Privacy Policy

Overview

Family Album is developed by 306 Holdings. It is a private, invitation-only photo and video sharing service for families. This policy explains what information Family Album collects, how we use and share it, how long we keep it, and the choices available to you when you use the mobile, tablet, or web experience.

Information We Collect

Depending on how you use Family Album, we may collect and process:

• Account information: your display name, email address, optional profile photo, account identifier, and authentication sessions.
• Family and invitation information: family-space names, memberships, roles, invitation email addresses, invitation status, and related activity.
• Content you share: photos, videos, captions, comments, albums, and information associated with those items.
• Notification information: email and push preferences and a device push token when you enable push notifications.
• Service, device, and security information: limited request, device, platform, log, and diagnostic information used to authenticate requests, prevent abuse, operate the service, and investigate problems.
• Support communications: information you include when you contact 306 Holdings for help, feedback, or a privacy request.

Photos and videos may contain embedded metadata supplied by your device, such as capture time, device details, or location information. Avoid uploading media containing metadata you do not want processed as part of the file.

How We Use Information

We use information to:

• authenticate you, maintain sessions, and operate your account;
• create and manage private family spaces, memberships, roles, and invitations;
• upload, store, protect, organize, display, and deliver family content;
• provide comments, albums, activity, recovery, and account controls;
• send sign-in links, invitations, and notifications you request;
• protect accounts, enforce access controls, prevent abuse, and maintain reliability;
• respond to support and privacy requests; and
• comply with applicable law and protect the rights, safety, and integrity of users and the service.

Who Can See Your Content

Photos, videos, captions, comments, albums, and related activity are visible to members of the family space where you share them. Family-space owners can manage members and access levels. Contributors may add content; view-only members can view content available to the space. A person who accepts a valid invitation can enter that family space, so do not forward an invitation to someone you do not want to join.

306 Holdings personnel and service providers may access information only when reasonably needed to operate, secure, troubleshoot, or support the service, comply with law, or respond to a valid request. Family Album does not make family content publicly discoverable.

Camera, Photo Library, Microphone, and Notifications

If you choose to capture or select media, the app may request access to your camera or photo library. The microphone may be used when you record video with sound. These permissions are used only after you choose the related feature and can be changed in device settings.

Push notifications are optional. If enabled, Family Album registers a device push token and uses the notification services provided by Expo, Apple, or Google. Email notification preferences are stored per family space. Notification content may appear on a locked screen depending on your device settings.

Authentication and Email

Family Album uses passwordless email sign-in. When you request access, a time-limited, single-use sign-in link is sent to the email address you provide. Authentication records and sessions are used to keep you signed in and authorize access to family spaces. Sign-in and invitation emails are delivered through an email service provider.

Service Providers

We use service providers to operate Family Album. These include Cloudflare for application hosting, database, private media storage, security, and delivery; Resend for transactional email; Expo for push-notification delivery; and Apple or Google for device notification delivery and distribution of the mobile app. These providers process information on our behalf under their applicable terms and privacy commitments.

Sale, Advertising, and Cross-App Tracking

306 Holdings does not sell personal information. Family Album does not include third-party advertising and does not use your information to track you across apps or websites owned by other companies for advertising purposes.

Legal and Safety Disclosures

We may disclose information if reasonably necessary to comply with law, legal process, or a valid governmental request; enforce our terms; investigate fraud, abuse, or security incidents; or protect the rights, property, and safety of users, 306 Holdings, or others. If the service or relevant assets are involved in a merger, financing, reorganization, or sale, information may be transferred subject to applicable law and continued privacy protections.

Retention and Deletion

We keep account, membership, invitation, content, and service information for as long as needed to provide and protect Family Album. Deleted posts may remain recoverable for up to 30 days before permanent deletion. Staged or abandoned uploads may be removed earlier. Backups and security records may persist for a limited period after deletion.

You can permanently delete your account from You → Your account → Delete my account or through web account management. Account deletion removes your profile, sessions, memberships, comments, posts, and media according to the service's deletion process. We may retain limited records where required for security, fraud prevention, dispute resolution, legal compliance, or the establishment or defense of legal claims.

Your Choices and Rights

• Update your display name and profile photo from account settings.
• Change email and push-notification preferences for each family space.
• Delete posts, leave a family space, or ask an owner to change your access.
• Revoke camera, photo-library, microphone, or notification permissions in device settings.
• Permanently delete your account in the app or through web account management.
• Contact us to request access, correction, deletion, or another privacy right available where you live.

We may need to verify your identity before completing a privacy request. Some requests may be limited where the law permits or requires us to retain information.

Security

Family Album uses authenticated sessions, private media storage, encrypted HTTPS connections, and family membership checks intended to protect information. Native sessions are stored using platform secure storage, and web sessions use protected cookies. No system can be guaranteed completely secure, so choose invitations carefully, protect access to your email and devices, and contact us if you believe your account has been compromised.

Children

Family Album is not directed to children under 13, and children may not create accounts unless permitted and supervised by a parent or legal guardian under applicable law. If you believe a child has created an account or provided personal information without appropriate permission, contact us so we can review the request.

Changes to This Policy

We may update this policy as Family Album, its providers, supported platforms, or legal requirements change. We will post the updated policy on this page and revise the effective date. Material changes will be communicated through an appropriate app, website, or email notice when practical.

Contact

For privacy questions or requests concerning Family Album, contact 306 Holdings at [email protected].