The short version
- Your family’s journal is yours. We do not sell it, rent it, or use it to train anybody’s AI models.
- Our primary Supabase database is in Frankfurt, Germany. Some service providers and server processing operate outside the UK and EU.
- Your child’s photographs are never sent to an image-generation service.
- We use hosted services to run the app. With your separate permission for a recording, OpenAI transcribes its audio. You can instead save audio without transcription.
- You can request account deletion inside the app. Deletion is processed in the background; shared-family content may remain for other members as explained below.
The rest of this page is the detail behind those five lines.
Who is responsible for your data
Days and Tales is run by Daniel Pilling, a sole trader based in the United Kingdom, trading as Days and Tales. Under the UK GDPR that makes me the data controller — the person legally responsible for the information described on this page.
You can reach me about anything on this page at hello@daysandtales.com. I read every message myself.
Who this app is for
Days and Tales is for parents, guardians and the family members they invite. It is not designed for, or directed at, children, and a child should not create or hold an account.
The app records information about children, which you provide as their parent or guardian. By adding a child you confirm that you have the authority to share that information, and that anyone else you invite into your family space has your permission to see it.
What is collected, and why
| What | Why it exists | Legal basis |
|---|---|---|
| Your name, email address, account identifier and authentication information | To create your account, sign you in and recover access. Password-based accounts use hashed passwords. Sign in with Apple may provide a private relay email address; we do not receive your Apple password. | Contract — providing your account |
| Your child’s first name and date of birth | To label their journal and work out their age when a memory is saved, which is what lets the app organise a week into a story. | Legitimate interests — providing the private family record requested by a parent or guardian, subject to the child’s rights |
| Journal entries, photographs and voice notes | This is the product. You write or record a moment; the app keeps it and builds the weekly book from it. | Contract for the account holder; legitimate interests for information about other people. Explicit consent is additionally required where we process health information. |
| Optional health records, height, weight and developmental milestones | To draw the growth chart and mark first steps, first words and so on. Recording these is entirely optional. | Consent (Article 6(1)(a)) and explicit consent for health data (Article 9(2)(a)) |
| Your family members and their roles | To control who can access and contribute to a family space, according to their assigned role. | Contract |
| Your subscription and purchase records | To unlock paid features and handle subscription changes and restores. These include account-linked product, transaction and subscription records. Apple handles the payment; we do not receive your payment-card numbers. | Contract |
| Subscription reporting | RevenueCat uses account-linked purchase information to provide subscription reporting and help us understand the paid service. This is separate from advertising tracking. The app's custom development event logger does not transmit its events from the production app. | Legitimate interests |
| Technical and security logs | Error reports and sign-in records, kept so that failures can be diagnosed and accounts protected against misuse. | Legitimate interests |
A note on the health-adjacent bits
Health records, height, weight and developmental milestones can reveal health information. Entering a value alone is not explicit consent. The app asks a parent or legal guardian for a separate, optional consent choice before enabling these dedicated records. We record the choice, its wording version, the account making it and the time. Invited family members can access records according to their family role.
Use Family → Settings (cog) → Health data choices to withdraw. After confirmation, withdrawal removes that child’s dedicated health, measurement and milestone records for the whole family and blocks further use until a new affirmative choice. The rest of the app remains available. Information separately copied into journals, saved books, exports or drafts on another device is not automatically removed by this action. Delete those items separately or email hello@daysandtales.com for help removing or restricting them. Do not include someone else’s sensitive information unless you have authority to do so.
Days and Tales is not a medical device and does not offer medical advice. Growth charts show what you entered, plotted over time. They do not compare your child to a percentile, assess development, or tell you whether anything is normal — deliberately, because that is a job for your health visitor or GP.
What is not collected
- No card or bank details. Apple takes the payment. We never see the numbers.
- No automatic GPS tracking. Places or addresses you type in planner entries or memories may be stored as part of that content.
- No contacts, no address book, no advertising identifiers.
- No cross-app advertising tracking or data-broker sharing. Subscription reporting is used to operate and understand the paid service, not to target advertisements.
Voice notes and transcription
Before transcription, the app offers Allow transcription, Save audio only or Cancel. Allowing transcription sends that recording through our server to OpenAI and returns editable text to your journal. Saving audio only stores the recording with our hosting provider but does not send it to OpenAI. You can also type instead.
OpenAI’s API terms and data-processing rules govern its handling of the request. We do not opt your family content into model training. We do not promise that a third-party service retains nothing: processing, security retention and international transfers depend on the applicable service terms and settings. Do not send sensitive health information for transcription without appropriate authority and consent; the health-record consent is not permission for AI processing.
