Privacy Policy
Last updated: May 2, 2026
Who we are
Atrict is a personal family-memory tracker. This page describes what data we collect, why we keep it, and how to remove it.
What we collect
- Account identity. Your email address (and display name, if your sign-in provider returns one). Used to identify you across devices.
- Family content. Kids you create, memories you post, photos you upload, and metrics (height, weight). This is the core of the product.
- Sharing relationships. Permissions you grant to other people on a per-kid basis, and invites you send (recipient email + role).
- Preferences. Display language and per-kid notification mute settings.
- Operational data. Server logs (request paths, timing, error traces) used to diagnose problems. We do not run third-party analytics or tracking.
Photos
Uploaded photos are processed server-side: EXIF, IPTC, and XMP metadata are stripped (including GPS coordinates), the image is auto-oriented, and three WebP variants are generated. The original upload is discarded after processing.
How we use your data
Your data is used only to operate Atrict — rendering the timeline, enforcing access permissions, sending invitation and memory-notification emails, and serving photos to authorized viewers. We do not sell your data, share it with advertisers, or use it for profiling.
We send transactional emails for two reasons: invitation links you create, and notifications when someone posts a new memory for a kid you have access to. You can mute notifications per kid in Settings.
Cookies
Atrict uses a session cookie for authentication and a culture cookie to remember your preferred language. We do not set tracking, advertising, or analytics cookies.
Retention & deletion
Memories and kids you delete are soft-deleted and excluded from all queries; we do not actively purge them on a schedule. Invitations expire after 14 days. To request full deletion of your account and all associated data, email [email protected].
Third parties
If you sign in with Google, Google sees the act of authentication; we receive only the email address (and display name, if granted). Outbound email is delivered through an SMTP relay; the recipient's email server sees the message.
Contact
Questions or removal requests: [email protected].