Privacy Policy

Introduction

Welcome to ToMyChild ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of the children and loved ones for whom you create timelines. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information we collect

Account information

• Email address
• Display name
• Authentication credentials (securely stored)

Timeline content

• Child or loved one's name and related details
• Text entries, messages, and memories
• Photos, images, and other attachments you upload
• Voice or media recordings you choose to add
• Milestone dates and unlock settings

Usage information

• Device and browser type
• IP address
• Usage patterns needed to keep the service reliable
• Session information and cookies for authentication

How we use your information

• Provide, maintain, and improve the service
• Authenticate your account and manage invitations
• Store and secure your timeline content
• Send service-related emails (verification, invites, important notices)
• Respond to support requests
• Detect abuse and meet legal obligations

Storage and security

We use industry-standard practices to protect data in transit and at rest. Access to timelines is limited to people you invite. No system is perfectly secure; we continually improve our safeguards and ask you to keep your login details private.

Sharing and access control

• Timelines are private by default
• You control invitations and member permissions
• We do not sell personal information or timeline content
• We only share data with processors needed to run the service (hosting, auth, email, AI)

AI-assisted features

Family Table posts and Legal desk questions may be processed by Google Gemini (Google LLC acting as our processor / sub-processor via the Generative Language API) to extract short search keywords and suggested search terms. We send title/body text for that purpose — not private timeline vault content. That text may leave ToMyChild systems for processing by Google under their terms. Do not post highly sensitive personal data in public Family Table or Legal desk threads. Keyword processing can be disabled by removing the Gemini API key from our API environment.

Children's privacy

ToMyChild is built for adults who care for children — parents, grandparents, guardians, and wider family. We do not knowingly collect personal information directly from children under 13. Content is created and managed by account holders and remains locked according to the unlock rules you set.

Your rights

• Access and update your account information
• Manage or remove timeline content you control
• Schedule account deletion from Profile. Deletion starts a 14-day cooling-off period; you can cancel anytime before the scheduled date. After that we permanently remove your login, profile, memberships, and profile uploads (subject to legal retention needs).
• Revoke invitations and adjust member access

Prefer not to use self-serve deletion? Reach us via the contact page (choose Privacy & security) or email support@tomychild.com — we treat that as a working deletion / rights channel.

Governing law

This Privacy Policy is governed by the laws of England and Wales. Courts in England and Wales have exclusive jurisdiction, without limiting any mandatory consumer protections that apply to you.

Cookies

We use cookies and similar technologies primarily to keep you signed in and to remember essential preferences. Disabling cookies may prevent login from working correctly.

Changes

We may update this policy from time to time. Material changes will be reflected on this page with an updated date. Continued use of the service after changes means you accept the revised policy.