Privacy policy

Effective Date: April 27, 2026                            

This Privacy Policy explains how MoonBow Labs LLC ("Minis," "we," "us," or "our") collects, uses, and shares information when you use the Minis mobile app and related   services (the "Service"). If you have questions, contact us at support@hellominis.com.

  1. Information We Collect                                 

We collect the following categories of information:                                                                    

  - Account information: your email address and (optionally) display name when you sign up. If you sign in with Apple, we receive the email address (real or relay) that Apple shares with us.                                     

  - Profile and child information: the name, nickname, birthdate, and photo of each "mini" (child) you add to the Service. You provide this directly.                      

  - Photos and videos you save: when a photo or video is added to a timeline — by you, by automatic selection, or by an invited family member — we upload that file to our servers so it can be displayed across your devices and to family members you've invited.                                                                                 

  - Audio data: videos you save may include audio tracks. We do not analyze audio.           

  - Subscription information: when you subscribe, we receive subscription status (active, expired, plan, renewal date) from Apple via RevenueCat. We do not receive your full payment details — those stay with Apple.                                                                                        

  - Family and collaboration data: the email addresses you enter to invite collaborators, and the role (contributor / viewer) you assign them.                             

  - Crash and diagnostic data: anonymous error reports collected via Sentry (https://sentry.io). These reports include the type of error and the device model and OS    version, but do not include personal identifiers, your photos, or your timeline content.                                                                                 

  2. Face Recognition                                                                                                                             Minis helps you find photos of your mini in your phone's photo library. To do this, we run face recognition entirely on your device. The mathematical representations of faces used for matching ("face embeddings") are stored locally on your device and are never uploaded to our servers.

Only the photos and videos you save to your timeline — the ones the app picks for each day, plus any you select manually — are uploaded. The rest of your photo library never leaves your device.

                                                                                                                                                                    You can adjust which photos serve as references for face recognition, and clear them, at any time in the app's settings.                                                 

  3. How We Use Your Information                                                                                                        We use the information described above to:

  - Provide the Service: render your timelines, find photos of your mini, generate slideshow videos, and sync content across your devices.                                 

  - Operate paid subscriptions and manage entitlements.

  - Send invitation emails when you invite a family member.                                                           - Diagnose and fix bugs through anonymous crash reporting.                                                    - Communicate with you about your account, security, or material changes to the Service.                                                                                 

We do not sell your personal information. We do not use it for advertising or for cross-app tracking, and we do not allow third parties to do so.                        

  4. Third-Party Service Providers                                                                                                      We use trusted service providers to operate the Service. These providers act on our behalf under contractual data-protection terms and are limited in what they may do with the information.

  - Supabase (https://supabase.com) — database, file storage, and authentication infrastructure.                                                                           

  - Apple (https://www.apple.com/legal/privacy/) — payment processing for in-app purchases, Sign in with Apple.

  - RevenueCat (https://www.revenuecat.com) — subscription state management.                                                                                               

  - Sentry (https://sentry.io) — crash and error reporting. 

  - Resend (https://resend.com) — delivery of invitation emails.                                                                                                           

  5. Sharing With Other Users                                                                                                               When you invite a family member, the email address you provided is used to deliver the invitation. Family members who join one of your timelines can see the photos and videos on that timeline and the names of the children on it. They cannot see your other personal information.

  6. Children's Information                                                                                                                     The Service is not directed to children under 13, and we do not knowingly allow children under 13 to create accounts. Photos of children may appear on a timeline because a parent or guardian has uploaded them. By using the Service, you confirm you are the parent or legal guardian of any child whose photos you upload, or that you have the necessary permission to do so.                                                                                                                                       

If we learn that we have collected an account from a child under 13 without parental consent, we will delete that account and its associated information promptly.       

  7. Data Retention                                                                                                                                 We keep your information for as long as your account is active, plus a short period afterward to handle disputes and meet legal obligations. If you delete your account, 

  we will delete or anonymize your personal information — including your timelines, uploaded photos and videos, and reference photos — within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.                                                                                                      

  8. Your Rights

Depending on where you live, you may have the right to:

  - Access the personal information we hold about you.                                                                  - Correct or update inaccurate information.

  - Delete your information.                                                                                                                   

  - Object to or restrict certain processing.               

  - Receive a copy of your information in a portable format. 

  - Withdraw consent (where processing is based on consent).

You can exercise the access, correction, and deletion rights directly from the app — your profile and child information are editable in Settings, and Settings → Delete account removes your account and all associated data. For other requests, email support@hellominis.com and we'll respond within 30 days.                                 

                                                                                                                                                                     If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of our contract with you (to provide the Service), our  legitimate interests (to operate, secure, and improve the Service), your consent (where required), and compliance with legal obligations.

If you are in California, you also have the right to know what personal information we collect, request deletion, and opt out of any sale or sharing of personal         

  information for cross-context behavioral advertising. We do not sell or share personal information for these purposes.

  9. Account Deletion                                       

You can delete your account at any time from Settings → Delete account in the app. Deletion permanently removes:                                                         

  - Your profile and account information.                                                                                             - Every timeline you own, including all uploaded photos and videos.

- Reference photos used for face recognition.                                                                               - Your invitations and family memberships.                                                                                   

Photos and videos that other family members uploaded to your timelines will also be deleted. Memberships you held in other people's timelines are removed, but their content stays intact.                                     

  10. Security                                              

We use industry-standard safeguards including encryption in transit (TLS) and at rest, access controls, and Row-Level Security policies that restrict every database read and write to the user it belongs to. No system is perfectly secure, however. If we become aware of a security incident affecting your information, we'll notify you as required by applicable law.                                                                                                                                              

  11. International Transfers                                                                                                                  We are based in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US or other countries where our service providers operate. These countries may have data-protection laws different from your own. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.                                                                                                                                            

  12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the app or by email before the changes take effect. The "Effective 

  Date" at the top of this page reflects the most recent update.

  13. Contact Us                                                                                                                                       For privacy questions, requests, or complaints, email support@hellominis.com.