Effective 2026-11-09. © Shandy Data LLC and Ted Conbeer.
Shandy Data LLC, a Colorado limited liability company ("we" or "us"), runs BlinkBook. Ted Conbeer is its owner.
What we collect
You give us:
•
your phone number, to sign in;
•
your display name in each family you join;
•
your email address, if you give it, for email updates and to contact you about your account;
•
your children's details, if you're a parent: each child's name, avatar, and birth month and year;
•
your content: your moments (photos, videos, and text posts), captions, comments, and reactions, with each moment's date taken and child tags;
•
your agreement to the Terms and this policy, with its version and time;
•
what you send us: reports, and emails to support@ or privacy@.
When you add a photo or video, we keep the full-quality original with the metadata it came with. That metadata can include the time, the camera, and the location where it was taken. We remove the metadata from the copies members see. The app uses only the time taken, for the calendar.
Parents give us the phone numbers of the people they invite. To start a family, our admin gives us its first parent's name and phone number.
When you use BlinkBook, Supabase records your requests and sign-ins, with your IP address and, for sign-ins, your phone number. When the app checks for updates, Expo receives an install ID and your IP address.
How we use it
We use it to:
•
sign you in, and keep BlinkBook and your account secure;
•
show each family its moments, as its roles allow;
•
make the smaller copies members see;
•
send the email updates you choose, and contact you about your account;
•
let parents download their family's originals;
•
handle reports and enforce the Terms;
•
answer your requests;
•
meet the law, including reports to NCMEC.
We don't sell your data, show ads, track you across other apps or websites, and we don't put analytics in BlinkBook.
Who sees it
•
Your families' members see what their roles allow: your display name, your content, and your children's details in that family. Only the family's parents see a parent-only moment and everything on it. Other members don't see your phone number or email, except that a family's parents see the number on your invite until you join, and again if they invite you back.
•
Originals, location included, are available only to the family's parents, through download.
•
Our admin sees each family's name, time zone, and creation date, and the name on its first-parent invite until it's accepted, declined, canceled, or lapses. The admin can't see members, children, or moments.
•
We look at family content only to review a report, answer your request, or meet a legal duty.
•
Anyone can tell whether a phone number can sign in to BlinkBook, because it either gets a code or is refused. Nothing says which family.
•
NCMEC and law enforcement. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), with information about the account that posted it. NCMEC may share the report with the police. We also share data when the law requires it.
Service providers
These providers run parts of BlinkBook for us. Each receives only what it needs, and has agreed to protect it at least as well as this policy does.
•
Supabase runs our servers: the database, sign-in, and the copies members see. It holds everything you give us except originals.
•
Twilio Verify receives your phone number to text you sign-in codes.
•
Amazon Web Services stores originals in Amazon S3, and sends email updates through Amazon SES. SES receives your email address and the update's contents, and keeps no copy of the message. It keeps a list of addresses that bounced or reported spam, to stop sending to them.
•
Cloudflare runs the blinkbook.app domain and passes requests for the web app to our own server. It sees those requests, but not your content.
•
Hetzner runs that server, in the United States. It keeps no logs of your requests.
•
Google Workspace receives mail sent to blinkbook.app addresses, such as support@ and privacy@.
•
Expo delivers app updates.
We store BlinkBook's data in the United States.
Apple distributes the iOS app, and its own privacy policy covers the App Store. If you choose in iOS to share analytics with app developers, Apple may send us crash reports and usage statistics.
On your devices
The app keeps you signed in, in the iPhone's secure storage or in your browser on the web, until you sign out or are no longer in any family.
The iPhone app keeps copies of moments you've viewed, with their captions, comments, reactions, and members' names, and your families' children and calendars, in private app storage, up to 500 MB. It never keeps originals and never saves to your photo library. The app deletes them when you sign out, and when you lose access to a family or moment, the next time it connects. Photos and videos you pick to add wait in private app storage until they're added, discarded, or you sign out.
The web app keeps moments only until you reload the page.
Email updates
Email updates come once a week for each BlinkBook you choose, only to an address you've confirmed from the link we send to it. They include the new moments you can see, with their captions, and pictures through links that work for 7 days. Anyone you forward it to can see them until then. Your email provider may keep its own copies of the pictures once you open the email, and we can't remove them. When a parent makes a moment parent-only, earlier links to its pictures, in the app and in emails, stop working, usually within seconds and otherwise within about an hour.
You can turn email updates off in the app, or with the unsubscribe link in any update. Anyone with that link, such as someone you forward an update to, can turn that BlinkBook's updates off for you, and back on within the hour.
How long we keep it
•
We keep your account, profile, and agreement records until you delete your account. If you leave or are removed from a family, your display name stays on what you posted there.
•
We keep your content until its author or a parent deletes it. Deleting a moment deletes its original, its copies, and its caption, comments, and reactions. An edited caption or comment keeps no earlier text.
•
Deleting a child deletes their name, avatar, birth month and year, and tags; their moments stay. Deleting a family deletes everything in it, originals included.
•
An invite keeps its phone number until 30 days after it expires. We then clear it the next time anyone creates or answers an invite.
•
We keep whether your email is confirmed until you change or remove it. A link to confirm it works for 24 hours, and we keep a record of each one we send for 24 hours, to limit how often they go. We keep a record of each email update we send you, with its unsubscribe link, for 8 weeks, and delete them when you leave that family. We keep the link to turn updates back on for an hour.
•
If you ask for a sign-in code but never enter it, your number stays on an unused account until you ask us to delete it.
•
Deleted data stays in our backups for up to 30 days.
•
Supabase's logs keep IP addresses, and its sign-in records phone numbers, for 7 days. Deleting your account doesn't remove them.
•
If we report content to NCMEC, we keep it, and the account details that go with it, for one year, even if someone deletes them.
Deleting your account
You can delete your account in the app. That deletes your account, profile, phone number (except in sign-in records), email, agreement records, and all your comments. If you also check Delete my moments too, we delete every moment you added, in every family. Otherwise, your moments stay with their families until a parent deletes them. If you can't sign in, email [email protected] and we'll delete your account. We keep only what the law requires us to keep, such as material we've reported to NCMEC. Children
No one under 18 can have an account, and we don't knowingly collect information from children. If we learn that someone under 18 has an account, we'll close it and delete its data. Tell us at [email protected]. Children appear in BlinkBook only in what their families post, and in BlinkBook, only that family's members can see them. Your rights
Everyone has these rights, wherever they live. You can ask for a copy of your personal data, a correction, or its deletion, at [email protected]. We'll answer within 45 days, and may first ask you to confirm the request from your phone number or email. You can withdraw your consent at any time by turning off email updates, deleting your content, or deleting your account.
If we confirm that someone got unauthorized access to your personal data, we'll tell you by email or text within 30 days, unless the police ask us to wait.
Changes
When we make an important change to this policy, BlinkBook asks you to agree again the next time you open it. Small fixes take effect when posted. The effective date at the top shows the current version.
Contact