Privacy policy

The short version

• No public profiles, advertising, third-party analytics SDKs, or cross-app tracking.
• We do not sell family information.
• Each family can create one new moment per Monday-to-Sunday week without a paid membership. Membership makes moment creation unlimited and lets the family owner create invitations.
• Little Moments asks for two separate, optional AI permissions. Nothing is sent for enhanced transcription or AI organization and highlights until you allow that specific use.
• Apple first transcribes each voice memory on your iPhone. If you separately allow Enhanced transcription and are online, the recording, Apple transcript, optional child selection, and limited spelling context are also sent to an AI transcription service. It can compare several possible transcripts and prepare one evidence-grounded recommendation.
• If you separately allow AI organization and highlights, the service can use chosen text and minimized family context. After you review the current disclosure, a moment-organization request may also use a deduplicated list of existing shared-family tag labels as vocabulary hints, without their associated stories or people. The saved entry remains your chosen words, and you can review or correct every result.
• Photos are filtered by date on-device. Only photos you explicitly choose are copied to the private journal, and photos are never sent to AI.
• Invited family members are full co-editors and can access shared journal content.
• You can delete content or delete your Little Moments account in the app.

Information we collect

Account and family access

We store a private account identifier and the name and email supplied by your sign-in account, along with your family journal name, membership role, and invitation records. Invitation secrets are shown once; only a cryptographic hash is stored after creation.

Subscription and entitlement

When the family owner starts or restores a subscription, Apple provides signed purchase information. We store the product and plan, original and current transaction identifiers, purchase and expiration dates, renewal and revocation status, the purchasing Little Moments account, and a random app-account token tied to the in-app family journal. We use this to determine whether the owner and active invited members can create unlimited moments and whether the owner can create invitations. We do not receive or store the Apple Account password, full payment-card number, or bank details.

The subscription covers the owner’s invited Little Moments family through our own entitlement system. Apple Family Sharing is not enabled for these products, so we do not use or receive an Apple family-group roster.

We may issue a time-bounded complimentary entitlement for App Review or support testing. We store its family, type, start and expiration dates, revocation date if any, reason, and an operator label for auditability. A complimentary entitlement is not recorded as an Apple purchase, does not charge an Apple Account, and does not renew.

Child profiles

A profile can include first, middle, and last name; pronouns; aliases; birth date; optional life-end date; avatar symbol; optional profile photo; and each family member’s personal birthday-card preference.

Journal content

We store the moments and chapters you choose to save, including transcripts, original audio when saved, titles, stories, dates, tags, milestone suggestions and decisions, linked profiles, recap sources, edit revisions, and selected recap photos.

App operation

We store sync state, schedule preferences, family timezone, and—if you enable notifications—a random installation identifier, Apple Push Notification service token and environment, device timezone, and notification preference. Protected local caches may include recordings waiting to sync and downloaded journal media.

Website and service requests

This website does not use analytics, advertising cookies, or a contact form. Cloudflare necessarily processes request information such as IP address, browser or device information, timestamps, requested URLs, and security or diagnostic events to deliver and protect the website and app service. The website loads licensed Adobe Fonts from Adobe’s Typekit domains, so Adobe can receive the IP address and ordinary browser request information needed to deliver those font files. Blocking those requests does not prevent access to the site’s content because fallback fonts are provided.

How we use information

We use information only to provide, secure, maintain, and improve the features you request. That includes authenticating accounts, sharing one journal among invited members, tracking the family’s weekly free-moment allowance or unlimited subscription access, transcribing recordings locally, carrying out separately permitted AI requests, organizing and syncing memories, preparing optional highlights, delivering generic push notifications, providing support, preventing abuse, and meeting legal obligations.

Little Moments does not use family journal content for advertising or cross-app tracking.

On-device transcription and two optional AI permissions

Your separate choices

Enhanced transcription and AI organization and highlights are separate optional permissions. Each starts as not allowed. Paying for a membership does not grant either permission, and allowing one does not allow the other. We store each signed-in family member’s current choice, the disclosure version, and the dates it was granted or revoked so the service can enforce that choice. You can decline either request or turn it off later in Settings.

