Privacy Policy

Last updated: July 11, 2026

Who we are

This service (“For You Later”) is operated for the purpose of helping families collect and preserve memories. The operator is the person or organization responsible for the deployment you are using (your “host”).

Data we collect

• Account information: name, email address, and password (stored using one-way hashing).
• Optional sign-in: if you use a social login provider, we receive identifiers and basic profile information from that provider according to your choices there.
• Family archive content you add: names or nicknames of children, memory text, photos, audio, and similar uploads you or invited contributors submit.
• Contributor invitations: email addresses you provide to invite others, and tokens used only to grant limited access.
• Technical data: standard server and application logs (for example IP address, user agent, timestamps) needed for security, abuse prevention, and reliability.

How we use your data

• To create and maintain your account, authenticate you, and send service-related email (including verification and security notices).
• To store, display, and back up the memories and media you choose to save in your archive.
• To send invitations and reminders you request to contributors.
• To comply with law, respond to lawful requests, and protect the rights, safety, and security of users and the public.

Children’s information

This product is intended for use by parents and trusted adults who create an archive on behalf of children. We do not knowingly solicit personal information directly from children for marketing. If you believe a child has provided personal information inappropriately, contact us using the address below and we will take appropriate steps.

Third parties

• Hosting: your data resides on servers and storage operated by or on behalf of your host (for example a cloud region you selected).
• Email delivery: transactional email is sent through the SMTP or email API configured for this deployment (for example Mailpit locally, or a provider such as Postmark, Mailgun, Amazon SES, or SendGrid in production).
• Optional OAuth: if enabled, authentication may involve Google, Meta (Facebook), or Apple according to their respective terms and privacy policies.

We do not sell your personal information. We do not use your family photos or stories to train third-party artificial intelligence models.

Cookies

We use a single, strictly necessary session cookie to keep you signed in and to protect your account from cross-site request forgery. We do not use analytics, advertising, or third-party tracking cookies. If this changes in a future version of the product, we will update this section and provide any consent controls required in your jurisdiction.

Retention and deletion

We keep your information for as long as your account exists and as needed to provide the service. You may delete individual memories or entire vaults from the product where those features are offered.

You may permanently delete your account from your profile settings. Deletion removes your account record and associated personal content from active systems according to the product’s deletion flow; residual backups may persist for a limited period consistent with your host’s backup policy.

Export (portability)

Signed-in account holders may request an export of their data from the profile area when that feature is enabled on this deployment. After you sign in, visit your profile to request an export.

Security

We use industry-standard measures appropriate to the service (including encryption in transit, encrypted session cookies where configured, access controls, and separation between accounts). No method of transmission or storage is completely secure.

International transfers

If you access the service from outside the country where servers are located, your information may be processed in that country or other locations your host selects. By using the service you acknowledge that transfer.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain processing of your personal information, and to lodge a complaint with a supervisory authority. Use the contact below to exercise rights connected to this deployment.

Changes

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date.

Contact

Privacy questions for this deployment: hello@foryoulater.com.