Privacy

Your family's moments are not our raw material

Last updated 8 September 2026

QuietAlbum is a private album for the people you invite. Its business is a yearly price, not your data. This page says plainly what we store, where it lives, who else touches it, and what we will never do with it. Questions: hello@quietalbum.eu.

The promises

• We do not train AI on your content, and we do not mine it. Not ours, not anyone's.
• We never sell your content or your data. There are no ads and never will be. The price is what pays for the service.
• We do not use your content in marketing unless we have asked you and you have said yes - for that specific photo, story or quote, in writing. No answer means no.
• No face recognition, no profiling, no discovery. An album exists only for its members. To everyone else it is not blurred or locked; it is simply not there.
• Nobody at QuietAlbum looks at your albums. The exception is a problem you report to us and ask us to fix, and then only as far as fixing it requires.
• You can always leave with everything. Every member can export an album as a zip of original files plus a plain description of posts, comments and reactions.
• Erasure means erasure. When you delete an album or your account, the content is gone from our systems - the originals, the resized copies, the rows in the database.

What we store

• Your account: email address, the name you choose, and any per-album nickname. No password - sign-in is a one-time link or code sent to your email.
• Your albums: posts, dates, tags, photos, videos and audio clips as uploaded (full quality, never recompressed), plus the smaller display copies we make from them. Comments and reactions, with who wrote them and when.
• How often something is opened: each photo, video, clip or note carries a count of how many times it has been opened, day by day - so that we can show an album's owner which moments the family comes back to. The count is all we keep. Not who opened it, not when you looked, not whether you looked at all. Nobody can ever be shown who has seen a picture, because we do not know.
• Membership: which albums you belong to, your role in each, and invite links you create. Notification preferences.
• Notifications, if you turn them on: an address for each device that should be told - a browser's push endpoint, or the token a phone gets from Apple or Google - and a short note of what browser or app it is, so you can tell your devices apart. A notification carries the same few words an email would: who posted, in which album, how many things. Never a photo, never what anyone wrote at length. Switch them off, or sign out, and the device's address is deleted the same moment.
• Billing: which album a subscription or gift covers and its status. Payments are handled by Stripe; we store Stripe's identifiers, never card numbers.
• Waitlist: if you joined the waitlist on this site, your email address, held in our own mail system until you are invited or ask to be removed.
• Feedback you send us: if you write to us from the "Talk to us" page in the app, we keep what you wrote, whether you marked it an idea or something broken, your name and email address so we can answer, the page you were on, and which browser you used. It reaches the people who build QuietAlbum and nobody else. Nothing from your albums is attached.
• Why you left, if you tell us: the account-deletion page asks one optional question - why you are leaving, and anything you want to add. If you answer, we keep the answer without your name, your address or your album names, alongside only how long you had been with us and how much was in the account. It cannot be traced back to you, which is why it can outlive the account itself.
• Whether you are willing to be interviewed: we ask, at most twice, whether we may call you for twenty minutes to see how you use QuietAlbum. We store your answer and when you gave it - nothing else. Yes means we may write to ask for a time; you can decline then, and change the answer whenever you like on your account page. Saying no, or never answering, changes nothing about your account.
• Technical: one session cookie so you stay signed in. Our servers keep no access logs with your IP address. There are no trackers, no advertising pixels and no third-party scripts anywhere.
• Understanding the product: to see where the app works and where it does not, it notes a handful of milestones - an account was created, an album started, an invite accepted, a subscription began. Each is a single event with an internal account id and a few labels like the album template or the role; never your email, your name, a photo or a word you wrote. This marketing site counts page views the same way: a random id per page load and the page path, no cookie. If you found us through an ad, the campaign and search term that brought you are noted on that page view and, if you sign up, on your account - never Google's click id, so the two can never be joined. Once a day the app adds one number to that: how many times anything at all was opened across every album, and how many different items that was. No ids, nobody attached - a single figure for a chart. All of it lands in our own PostHog project in Frankfurt - an analytics database we rent from them, in the EU. PostHog acts as our data processor under a data processing agreement: it handles the data only on our instructions, may not sell or share it, and its staff are bound by confidentiality. Nothing in it builds a profile of you.

