Privacy Policy
1. Who we are
vildkêp ("we", "us", "our") is an iOS and Android app published by Niels Ltd, Wendover, UK. Questions? Email us at hello@pockettreasures.app.
2. Data stored in your vildkêp account
vildkêp requires an account (sign in with Apple, Google, or email). Your memories are stored in your private account so they are backed up and available across your devices, and cached on your device for offline use:
- Photos, videos, voice notes and memories — the adventures you save, with their titles, AI-written stories, dates and tags, stored in your account and cached on your device.
- Location data — place names and coordinates you attach to an adventure are stored with that adventure in your account.
- Your name and home country — entered during onboarding.
- Children's profiles — the names and emoji you add to tag adventures.
- Account identifier — a pseudonymous id derived from your Apple/Google/email sign-in, used to hold your library and your premium status.
Data is encrypted in transit (HTTPS/TLS) and hosted by Cloudflare, Inc. (our infrastructure sub-processor; metadata in Cloudflare D1, media in Cloudflare R2). Your personal library is stored so it is accessible to you across devices — it is not end-to-end encrypted, meaning we technically have the ability to access it to operate the service; adventures you actively share via Family Sharing are end-to-end encrypted (Section 3). We show no ads and do not sell your data. If you prefer, you can turn off cloud sync on a device (Settings → Account → Back up & sync) to keep new memories on that device only.
Diagnostics: the app uses Firebase Crashlytics (Google) to collect crash reports so we can fix bugs, and Firebase Cloud Messaging to deliver notifications. In-app product analytics are disabled.
3. Family Sharing (optional)
If you choose to enable Family Sharing, you can share specific adventures you select with a private family circle. This is entirely optional and off by default. When you share:
- End-to-end encryption — the selected adventures (photos, titles, stories, dates and locations) are encrypted on your device with a key that only you and your invited family members hold. Our server stores only unreadable ciphertext. We cannot view, scan or analyse shared content.
- What our server stores — the encrypted data itself, plus minimal routing metadata: your circle's name, a stable sharing identifier derived from your Sign in with Apple/Google account, member identifiers, and timestamps. Hosting is provided by Cloudflare, Inc. (sub-processor), with data processed in their global network.
- Sharing identity — shared circles use the same account you signed in with. Family members you invite are identified by a pseudonymous identifier (and, if you consent, your name to display to them).
- Deletion & revocation — un-sharing an adventure, removing a member, or deleting your circle removes the corresponding encrypted data from our server immediately. Deleting the app or your circle erases all server-side data associated with it.
- Lawful basis — your explicit consent, given when you enable the feature and confirm each first share. You can withdraw it at any time in Settings → Family Sharing.
4. Notifications
If you grant notification permission, the app schedules local "On This Day" reminders that recall memories from this date in previous years. These notifications are generated entirely on-device — no data is sent to any server to produce them.
5. Photo book orders (optional)
If you choose to order a printed photo book, the following data leaves your device solely to fulfil that order:
- Your photo book (as a PDF) — temporarily staged on our own Cloudflare storage under an unguessable address and automatically deleted within 24 hours.
- Your name, email address, and delivery address — shared with Prodigi Group Ltd, our print fulfilment partner, solely to print and deliver your order. Prodigi's privacy policy is available at prodigi.com/privacy.
We do not retain your delivery address. It is passed to Prodigi and held by them only for the purpose of order fulfilment.
6. Location permission
The app requests "When In Use" location access to tag new adventures with your current location (shown as a place name on the map). The coordinates and place name you attach to an adventure are saved with that adventure in your account (Section 2). We do not track your location in the background or share it with advertisers.
7. Photo library permission
The app requests photo library access to let you add photos to your adventures. If your photos contain GPS metadata, the app reads that data to pin adventures on the map. This happens entirely on-device.
8. Children's privacy
vildkêp is designed for parents to capture their children's memories. The account holder is the parent; children do not have accounts and we do not knowingly collect personal data directly from children. Content a parent saves (which may include photos of their children) is stored in the parent's own account, under the parent's control, and can be deleted by the parent at any time (Section 9). The app is rated 4+ on the App Store and is designed to comply with COPPA and the UK Children's Code.
9. Your rights & deleting your data (EEA, UK & California)
Delete your account: you can permanently delete your account and everything stored in it — all memories, photos and metadata — from Settings → Account → Delete Account inside the app. This immediately and irreversibly removes your data from our servers (Cloudflare D1 and R2). You can also email hello@pockettreasures.app to request deletion.
You may also access, correct or export your data, and withdraw consent, by contacting us at the address above. Family Sharing content can be revoked instantly from Settings → Family Sharing (un-share or delete your circle). If you placed a photo book order, you can request deletion of the personal data held by our print partner Prodigi via the same email and we will forward your request.
10. This website
This website uses privacy-friendly analytics (Google Analytics with Consent Mode, and Ahrefs) only if you accept the cookie banner; declining disables them. No personal data is sold or shared. If you submit the contact form, we collect your email address solely to reply to you.
11. Changes to this policy
If we make material changes, we'll update the "Last updated" date at the top of this page.
12. Contact
Questions about your data? hello@pockettreasures.app