Last updated: 1 November 2026
The Short Version
- Only your family. Only you and the people you invite can see your archive, and “Only me” memories stay yours alone.
- Safe in Europe. Your archive is kept on secure servers in Frankfurt, Germany, and locked on the way and while it’s stored.
- Photos stay private. Photos are never sent to AI. Your phone spots faces and scenes to sort them, and works out where each was taken, but never who anyone is. A photo’s exact location never leaves your phone.
- Notes you choose. Only the notes and voice clips you choose, written or spoken, go to two AI companies in the US: Anthropic writes the stories and draws their pictures, and OpenAI types up voice clips. Neither uses them to teach its AI, and OpenAI keeps no clips.
- Never sold. Your memories are never for sale. We don’t sell anyone’s data, and Suntold shows no ads.
- Yours to keep. Email us any time for a copy of everything, or delete it all at once in the app.
Who We Are
Suntold is made by Codemost Limited, a company registered in the United Kingdom. Codemost Limited is the data controller for the personal data described in this policy. You can reach us at lab@codemost.co.uk.
Suntold is for parents and the family members they invite, all aged 18 or over. Much of what you keep in Suntold is about your child, so we treat it with extra care.
Information We Process
Your account
You sign in with Apple or Google. Apple gives us an account identifier and, the first time only, your name and your email address, which may be a private relay address that Apple forwards to you. Google gives us an account identifier, your name, your email address and a link to your profile picture, which the app shows on your account card in Settings. We never see your Apple or Google password.
Your child's profile
Your child's name and date of birth. The emoji you pick for them stays on your phone.
Memories, photos and voice notes
The notes and milestones you write, the dates and places you add to them, the photos you choose to add, the voice notes you record, and the stories Suntold writes from your notes. Suntold uses the iOS photo picker and permissions, so it only receives the photos you allow.
For each photo you add, your phone works out your child's age band, the season, the moment (such as Birthday or Travel) and, if the photo has a location, the town or city it was taken in, using a list of places built into the app. With the photo, we save only these labels and the time it was taken. Its exact location and anything else the camera recorded never leave your phone.
Health details, such as an illness, a diagnosis or a first period, get special protection. When you start using Suntold, you agree explicitly to keeping any health details in your memories and, for the notes and voice clips you choose, to sending them to our AI providers. Suntold also suggests keeping such memories to yourself (“Only me”).
Faces in your photos
To sort a photo, your phone uses Apple’s on-device tools to spot faces and scenes in it, for example to tell a family gathering from a day at the beach. It only counts faces: it never recognises who anyone is. Nothing about faces leaves your phone.
Your family circle
For each role there’s one invite link you share with your family. When someone joins, we keep their role and the colour that marks what they add. Anyone with a link can join until your circle has 10 people, and links stop working after 14 days. Once someone joins, the family circle sees them under the name from their Apple or Google account and, for a Google account, its profile picture. If you remove someone, we remember that they were removed and their colour, so what they shared stays marked as theirs and an older link can’t bring them back. Invite links are deleted with your archive.
Your privacy choices
When you agree to something in the app, we record what you agreed to, when, and which wording you saw, so we can show your choice was yours.
Subscription
Apple handles payments for Suntold Premium. RevenueCat, our subscription provider, receives your purchases and renewals from Apple, linked to an internal ID for your account, and tells our servers whether you have Premium. Neither we nor RevenueCat ever see your card details, and RevenueCat never sees your archive.
Notifications
If you turn on notifications, we keep the notification address Apple gives your phone, so we can tell you when someone in your family circle adds a memory or photos, or joins. A notification shows their first name, your child’s name and, for a memory, its title. When you sign out, your phone stops receiving them, and you can turn them off in Settings at any time.
Technical data
Our servers see your IP address and the app version as part of normal internet traffic, and use them to keep the service secure and working. If the app crashes, we may receive a crash report with technical details only. We don't use advertising identifiers.
What AI Sees, and What It Doesn't
Suntold can turn a quick note into a warm story, and turn a voice note into text. This only happens when you ask for it.
