Privacy Policy

TinyMyni ("we", "us") runs the website tinymyni.com, where parents and families make baby memory books, cards, posters, printables and digital guestbooks. TinyMyni is operated from Pakistan.

This policy explains what information we collect, why, who we share it with, and the choices you have. Questions: hello@tinymyni.com.

Account information. Your name, email address and password (stored only as a secure hash). If you sign in with Google, see section 3.

Content you add. Everything you put into a memory book, saved design, milestone tracker or guestbook: photos, your child's name and dates, measurements, milestones, notes, letters, family names and other text. You choose what to include, and almost every field is optional.

Saved baby details. If you save them on your account page: your baby's name, date of birth and due date, used to fill in the tools for you.

Purchases. When you buy a book or printable, our payment provider Lemon Squeezy sends us the order number, product, amount, currency, your email address and receipt link. We never receive or store your card details.

Guestbook messages. When someone signs a guestbook, we store the name and message they enter, and a one-way (hashed) version of their IP address used only to limit spam.

Technical information. Our servers handle IP addresses and browser details to deliver the site, keep you signed in, prevent abuse (for example rate limits) and keep basic security logs.

Information that stays on your device. The free tools (age calculator, card and poster makers, collage maker and others) work in your browser. Photos and details you use there are kept in your browser's local storage and are not sent to us unless you choose to save the design to your account.

You can sign in with your Google account. When you do, Google shares with us only your name, email address and profile picture, and confirms that your email address is verified (the standard "openid", "email" and "profile" permissions). We do not ask for access to your Gmail, Google Drive, Google Photos, contacts, calendar or any other Google data.

We use this information only to:

• create your TinyMyni account and sign you in;
• show your name in your account and use your email address for account messages, receipts and any reminder emails you turn on;
• link your Google sign-in to an existing TinyMyni account with the same email address.

We store it in our database alongside your account, together with the sign-in tokens Google issues, until you delete your account. We do not sell Google user data, use it for advertising, share it with third parties except the service providers that host our app (section 5), or use it to develop or train artificial intelligence or machine learning models.

TinyMyni's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove TinyMyni's access at any time from your Google Account's Third-party apps & services page. To delete the information we hold, delete your account (section 8).

• To provide the service: build and show your books and designs, generate PDFs, keep your work saved, and run share links and guestbooks you create.
• To process purchases and unlock what you bought.
• To send emails you need (sign-in, password reset, receipts) and the monthly reminder emails if you turn them on. Every reminder has a one-click unsubscribe link.
• To keep the service safe: prevent spam and abuse, and investigate problems.
• To answer you when you contact us.

We do not sell your information, show ads, use advertising or analytics trackers, use your or your child's photos in public galleries or marketing, or use your content to train AI models. We do not send your photos to AI services.

Where laws such as the GDPR apply, we rely on: performing our contract with you (providing the service), your consent (for example reminder emails, which you can turn off at any time), and our legitimate interests in keeping the service secure.

We use a small number of service providers who process data on our behalf, only to run TinyMyni:

• Cloudflare: domain, network protection and file storage (Cloudflare R2) for uploaded photos.
• Our hosting and database providers: the servers and MongoDB database that run the app.
• Lemon Squeezy: payments, as the merchant of record. Their own privacy policy applies to the checkout.
• Resend: sending our emails.
• Google: sign-in, if you choose it.

What you choose to share. A memory book becomes visible to anyone with its link only if you turn on sharing. Guestbook messages are shown on the guestbook page only after the owner approves them. Share and guestbook pages ask search engines not to index them.

We may also disclose information if the law requires it, to protect people's safety, or as part of a sale or merger of the service (we'd tell you first).

TinyMyni is for parents, guardians and family members aged 18 or over. It is not directed at children, and children should not create accounts. If we learn that a child has created an account, we will delete it.

Memory books naturally contain information about children, added by their parents or guardians. That information is private to the account owner by default, used only to make what you asked for, and deleted when you delete it or your account. Please only add photos and details of children you are a parent or guardian of, or have permission to include.

Connections to TinyMyni are encrypted (HTTPS). Passwords are hashed. Uploaded photos are kept in private storage and only served after we check you're allowed to see them. No system is perfectly secure, but we work to protect your information and limit who can access it.

We keep your account and content until you delete them. Deleted content is removed from our live systems straight away, and from backups as they are routinely replaced. We keep order records as long as tax and accounting laws require. Our providers may process data in countries other than yours; we use providers that protect it appropriately.

• Download your data: on your account page, "Download my data" gives you your account details and all your content as a file.
• Delete your account: also on your account page. This permanently deletes your account, books, designs, guestbooks and photos.
• Edit or remove content any time in the editor and tools.
• Reminder emails: turn them off from the editor, your dashboard, or the link in any reminder.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to how we use your information, and to complain to your data protection authority. Contact us at hello@tinymyni.com and we'll respond within 30 days.

We use one essential cookie to keep you signed in. We use your browser's local storage to save drafts and settings in the free tools on your device. We don't use advertising or tracking cookies. If we ever add analytics, we'll update this policy first.

If we change this policy, we'll update the date at the top, and for significant changes we'll email account holders before they take effect.

Email hello@tinymyni.com with any privacy question or request.