize the Family Press service.

We save a website design assignment in a first-party cookie for up to 90 days, so you see the same design across pages and return visits. We use tab-local browser storage to remember whether you arrived through a tagged Meta ad for this experiment. Visual previews use tab-local browser storage. We record the assigned design and experiment exposure in PostHog to compare setup and purchase completion.

We use browser storage and a cookie to save your magazine-setup progress and resume after payment. Saved details include your first name, recipient names and relationship, print plan, timezone, and account reference. Depending on the setup flow, your mailing address is also saved in your browser tab for up to seven days. The saved address is cleared when setup finishes, you change accounts, or you close the tab. The payment reference cookie expires after seven days.

Automatic safety checks and reviews

Before a new or edited post is shared with family members or included in a printed issue, we send its caption and photos to OpenAI for automated safety moderation. OpenAI processes this content as our service provider.

Content denied by the automatic check remains private. The author can edit or delete it, or ask us to review the decision. Authorized team members may access the relevant content and safety-check information to investigate the decision and complete a requested review.

We do not use family photos, captions, or safety-check results for advertising, tracking, or training artificial-intelligence models.

When information is shared

We share information only as needed for the purposes described above:

• With your magazine members. People who belong to the same magazine can see shared magazine content and the profile information needed to collaborate. A pending invitation name is visible only to the magazine owner.
• With service providers. Supabase manages accounts and stores magazine content, recipient names, and mailing addresses. Resend handles support email delivery and receipt. Google Workspace processes support email in our team inboxes. Authorized team members can access support conversations and screenshots to answer your request. Apple receives a device notification identifier and the content needed to deliver your selected reminders. Stripe receives the subscription, billing information, and payment information needed to provide hosted checkout, calculate applicable tax, prevent fraud, and manage the subscription. When ad measurement is on, Stripe also stores ad details from your visit so we can report verified purchases to Meta. OpenAI processes new and edited captions and photos for automated safety moderation. PostHog processes website and app analytics and iOS session replay. Our hosting, network, and diagnostics providers support service operations and privacy-minimized diagnostics. On measured website pages, Meta and Reddit receive the limited website events and technical information described above. When an issue is fulfilled, print and mailing providers receive the magazine content and recipient details needed to produce and deliver it.
• For legal and safety reasons. We may disclose information when required by law or when reasonably necessary to protect people, rights, and the security or integrity of the service.
• In a business transaction. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to this policy and applicable law.

We require providers to use information only to perform services for us and to protect it consistently with this policy and applicable law. We do not give service providers permission to use family photos or captions for their own advertising or to train their own artificial-intelligence models.

Legal bases for processing

Where applicable law requires a legal basis, we process information:

• to perform our contract with you and provide the service you request;
• for our legitimate interests in securing, supporting, and improving the reliability of the service and, where permitted, understanding app and website use and measuring advertising performance, balanced against your rights;
• with your consent, when we specifically ask for it; and
• to comply with legal obligations and establish or defend legal claims.

Retention and deletion

We keep account information and live family magazine content while needed to provide the service. Support conversations and screenshots have no automatic expiry. You can request their deletion, and account deletion removes support records associated with your account or its email address from the live service. Copies held by email providers and in team inboxes require separate deletion when handling a deletion request. Other information is kept for limited periods:

• a pending invitation name remains until the invitation is claimed, the magazine owner removes it, or the magazine is deleted. We keep a record of claimed invitations for the life of the magazine to prevent unauthorized reuse;
• app and server diagnostics are automatically deleted after 30 days;
• PostHog analytics events are retained for up to 84 months, and PostHog session replays are retained for 30 days;
• your device notification identifier is removed when you turn reminders off, sign out, delete your account, or stop using the app for 90 days; delivery records are deleted after 30 days;
• our providers' request, function, and security logs are kept for a short period, currently around seven days;
• Meta retains website measurement events according to its privacy policy;
• Reddit retains website measurement events according to its privacy policy;
• post reports are automatically removed after 180 days; an account suspension resulting from a report may remain while the suspension is active;
• safety-check evidence is kept for up to 30 days after a decision, or while a review request is open and for up to 30 days after it closes. Approved magazine content itself remains available as described elsewhere in this policy;
• working copies of information from an incomplete checkout are removed 30 days after the attempt is closed, so you can finish your order from our reminder email;
• Stripe may retain transaction, invoice, tax, dispute, or refund records for the period required by financial and legal obligations; and
• backups and security logs are removed on their normal schedules unless they must be preserved to investigate abuse, fraud, or a legal claim.

You can delete your account in the app from Settings. This removes your account and the information and content linked to it, cancels subscriptions you pay for, and transfers shared magazines you own to a member you choose. It can take up to 24 hours.

We can't recall copies that were already downloaded, printed, or mailed. Account deletion is not a refund request; contact privacy@thefamilypress.com about refunds.

Your choices and rights

You can update your profile and notification preferences in the app, delete eligible posts while their issue is open, and manage pending invitations from Magazine members if you own a magazine. Turning notifications off in the app, withdrawing iOS notification permission in Settings, signing out, or deleting your account all remove your device notification identifier. Depending on where you live, you may also have the right to access, correct, export, delete, restrict, or object to the processing of your personal information, or withdraw consent where processing is based on consent.

To exercise a privacy right, email privacy@thefamilypress.com. We may need to verify your identity before completing a request. This email path remains available for access, correction, export, and other privacy requests; account deletion is available directly in the app. You may also have the right to complain to your local data protection authority.

Do Not Track and Global Privacy Control

If your browser sends a Global Privacy Control signal, website ad measurement stays off. Because Do Not Track does not provide a standard signal, the website does not respond to it.

Children's privacy

An account holder who pays for a magazine must be an adult, and invited family members must be at least 13 to have their own account. We do not knowingly collect personal information from children under 13, and we will delete an account we learn belongs to one. Adults may add family photos or other information that relates to children of any age, and are responsible for having permission to do so. If you believe a child's information was provided improperly, contact us so we can review and remove it where appropriate.

Security

We use technical and organizational safeguards designed to protect information, including encryption during transmission, private photo storage, and restricted access to personal information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International processing

We and our providers may process information in countries other than the country where you live. Where required, we use contractual and other safeguards intended to protect information when it is transferred internationally.

Changes to this policy

We may update this policy as the service or legal requirements change. We will post the updated policy here, revise the date above, and provide additional notice when required.

Contact us

For privacy questions or requests, email privacy@thefamilypress.com.

Itempass BV
Enterprise and VAT number: BE 1022.799.375
Sluisstraat 24 bus 302
3000 Leuven, Belgium