Privacy

Yearkeep is a private workspace for the adults who raise a child. It is not a social network, a marketplace, or an advertising business. This page says what we store, who can see it, and what you control. The security page says how it is protected.

What you store#

Plans, schedules, captured entries (photos, quotes, block logs, mood, sleep, outdoor minutes, concerns, observations), reviews, portfolio pages, project panels, mastery-ladder positions, vocabulary, books, materials, classes, people, places, trips, and settings about your family and your child. Viewers may add story recordings.

Who can see it#

Only the adults you invite, according to their role:

Role	Sees
Owner and admin	Everything in the family
Helper	Today, capture, the playbook, her own entries and history
Viewer	A highlight page a parent curated, through a link that expires

Each family is an isolated tenant enforced in the database. We do not mix data across families. We do not sell data. We do not show ads. We do not run third-party analytics on child content.

Sign-in#

Owners and admins sign in with a magic link or, optionally, a password they set in Settings. Helpers and viewers join through a one-tap invite link. The child does not have an account.

Where data lives#

Structured data lives in our database. Photos and recordings live in object storage in Singapore. An EU region exists for families who ask before their family is created; the region is fixed at creation and enforced when files are written. Uploads are re-encoded on arrival, which removes location and device metadata, and the original file is deleted.

AI features#

AI features (translation, book prompts, weekly suggestions and coaching drafts, evidence answers) each have a switch in Settings › Privacy, and the whole coach can be turned off. Turning the coach off deletes its stored chats and suggestions. Before any text leaves our servers, names are replaced with placeholders. Every call is recorded in an audit log (feature, model, size, who, when; never the text) that the owner can read in Settings › Audit. The coach never diagnoses and cites the entries a suggestion is based on.

Weather#

Yearkeep reads public weather and haze feeds for your city to decide whether the outdoor block should become an indoor plan. No family data is sent to those services.

Email and notifications#

We send transactional email only: sign-in links, invites, concern alerts, export-ready notices, and digests you asked for. Push notifications are per adult and configurable in Settings › Notifications.

Your controls#

• Export everything as JSON, CSV, and PDF from Settings › Export, any time.
• Delete the family from Settings › Export. Deletion is owner-only, requires typing the family name, is scheduled with a grace period during which every adult sees a banner and the owner can cancel, and then removes the cloud copy. Devices erase their local copy on next sync.
• Edit or remove any entry. Helpers can edit their own entries for 24 hours; owners and admins can always edit.
• Expire share links on the schedule you set.

Contact#

Privacy questions and requests: hello@yearkeep.com.