Privacy Policy

Who we are

First & Forever is the data controller for the personal data processed through the app. Contact us at hello@firstandforever.app for any privacy question or request.

What we collect

Account details: your name and email address.

Content you add: photos, drawings, milestones, measurements, letters, voice notes and the details of the people you invite.

Basic technical data needed to keep the service secure and working, such as sign-in sessions.

Why we use it (legal basis)

To provide the service you asked for (performance of a contract, Art. 6(1)(b) GDPR).

To send essential emails such as welcome messages and alerts when a new moment is added, which you can switch off in Settings (legitimate interest, Art. 6(1)(f)).

Information about children is entered by their parent or guardian, who is responsible for consenting on the child's behalf.

What we never do

We do not show ads, sell data, or share your content with advertisers. We do not use your child's photos to train AI models.

Only people you invite can see your child's story.

Where data is stored (EU infrastructure)

Your account, your child's story and all photos, videos and voice notes are stored in the European Union (Dublin, Ireland), encrypted in transit and at rest, under EU GDPR.

We use carefully chosen hosting, email and notification providers acting as processors under data processing agreements. If any of them processes data outside the EU/EEA, it is protected by Standard Contractual Clauses.

Your data belongs to you

Everything you add stays yours. We only process it to run the service for you and the family you invite.

If you delete your account in Settings, your account, profile and access are permanently deleted. If you are the only parent of a story, that story and all its media are permanently erased too.

Waiting list

If you join the waiting list, we use your email only to contact you about access to First & Forever. You can ask us to remove it at any time.

Analytics

On our public pages only (home, sign-in, invites and legal pages) we use Google Analytics to understand how people find us and how many create an account. It never runs inside your child's story.

How long we keep it

We keep your content for as long as your account exists. When you delete content or your account, it is removed from active systems and from backups within 30 days.

Your rights

You can access, correct, export or delete your data, restrict or object to processing, and withdraw consent at any time. Write to hello@firstandforever.app and we will respond within one month.

You also have the right to complain to your local data protection authority (in Sweden: IMY, Integritetsskyddsmyndigheten).

Changes

If we change this policy in a meaningful way, we will tell you by email or in the app before the change takes effect.