Voice transcription

Apple first transcribes voice recordings on the iPhone. Saved child first names and aliases, plus familiar first names of active family members, can be used locally as spelling hints. The original recording and Apple transcript are protected locally before optional online work begins, and the untouched Apple transcript remains available for review.

Only after you allow Enhanced transcription, and when a connection is available, the recording, Apple transcript, an explicit child selection if any, and a limited spelling catalog can be sent securely to an AI transcription service. The catalog can contain child first names and aliases and familiar first names of active family members. The service compares multiple speech candidates and may select one or combine only wording supported by those candidates into the recommendation you review. It is instructed not to summarize, reorder the story, add facts, or treat a catalog name as evidence that someone was mentioned. The server validates a combined recommendation against the candidates and falls back to a complete candidate if validation fails. This processing is separate from the AI organizer described below.

The enhanced-transcription request does not include photos, email addresses, account IDs, family roles, invitations, full family-member names, exact birth dates, or life-end dates. If you decline, Apple’s on-device transcript remains available and you can type or correct the saved wording yourself.

Organizing a new moment

If you allow AI organization and highlights, our service can use the selected transcript, capture time, timezone, any child selected in the capture flow, and family profiles to prepare minimized context. The organizer request can include the transcript; child first names, configured pronouns and aliases; temporary request references; derived age or broad life stage at the event; how the event relates to a child’s lifetime; and a bounded catalog of active family members’ familiar first names as spelling context. The signed-in adult’s familiar name can also help resolve grounded first-person wording. A catalog name is never evidence that someone participated, and a full child name is used only when needed to distinguish profiles.

After you review and allow organizer disclosure version 3, a moment-organization request may also include a bounded, deduplicated list of tag-label strings already used in the shared family journal. Each label is sent by itself: no story, child, author, date, usage count, memory ID, or other identifier is attached to it. The labels are vocabulary hints, not evidence. They help the service reuse a fitting existing label and avoid near-duplicates without preventing a genuinely useful new tag. A version-2 choice continues to authorize only the previously disclosed request and does not authorize sending this tag vocabulary.

The organizer request does not add recordings, photos, raw birth or life-end dates, stable profile IDs, account IDs, email addresses, roles, invitations, family members’ full names, or the family name. Existing tag labels are not accompanied by the moments or people they came from, their dates or counts, or any stable identifier. The organizer may suggest a title, date interpretation, tags, linked child, and possible milestone. The saved journal entry itself remains your selected transcript, and you can correct every result. A milestone is never confirmed automatically.

Creating highlights

With the same AI organization and highlights permission, a highlight request can include the chosen period, a bounded set of selected moment titles, transcript excerpts, dates, milestone labels, temporary references, and the first names and configured pronouns of children linked to those sources. The supplied transcripts are also the only style reference, helping the draft subtly reflect recurring family diction, rhythm, perspective, humor, emotional register, and level of detail. Little Moments does not create or retain a separate voice profile, analyze recordings for style, or add unrelated older memories solely to learn a voice. When the excerpts are sparse or mixed, the draft is instructed to stay clear and neutral. The request does not include recordings, photos, stable IDs, raw profile dates, avatars, aliases, or photo metadata. You can instead dictate a replacement story locally without an AI rewrite.

Automatic highlights are off by default. If the family owner separately permits the organizer and then enables an automatic schedule, that owner’s choice authorizes eligible shared moment text to be used for the family-wide draft. A subscription is not required. Other members can see the resulting shared draft; their own AI permission separately controls AI actions they initiate.

If you do not allow AI

You can still type and save a moment in your own words. Declining enhanced transcription keeps speech processing on the iPhone. Declining the organizer saves a typed or transcribed moment without AI organization. You can also edit an existing highlight or dictate replacement prose for local transcription without an AI rewrite. Features whose purpose is to create an AI suggestion remain unavailable unless that specific permission is allowed.

Provider use

We currently use Cloudflare Workers AI. Cloudflare states that customer content is not used to train models or improve its own or third-party services without explicit consent. We do not promise a fixed inference-retention interval that the provider has not publicly guaranteed.

Audio, photos, and notifications

Audio

Temporary recordings remain on the device during capture and transcription. Original voice audio is uploaded to the private journal only when you save a recorded memory. A recap dictation recording is deleted after local transcription and is not saved as audio.