Where it lives

Everything is stored and processed in data centers in the European Union, under Swedish and EU law (the GDPR), by Stenite AB in Sweden. We use a short list of providers to run the service. Some of them, Supabase, Amazon Web Services and PostHog, are US-owned companies operating EU regions; we use them for the database, for delivering email and for analytics, never for your photos, videos or audio. Our support mailbox, hello@quietalbum.eu, is a Google Workspace account, so an email you send us is handled by Google like any other email to a Gmail address. Apple and Google are otherwise involved only if you install the QuietAlbum app and switch notifications on: a phone can only be reached through the notification service its maker runs, and there is no other route to one.

This list is kept current. We do not share personal data with anyone else, and we do not hand it to authorities unless a valid legal order under EU or Swedish law compels us - in which case we tell you, where the law allows.

Emails we send

Sign-in codes, invitations you or another member trigger, notices about an album's deletion or subscription, and news of new posts in your albums. By default a new post reaches you as it lands - as a phone notification if you have the app, otherwise as a short mail - and comments and reactions on your own things come the same way. Per album you can switch that to a digest (one mail a day at 18:00, or weekly) or off, on your account page.

Now and then we may also email you about our own things - a new feature, or a new product from Stenite AB. A few times a year at most, every one with an unsubscribe link, and never on behalf of anyone else. Your content is never used in those emails without your yes, as promised above.

How long we keep things

• While the plan carrying an album is in its trial or paid: as long as you want it.
• When a subscription lapses: the album becomes read-only - viewing and export keep working - for at least twelve months. Before anything is removed we email every member several times, starting at least 30 days ahead.
• When the owner deletes an album: every member is notified and reminded to export. After 30 days (the owner can cancel in the meantime) the album and all its files are permanently deleted.
• When you delete your account: immediately. Your memberships, comments, reactions and the posts you made are removed; an album you were the only member of goes with you. You are shown exactly what will disappear before you confirm.
• Backups: database backups roll over within days. Media has no separate backup copy, so a deleted file is gone when the delete completes.
• Invite links: each is single-use and expires. The link itself is never stored, only a hash of it, so a leaked database exposes no live invites.
• Waitlist emails: until you are invited or ask us to remove you.
• Feedback you sent: deleting your account deletes it too. The copy that reached our own inbox stays there as ordinary correspondence, the way an email you sent us would; ask and we delete that as well.

We never promise "forever". We promise that you will always be warned in time and can always take everything with you.

Children

Most albums are about children, uploaded by the adults responsible for them. We process that content only on the instruction of the account holder who posted it, treat it as strictly private, and never analyse it. Account holders must be 18 or older.

Photos of your child. If you are a parent or legal guardian and a photo of your child is in an album you are not part of, email hello@quietalbum.eu. We hide the post from every member right away and ask you to prove nothing first unless a request looks like abuse. The person who posted it and the album's owner are told that someone asked, not who, and have 14 days to object; then the post and its files are permanently deleted. If you are in the album, the album's owner can remove any post directly.

Your rights

You can see and change your data in the app, export any album you are a member of, and delete your account yourself. Under the GDPR you also have the right to access, rectify, erase or restrict processing of your personal data, to object, and to receive it in a portable format - email us and we answer within 30 days. You can complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), or to the authority in your own EU country.

Legal bases, for the record: we process your data to provide the service you asked for (contract), to keep it secure, send essential notices and occasionally tell you about our own products (legitimate interest - you can opt out), and, only where you have given it, with your consent - which you can withdraw at any time.

Security

Everything travels over TLS. Media sits in a private bucket that only the app can read, and the app checks your membership on every request. There are no passwords to leak. Access to the servers is by key, not password, and limited to the people who run Stenite AB.

Scanning

We do not scan your content for advertising, training or profiling. If the law ever requires us to match uploads against known child-abuse material, we will say so on this page before it happens, and it will be that and nothing more.

Changes

If we change something that affects you - a new purpose, a new provider - we tell you before it takes effect, in the app or by email. Small edits just move the date at the top of this page.

Data controller: Stenite AB (org. no. 559007-2848), Skärkind Lundby 3, 617 92 Norsholm, Sweden. hello@quietalbum.eu. See also our terms of service.