What is sent
- To write a story (Anthropic): the note or transcript you chose, your child's first name, their age in months, and the date, category and place of that memory.
- To draw a picture for a story you keep (Anthropic): that story.
- To transcribe a voice note (OpenAI): that recording.
What is never sent
- Photos and anything taken from them, including faces.
- Your child's surname or date of birth.
- Your other memories, your family circle, or your account details.
Our AI providers don't use this data to train their models. OpenAI keeps nothing from transcription: it doesn't log or store the recordings it turns into words. Stories are suggestions: you choose whether to keep, edit or discard each one.
How We Use Your Information
We use your information to run your archive, to write stories and transcripts when you ask, to share your archive with the family you invite, to keep the service secure, and to handle your subscription. We don't use it for advertising and we don't sell it.
Under UK and EU data protection law, we rely on these legal grounds:
- Providing the service you signed up for: your account, archive, family sharing and subscription.
- Your consent: sending the notes and voice clips you choose to our US AI providers, keeping any health details in your memories (your explicit consent, given when you start), and any optional analytics or marketing. To withdraw your consent, delete your account in the app, or email us and we’ll do it for you.
- Our legitimate interests: keeping Suntold secure and preventing misuse.
- Legal obligations: keeping records of your privacy choices.
Where Your Data Goes
We use a small number of providers to run Suntold. Each one only gets what it needs, under a data processing agreement with us.
| Provider | What for | Where |
|---|---|---|
| Supabase | Your account, archive database, and photo and voice storage | EU (Frankfurt) |
| Fly.io | Our servers; they keep no data of their own | EU (Frankfurt) |
| Upstash | Background task queue, holding only internal references, never your content | EU (Frankfurt) |
| Anthropic | Writing stories from the notes you choose, and drawing their pictures | United States |
| OpenAI | Transcribing the voice notes you choose | United States |
| RevenueCat | Managing Premium subscriptions, with no archive content | United States |
| Apple | Sign in with Apple, subscriptions and notifications | Worldwide |
| Sign in with Google | Worldwide |
If we add optional usage analytics or crash reporting services, we'll list them here first, and analytics will stay off unless you turn it on.
International transfers
Your archive is stored in the EU. Our AI providers and RevenueCat process data in the United States, protected by the European Commission's Standard Contractual Clauses and the UK's International Data Transfer Addendum. We ask for your agreement in the app before anything is saved.
Storage & Retention
- Your archive is kept for as long as you have an account.
- Photos and memories you delete are gone for good: no one can see them or bring them back. Copies in our backups are gone within 30 days.
- When you delete your account, it's deleted straight away, and copies in our backups are gone within 30 days.
- Records of your privacy choices are kept for 3 years after your account is deleted, so we can show what you agreed to.
- Server logs are kept for 30 days. A copy of your archive that we prepare for you is deleted from our servers 7 days after we send it.
Security
Your data is encrypted in transit and at rest. Each family's archive is walled off from every other family's, and photos are only reachable through short-lived private links. Our team doesn't look at your archive. We only access it in exceptional cases, such as a legal demand or repairing a fault, and we record each time we do and why.
Your Rights & Choices
In the app
You can delete anything you've added, and delete your account. For a copy of your whole archive, email lab@codemost.co.uk from any address. Within one month we send it to the email address on your account: if you chose Hide My Email, that's your private relay address, and Apple forwards it to your inbox. See how to delete your data.
Under UK and EU data protection law
You have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent. Email lab@codemost.co.uk and we'll respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to the data protection authority where you live.
Children
Suntold is used by adults to keep memories about their children. Children don't use Suntold or have accounts. A parent or guardian decides what to keep about their child and can correct or delete it at any time.
Other People in Your Photos
Your archive is private to your family, but photos can include other people, such as friends or other children. Please only add photos that the people in them would be comfortable with. If someone asks us to remove a photo of them, we'll pass the request to the archive's owner and, where the law requires, act on it ourselves.
Changes to This Policy
If we make a meaningful change, we'll tell you in the app before it takes effect, and ask again where your agreement is needed. The date at the top shows the latest version.
Contact
Questions about your privacy or this policy? We're happy to help.
Email Us