Privacy Policy

Last updated: June 10, 2026

Together Family (“Together Family,” “we,” “us,” or “our”) is a private family memory platform. Privacy is the core of our product: your family's content is private by default and is never sold, advertised against, or made public. This policy explains what we collect, why, how we protect it, and the rights you have.

1. Who this applies to

This policy applies to everyone who uses Together Family, including family owners, admins, members, and child accounts (used under the supervision of a parent or guardian — see Section 8).

2. Information we collect

Information you provide

Account information — your name, email address, and profile photo, handled through our authentication provider (Clerk).
Family content — the photos, videos, audio recordings, captions, stories, journals, recipes, milestones, comments, reactions, family-tree details, and documents you choose to add.
Optional location — a place name or coordinates you attach to a moment, used to show it on your private Memory Map. This is only collected when you choose to add it.
Communications — messages you send us for support.

Information collected automatically

Essential cookies— to keep you signed in and remember which family you're viewing. See our Cookie Policy.
Basic technical data — limited log and device information needed to operate the service securely (for example, to prevent abuse). We do not use advertising or cross-site tracking cookies.

3. How we use your information

To provide the service and share content within your family.
To authenticate you and keep your account secure.
To send service notifications you've enabled (for example, a new comment or a time capsule opening).
To respond to support requests.
To detect, prevent, and address abuse, fraud, or security issues.
To comply with legal obligations.

We do not sell your personal information, share it with advertisers, or use your family content to train advertising or third-party AI models.

4. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process your data on these bases: performance of our contract with you (to provide the service); your consent (for optional features like location); our legitimate interests (to keep the service secure and working); and compliance with legal obligations.

5. Who can see your content, and our subprocessors

Your content is visible only to members of your family group. There are no public profiles, public feeds, or public search. We share data only with the service providers that help us run Together Family, under contracts that require them to protect it:

Clerk — authentication and account management.
Neon — our database (stores your text content and metadata).
Vercel — application hosting and file storage (Vercel Blob, where your photos, videos, and documents are stored).

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (such as a merger or acquisition), in which case we will notify you.

6. International data transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

We keep your content for as long as your account and family group are active. You can delete individual items at any time, and deleting your account removes your personal data, subject to limited retention we may need for legal, security, or backup purposes. Backups are purged on a rolling schedule.

8. Children's privacy

Together Family is designed for families, and a child may participate through a child accountcreated and supervised by a parent or guardian who is the family owner or admin. By creating a child account, that adult confirms they are the child's parent or guardian and consents to our collection and use of the child's information as described in this policy, consistent with the Children's Online Privacy Protection Act (COPPA) and, in the EEA/UK, the GDPR rules for children.

Child accounts are not advertised to and their content is never made public.
A parent or guardian may review, edit, or delete a child's information and revoke consent by removing the child account or contacting us.
We do not knowingly allow children to create independent accounts without parental involvement.

9. Your rights

Depending on where you live (including under the GDPR/UK GDPR and the California Consumer Privacy Act), you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your data.
Export a copy of your data (portability).
Object to or restrict certain processing.
Withdraw consent at any time.

California residents have the right not to receive discriminatory treatment for exercising these rights. Because we do not sell or “share” personal information for advertising, there is nothing to opt out of for those purposes. To exercise any right, contact us at privacy@togetherfami.com.

10. Security

We use encryption in transit, access controls, and reputable infrastructure providers to protect your data. No system is perfectly secure, but we work to safeguard your family's memories and will notify you and regulators of a data breach where required by law.

11. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

12. Contact us

Questions or requests about your privacy? Contact us at privacy@togetherfami.com.