Apple Photos

Photo dates and thumbnails are read on-device only after you open the period photo browser and grant access. The app does not inspect Favorites, People & Pets, captions, or locations to identify children. For each photo you choose, the iPhone creates a new, orientation-corrected, size-limited JPEG without the source filename, library identifier, creation date, location, camera details, EXIF data, Live Photo motion or audio, or album and People metadata. Only that copy is uploaded. Removing it from Little Moments does not delete the original in Apple Photos.

Push notifications

If you opt in, Apple receives the device token and generic alert text needed to deliver an automatic-highlight notification. The payload does not contain child or family names, story text, photos, email addresses, or account IDs.

Who can receive information

Your invited family

Active invited members are full journal co-editors, not view-only guests. They can view, add, edit, and delete shared child profiles, moments, recordings, photos, milestones, and highlights. Removing a member ends future service access but cannot erase copies they previously downloaded, exported, or shared.

Service providers

We use providers only to run the service: Google and Apple for native sign-in; Cloudflare Workers, D1, R2, and Workers AI for application delivery, private storage, permitted transcription enhancement, and permitted AI inference; Apple for App Store distribution, subscription processing, PhotoKit permissions, and push notifications; and Adobe Typekit for licensed website font delivery. These providers process information under their own terms and privacy commitments.

Legal and safety reasons

We may disclose information if reasonably necessary to comply with law, protect a person’s safety, investigate abuse, secure the service, or protect our rights. If the service is involved in a merger, acquisition, financing, or sale, information may transfer subject to this policy and applicable law. We do not sell personal information.

Retention, security, and deletion

We keep account and journal information while the relevant account, family journal, or content exists and as needed to operate, secure, and comply with legal obligations. Operational and security records may remain for a limited period appropriate to those purposes. We do not promise that every encrypted backup or provider log disappears at the exact moment you press Delete.

When journal content is deleted, access is removed from the app and associated private media is queued for deletion. The service retries temporary storage failures. An owner who deletes their account deletes the shared family journal for every member; a non-owner deletes only their own account and family access, and the shared journal remains.

Account deletion removes the Little Moments account, its Google or Apple provider link, and its active sessions. It does not delete the person’s external Google Account or Apple Account. If Sign in with Apple was used, Little Moments also asks Apple to revoke its authorization. Signing in again creates a new, empty Little Moments account.

Deleting Little Moments or a Little Moments account does not cancel an Apple subscription. The family owner must manage or cancel it in Apple Account subscription settings. A membership ending does not itself delete already-saved journal content, remove existing members, or revoke an invitation that was already issued.

We use access controls, private cloud storage, transport encryption, signed authentication, protected local caches, and scoped family queries. No security measure is perfect, and we cannot guarantee absolute security.

See the exact in-app steps on Delete your account.

Your choices and rights

You can review and correct profile and journal content, edit or delete moments and highlights, separately allow or revoke Enhanced transcription and AI organization and highlights, change personal birthday-card and notification preferences, disable automatic highlights, manage Apple permissions in iOS Settings, remove selected photos, leave or manage a family as permitted by your role, and delete your account in the app.

The family owner can view membership status, restore purchases, or open Apple’s subscription-management settings from Little Moments. Every family can create one new moment per Monday-to-Sunday week without paid access. An active membership is required to generate a new family invitation; existing members and already-issued invitations remain available after membership ends.

Depending on where you live, you may have rights to request access, correction, deletion, or restriction of personal information. Email support@helloreadysetgo.com. We may need to verify the request before acting. We will not discriminate against you for exercising applicable privacy rights.

See Privacy choices for a feature-by-feature guide.

Children’s information

Little Moments is intended for adult family members and is not directed to children under 13 as users. Adults who create profiles or invite family members are responsible for having appropriate authority and consent to add, store, and share information about a child. Do not give a child account credentials or invite someone you do not trust with the full journal.

Changes and contact

We may update this policy as the product or law changes. We will update the effective date here and provide additional notice when required.

Questions or privacy requests can be sent to support@helloreadysetgo.com.

Little Moments is provided by Hello Ready Set Go in San Francisco, California, United States.