Privacy Policy
Last updated: September 2026
1. Who we are
All Of Your Days Ltd ("we", "us", "our") operates All Of Your Days, a private, invite-only service for storing family memories. We are the data controller for the personal data described in this policy.
- Registered in England and Wales
- Company number: 17429195
- Registered office: 94 Rydal Street, Newton-le-Willows, WA12 8JU, United Kingdom
- Contact: hello@allofyourdays.com
2. What we collect and why
| What | Why | UK GDPR lawful basis |
|---|---|---|
| Account information — email address, password (stored only as a hash by our authentication provider), and where you sign in with Google, the basic profile details Google returns | Create your account, sign you in, secure your account | Performance of a contract |
| Profile information — display name and, if you add one, a profile picture | Show who contributed a memory to the people you invite | Performance of a contract |
| User-generated content — photographs, videos, written memories, memory titles, day names, dates and timeline names | Store and display your memories to you and your invited members | Performance of a contract |
| Information about other people — anyone who appears in, or is described in, the content you upload, and the email addresses of people you invite | Provide the service you asked for and deliver invitations | Performance of a contract; legitimate interests (see section 3) |
| Subscription information — your plan, its status, renewal date, and the customer/subscription identifiers Paddle returns to us | Give you the features you paid for and manage renewals | Performance of a contract; legal obligation (accounting) |
| Notification preferences and push subscriptions | Send the email or push notifications you have chosen | Performance of a contract; consent (push notifications) |
| Technical information — IP address and request metadata processed by our hosting and database providers, plus application error reports | Keep the service running, prevent abuse, fix faults | Legitimate interests (security and service reliability) |
| Support correspondence — emails you send us | Answer you | Legitimate interests |
We do not use third-party analytics or advertising tools, and we do not profile you or make automated decisions about you. See our Cookie Policy for the small amount of browser storage the app uses.
3. Content about other people
All Of Your Days exists so that families can keep memories together, which means the content you upload will often include other people, including children. When you upload that content you decide what is shared and with whom. You are responsible for having the right to upload it, and for the permission of the people involved (or, for children, of a person with parental responsibility). We process that content on your instruction so that you and the members you invite can see it. If you are in that content and want it removed, contact the person who uploaded it, or email us at hello@allofyourdays.com and we will help.
4. Who we share information with
- People you invite. Members of a timeline can see the content in that timeline and the display names of other contributors. Timelines are private and invite-only; they are not publicly listed.
- Paddle.com Market Limited (Merchant of Record). Paddle sells the subscription to you and handles the checkout, payment details, taxes, invoicing, subscription management and refunds. Paddle is a separate controller for that payment relationship — see Paddle's Privacy Notice. We never receive your full card details.
- Lovable (application hosting) and Supabase (database, authentication and file storage). These providers host the application and store your account data and uploaded media on our behalf, as processors.
- Lovable's managed email service, used to send account verification and password reset emails, timeline invitations and notification digests. Emails are queued in our database and delivered through this service on our behalf.
- Professional advisers and authorities where we are required or permitted by law.
We do not sell personal data. OWNER CONFIRMATION REQUIRED: Lovable's email service uses an onward delivery sub-processor; confirm whether you wish to name that sub-processor here individually.
5. International transfers
Some of the providers above are based outside the UK, or process data outside the UK. Where personal data is transferred outside the UK we rely on the safeguards those providers put in place, such as the UK International Data Transfer Addendum, Standard Contractual Clauses or an adequacy decision. OWNER CONFIRMATION REQUIRED: confirm the hosting region configured for your database and file storage if you want to state a specific storage location here — we have deliberately not claimed one.
6. How long we keep information
- Account and content: for as long as your account exists.
- After account deletion: your account, the timelines you own, the memories in them and the associated files are deleted from our live systems when you delete your account. Some records may persist briefly in provider-level backups or logs before they expire.
- Billing records: Paddle retains transaction records for the period its own tax and accounting obligations require.
- Email suppression records: if you unsubscribe, we keep a record of that so we do not email you again.
7. Deleting your account
Sign in and go to Settings → Manage privacy & data. There you can download a copy of your data, or permanently delete your account. Deletion removes your login, profile, the timelines you own and their memories and uploaded files, and your memberships of other people's timelines. Content you contributed to a timeline someone else owns may remain visible to that timeline's members. Any active subscription is cancelled at the end of the paid period.
8. Your rights
Under UK GDPR you have the right to:
- be informed about how we use your data (this policy);
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- data portability;
- withdraw consent where we rely on it (for example push notifications).
You can exercise access and erasure yourself in Settings → Manage privacy & data, or email hello@allofyourdays.com. We aim to respond within one month.
9. Security
Access to your timelines requires an authenticated account, and our database enforces per-user access rules so that members can only read the timelines they belong to. Uploaded memory files are stored in a private bucket and served through short-lived signed links rather than public URLs. Profile pictures and timeline cover images are stored in public buckets, so treat those as visible to anyone with the link. No online service can be guaranteed completely secure; please use a strong, unique password.
10. Complaints
Please contact us first so we can put things right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or by calling their helpline.
11. Changes
We may update this policy. Material changes will be announced by email or in the app.