Private by default
Trust Center
Trust should be something a family can inspect. These are the current boundaries and commitments behind All Their Days.
Who can see an archive
Only authenticated adults with an active family membership can enter that family archive. Roles separate stewardship, contribution, and viewing. Sensitive records are restricted to stewards, and access can be revoked.
How originals are handled
Chosen originals use private object storage and time-limited signed access. Upload status remains visible until storage and archive metadata agree. Completed originals record a SHA-256 checksum. Interrupted uploads remain in a device recovery queue rather than being presented as safely stored.
What leaves with you
Stewards can create a complete ZIP containing ready originals, structured family information, stable paths, and recorded checksums, plus a smaller JSON index. Annual Stories can be exported as print-ready PDFs. Large-archive export and full restoration are still being tested before public release.
What we do not do
We do not sell family data, run advertising inside the archive, publish children by default, automatically import camera rolls, use facial recognition, or treat health and school records as advice. We do not send child names or landmark details in reminder notifications.
Current infrastructure
Supabase provides authentication, database, and private object storage. Vercel hosts the public website. Expo, Apple, and Google support mobile build, testing, distribution, and store billing. RevenueCat verifies subscription entitlement, and Resend delivers transactional account email from an authenticated sending domain.
Still being proven
Before public launch we are completing large export and restore tests, external invitation testing, final privacy-manifest review, incident monitoring, and an operationally separate preservation copy. We will not describe these controls as complete before they are verified.
Report a concern
Send security reports to security@alltheirdays.com without attaching family content. Send privacy questions to privacy@alltheirdays.com and product support questions to support@alltheirdays.com.