Ouderliefde.app

Privacy policy

Last updated: August 2026

This is a translation for convenience. If the English and Dutch versions differ, the Dutch version prevails.

1. Who we are

Ouderliefde.app is a service of Ouderliefde (sole proprietorship, Chamber of Commerce (KvK) 42137518), established in the Netherlands. We help parents save and keep their children's memories. Questions about privacy? Email us at privacy@ouderliefde.app.

2. What data we collect

  • Account: email address and password (encrypted)
  • Child details: name and date of birth of your child(ren)
  • Memories: photos, texts and audio recordings that you upload
  • Payments: subscription details via Stripe (we do not store payment card details)
  • Usage: which pages you visit (anonymously, via server logs)

3. What we use your data for

  • Providing the service: storing and displaying memories
  • Email notifications (birthday reminder, Time machine) — only if you have Plus or Premium
  • Handling your subscription via Stripe
  • Customer service for questions or problems

4. AI processing

AI features are switched off by default. You switch them on yourself in Settings and can switch them off again there at any time. If the switch is off, nothing of yours is sent to an AI service.

If you switch them on, we use Anthropic's Claude API to suggest captions for photos, to summarise reports and to read a screenshot containing growth data. In doing so, the image concerned is sent to Anthropic. Anthropic processes it temporarily, does not store it and does not use it to train models. We never include children's names or dates of birth.

5. Sharing with third parties

We never sell your data. We work with:

  • Supabase — data storage and authentication (servers in the EU, SOC 2 Type 2, ISO 27001 via AWS)
  • Vercel — hosting of the application (SOC 2 Type 2)
  • Stripe — payment processing (PCI DSS Level 1 certified)
  • Resend — sending emails (SOC 2 Type 2)
  • Anthropic (Claude) — texts and images, only if you switch on AI yourself; see section 4 (SOC 2 Type 2)
  • Meta (WhatsApp Business Cloud API) — only if you link WhatsApp yourself; see section 7
  • Umami (self-hosted, EU) — cookieless visitor statistics for the website; see section 12
  • Prodigi — only if you order a photo book: the printer receives your name, delivery address and the photos in the book

When you create a share link for grandma & grandpa, the shared memories are visible to anyone with the link. You control which link is active.

6. Google Photos

Ouderliefde lets you import photos that you already have in Google Photos. For this we use the Google Photos Picker API with only the read-only scope photospicker.mediaitems.readonly.

  • You choose yourself, in the official Google Photos picker, which specific photos you want to import. Ouderliefde only sees the photos that you select yourself in that session — we cannot view, search or list your photo library, albums or other photos.
  • The selected photos are downloaded and stored in your own secure storage at Ouderliefde (Supabase Storage, EU), linked to the memory you create.
  • We use this Google user data only to import and display the photos you have chosen. We do not share it with third parties, and we do not use it for advertising or for training AI models.
  • You can revoke the connection at any time via your Google account settings and delete imported photos within Ouderliefde.

Ouderliefde's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Linking WhatsApp (optional)

You can link a WhatsApp number to a child, so that you can send photos, videos, voice messages or short notes to the timeline via WhatsApp. This is a choice: if you don't do it, we process nothing via WhatsApp. What you need to know:

  • We use Meta's WhatsApp Business Cloud API. Everything you send to our WhatsApp number therefore passes through Meta first. WhatsApp messages are end-to-end encrypted, but with a business number that encryption ends at the business endpoint — and that endpoint is hosted by Meta on our behalf. Meta can therefore see the content of those messages and, in addition, processes your phone number and WhatsApp profile name.
  • Meta is an American company. We have configured storage so that message data is kept in the European Union; transfers to the United States may nevertheless take place and in that case rely on the EU-US Data Privacy Framework and the standard contractual clauses of the European Commission.
  • As soon as we have received a message, we retrieve the photo or recording and store it in your own secure storage at Ouderliefde (Supabase Storage, EU). That is where the memory is kept permanently — not at Meta.
  • For each incoming message we keep a technical log (time, sender number, status and reason) so that we can fix faults and prevent misuse. The content of your messages is not included in it.
  • If you invite someone else (for example grandma or grandpa), their phone number and WhatsApp profile name are processed as well. So ask for their permission beforehand. Their submissions first go into a queue that you approve yourself.
  • You can remove a link at any time in the app. Processing then stops immediately; memories saved earlier remain until you delete them yourself. You can also remove a memory via WhatsApp itself, by replying to your message with “delete”.
  • Your use of WhatsApp is also subject to WhatsApp Ireland's privacy policy.

8. Your rights under the GDPR (in Dutch: AVG)

You have the following rights:

  • Access to your personal data
  • Correction of inaccurate data
  • Deletion of your account and all associated data
  • Portability: taking your data with you in a usable format
  • Objection to certain processing

For the last of these you don't need to request anything: in the app, under Settings → Take your data with you, there is a button that downloads everything straight away — the photos as ordinary files, plus all captions, dates, milestones and growth measurements. You don't need Ouderliefde for that.

Email privacy@ouderliefde.app to submit a request. We respond within 30 days.

9. Security

We take the security of your family memories seriously. The following measures are in place:

  • Encryption in transit: all connections are encrypted via HTTPS/TLS
  • Encryption at rest: all data in the database and storage is encrypted with AES-256 (via Supabase / AWS S3)
  • Photo and video storage: stored in secure Supabase Storage buckets, accessible only to your family
  • Access security: Row Level Security in the database ensures that families can never see each other's data
  • Payments: payment card details are never stored on our servers — this is handled entirely by Stripe (PCI DSS Level 1)
  • Infrastructure certifications: our suppliers are certified under SOC 2 Type 2 and/or ISO 27001 (see section 5)
  • Backups: every day we make additional encrypted backups that are kept within the EU, so that your memories are safe even in the event of an outage or error

10. Retention period

We keep your data for as long as your account is active. After your account is deleted, all data is permanently deleted within 30 days. We keep the technical log of incoming WhatsApp messages (see section 7) for a maximum of 90 days.

11. What if Ouderliefde ever stops

You are trusting us with your child's childhood, sometimes for eighteen years. That deserves an honest answer to the question of what happens if we ever stop.

Our commitments to you:

  • You will hear about it in good time. If we were to stop, we will let you know by email at least six months in advance — not with a notice on the last day.
  • Your memories remain yours. You can download everything at any time: photos and videos in their original quality, plus the texts, dates and milestones in a readable file. That already works today, not only once something goes wrong.
  • We never sell your data. Not even in the event of a takeover or bankruptcy. Should Ouderliefde ever come into other hands, these commitments will continue to apply in full and you will be informed beforehand.
  • Nothing is held hostage behind a paywall. If your subscription ends, you can continue to view and export your own memories.

Want a copy now? Go to Settings → Data & privacy and click "Download my data". We recommend doing this every now and then, however good our backups are — the safest copy is one that is kept somewhere other than with us.

12. Cookies

For logging in, we use functional session cookies from Supabase. These are needed to make the app work.

For visitor statistics we use Umami, which we host ourselves on servers in the EU. Umami works without cookies and without personal data: it counts, in anonymised form, how many people visit the website and which pages they view, without tracking individual visitors or building profiles. That is why no consent is needed for this — and that is why you don't see a cookie banner on this website.

The statistics are not linked to your account, not shared with third parties and not used for advertising.

13. Changes

We may amend this privacy policy. In the event of material changes we will inform you by email. The date at the top shows when the latest version was published.

← Back to Ouderliefde.app