Your family record

Privacy

Effective July 27, 2026

The Years We Hold is designed around a simple promise: your family memories are not public content. This page explains what is kept, where it is kept, and the choices available to you.

When you use the app without an account

Child names, birth-month context, remembered days, and written notes are stored in this browser on this device. They are not synced to an account. Clearing this browser’s site data, losing the device, or using a different browser can remove or separate that local record. Anyone with access to the same browser profile may be able to see it.

When you create an account

We use Supabase for authentication and private data storage. The account record includes your email address. Your private family record can include:

child names or nicknames and an optional birth month;
the dates and times of remembered holds;
optional written notes; and
technical records associated with any photo or voice file uploaded during earlier testing.

Account data is protected by account-level access rules. The current product does not accept or display photos or voice files. Any file uploaded during earlier testing remains in private storage and is not available through the product. It remains there until its related remembered day, child, or account is deleted.

Optional evening reminders

If you turn on an evening reminder, we store the time you choose, your current time zone, and the encrypted Web Push subscription details supplied by your browser. Those technical details include a push-service address and encryption keys used only to deliver the notification to the device you connected.

Your browser, operating system, and their push-notification provider process the encrypted notification on its way to your device. Notifications can be visible on a lock screen. Reminder text is general unless you separately choose to include first names.

The reminder is skipped when every child is already marked for that day. You can change its time or turn it off from My account. Signing out disconnects reminders from that device.

Basic product analytics

To understand whether the early product is useful, the app records a small set of events: a page visit, account creation, and the first remembered hold. Those events can include randomly generated browser and session identifiers, the page path, the referring website’s host name, and the event time.

Analytics events do not include your email, a child’s name, notes, remembered dates, or information about earlier test uploads.

How information is used

Information is used only to:

provide and sync your private record;
secure and support your account;
diagnose reliability problems; and
understand broad early-use patterns.

We do not sell private family memories or use them for advertising.

Retention and deletion

On-device information remains until you remove it or clear the browser’s site data. Account information remains while the account is active. You can remove individual children and remembered days inside the app. Removing a related remembered day, child, or account also removes any earlier test media associated with it.

Signed-in users can download their record or remove the active account and its private family data from My account. Infrastructure providers may retain limited backup or security records under their own retention practices. If deletion cannot be completed, use the early-access support channel before adding anything else.

Expired or rejected push subscriptions are removed when the push service reports that the device can no longer receive them. Short, technical delivery records may be kept temporarily to prevent a reminder from being sent twice.

Children’s privacy

The service is for parents and guardians. It is not directed to children, and children should not create accounts or submit information themselves.

Service providers

The service relies on Supabase for accounts and private data storage, on managed web-hosting infrastructure to deliver the website, and on browser and operating-system push services when you enable a reminder. Those providers process information only as needed to operate the service.

Security and your choices

No internet service can promise absolute security. Use a unique password, keep access to your email secure, and sign out on shared devices. Optional written notes are always your choice; the core daily record works without them.

Questions or requests

Visit Support for early-access help, privacy questions, or deletion requests.