Photographs and illustrated books
Photographs are stored by our hosting provider and delivered to authorised family members. The app does not send them to an image-generation service. Illustrated characters are built from choices you make on a menu — hair, eyes, glasses — not from a photograph.
The weekly story is composed on your own device from the words you wrote. No text-generation service writes it, and the app is built so that a story page cannot contain a fact you did not record.
Who else is involved
We use the following providers. Their roles vary: hosting and transcription providers process content to provide the service, while Apple also handles its own account and payment obligations. We do not sell your family content.
| Who | What they do | Where |
|---|---|---|
| Supabase | Hosts the database, authentication, private files and server functions. | Primary database: Frankfurt, Germany. Server functions, support and subprocessors may process data elsewhere, including the United States. |
| OpenAI | Transcribes audio when you choose to allow transcription. | Processing may occur in the United States and other service locations. |
| RevenueCat | Manages subscription access and purchase reporting using an identifier linked to your app account. That identifier is not anonymous. We do not send family journal content to RevenueCat. | United States |
| Apple | Distributes the app, handles purchases and provides Sign in with Apple. On account deletion, we attempt to revoke the Apple authorisation using a fresh sign-in. Apple’s own privacy policy also applies to its services. | Global |
Data leaving the UK
Using these providers can involve transfers outside the UK and European Economic Area. A European database location does not mean all processing stays in Europe. Provider data-processing terms include mechanisms such as Standard Contractual Clauses and the UK Addendum where applicable. You can request information about the safeguards relevant to your data at hello@daysandtales.com. See the Supabase DPA and RevenueCat DPA.
How long things are kept
- Your journal — for as long as your account exists. It is a keepsake; deleting it after a period of quiet would be the opposite of the point.
- Account deletion — removes your account and associated contributions, including from families you previously left. Generated pages and pictures containing your memories are removed even when they combine memories from several adults. The shared book itself, unaffected pages and other adults’ original memories remain. Sole-member family spaces identified in the confirmation are deleted in full. A sole owner with other members must arrange ownership before proceeding. We aim to complete processing within 24 hours; the signed-out status screen shows completion. File removal waits for previously issued upload links to expire, so it is not immediate.
- Leave family — removes your membership and access but keeps your account and the complete shared book. It is not account deletion and does not exempt your contributions from a later account-deletion request. Whole-family deletion is a separate owner-confirmed action that removes that family’s content for all members, without deleting their other accounts or families.
- Technical and security records — retention depends on the purpose: resolving an open support or security incident, protecting accounts, and meeting applicable legal obligations. Provider-managed logs also follow the relevant service’s retention settings. We do not keep these records to build advertising profiles.
- Billing and consent evidence — retained where necessary to meet applicable accounting obligations, demonstrate consent or handle disputes. This is distinct from keeping a child’s journal for those purposes.
- Backups — separate restricted recovery copies can outlast live deletion. New local database backups have a 30-day retention period, with exact-file review before cleanup. Older recovery copies are being reviewed separately; we do not claim every copy is automatically purged after 30 days. They are not used as an active journal or for advertising. Restores must remain isolated until completed erasure requests have been reapplied.
Keeping it safe
- Connections use HTTPS and hosted services provide server-side security controls.
- Photographs and audio sit in private storage. They are reachable only through short-lived links issued to you, and cannot be opened by guessing an address.
- Database access rules enforce family membership and role boundaries. These controls reduce risk; they are not a guarantee against every possible compromise.
- Your sign-in session is held in your phone’s secure keychain, not in ordinary app storage.
- No promise here is absolute. No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affects your rights, you will be told, and so will the ICO, within the time the law allows.
Your rights
Under the UK GDPR you can ask to:
- See what is held about you, and get a copy.
- Correct anything that is wrong.
- Delete your account and its contents — see Delete your account, which you can do yourself without asking anybody.
- Take your data elsewhere in a portable format.
- Object to, or ask me to restrict, processing based on legitimate interests.
- Withdraw consent for anything you consented to, without affecting what happened before.
Email hello@daysandtales.com. We normally respond within one month. We may need proportionate identity or parental-authority checks, and will explain any lawful extension or exception. Requests are normally free.
If you are unhappy with how I have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. You are welcome to raise it with me first, but you do not have to.
Cookies and this website
This website is hosted on GitHub Pages. The site's own source has no JavaScript analytics or advertising trackers. GitHub processes website requests for hosting and security. The pages load typefaces from Google Fonts, so your browser also sends Google network information, including your IP address, when requesting those files. These requests do not contain your family journal.
Changes to this policy
We update the date and version when this policy changes. Where a change requires a new notice or consent, we will provide that before relying on the new use. A change to this page alone is not permission to sell data or start an incompatible use.
Contact
hello@daysandtales.com
Daniel Pilling, trading as Days and Tales, United Kingdom.