Privacy Policy for Little Feather AS

Effective Date: 19 September 2026 (replaces the version of January 2024)

Thank you for choosing Little Feather AS' digital baby milestone app. Your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your information.

For the purpose of data protection law, Little Feather AS ("we", "us", and "our") is the data controller with respect to your and your baby’s personal data. You will find our contact information at the end of this Policy.

1. Information We Collect

• We collect email addresses, telephone numbers and full names for user identification and communication purposes.
• Personal data you provide while using the app, such as your profile name, pictures or videoclips of the baby, the baby’s name, gender and birthdate, your relation to the baby, text added to the pictures, messages accompanying shared link to the pictures, and correspondence between the users. Other personal data may also be contained in photographs and video clips you upload to the app. Access to such data will be limited and can be regulated by the user themselves by using the settings tool in the app.
• Subscription information: if you subscribe to Little Feather Pro, we receive from Apple or Google (through RevenueCat, see section 3) which plan you have, when it started and renews, and a transaction identifier. We never receive or store your card or other payment details — Apple and Google take the payment.
• The app utilizes Firebase by Google for hosting, and certain technical data may be automatically collected during usage by Google on our behalf (called «End-user data»). This may include your device information (such as browser type, operating system, hardware model, IP address, your login information, usage log for the app, device IDs and cookies (see section 12) and similar technologies. More info regarding Firebase and such End-user data can be found here: https://firebase.google.com/support/privacy

2. How We Use Your Information – Purpose and Legal Basis of Processing Personal Data

We use your personal data for the following purposes based on our terms and condition (agreement), legitimate interests and/or with your consent:

• Email addresses and names are used for user identification, communication, and app-related updates.
• The data you provide is used to deliver our services to you. These services encompass the app itself, personalized content creation, and giving you and the family you invite the features of your subscription.
• Email addresses are used to send invitations you ask us to send to family members, and to tell you if your app store could not renew your subscription.
• Technical data collected through Firebase helps us enhance app performance and user experience.
• Additionally, we offer user support, which involves addressing your questions and complaints, troubleshooting technical problems, and making updates to our services as needed.

3. Sharing Your Data

• We do not disclose your personal data to others unless set out in this privacy policy, or you have given us express consent or written instructions to this effect.
• Your photos and messages are shared only with those you invite, such as family members or friends.
• We use subcontractors in connection with the app. We only share personal data with subcontractors to the extent strictly necessary for them to be able to provide their services to us. We enter into data processor agreements with all sub-contractors involved in the processing of personal data, which ensures that they process the personal data in accordance with current legislation, including the requirements for information security.
• Our subcontractors (data processors) are:
  • Google Firebase — login, database and photo storage. Your journal data is stored in the EU (Belgium and the Netherlands). See firebase.google.com/support/privacy.
  • Heroku (Salesforce) — runs the server the app talks to. It processes your data in the United States when you use the app, but does not store your photos or journal.
  • RevenueCat — keeps track of subscriptions bought in the app, using your account's internal ID (not your name or email) and the purchase details from Apple or Google. United States.
  • Resend — delivers the emails we send (invitations and subscription notices), from the EU.
• Where a subcontractor processes data outside the EU/EEA, the transfer is protected by the EU Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
• Subscriptions are bought through Apple's App Store or Google Play, who handle the payment as independent controllers under their own privacy policies. Subscriptions bought earlier on our website were paid through Stripe. We do not store payment information.
• Authorized individuals at our company or at our subcontractors will access the minimum amount of data required to provide customer support, operate our system and services, or investigate fraud or security issues.
• If we receive a legal request for access or disclosure, for example from the police, the court or others, we will share the minimum amount of data necessary.

4. Storage Limit of Personal Data

We will retain your personal data until we receive a request from you to delete your account.

Photos and videos deleted from the app are removed from our servers automatically within 30 days.

Your personal data will be deleted from our servers within 30 days of receiving a request to delete your account.

If you have not been logged in for a period of two years, we will delete your data, sending you a notice at least 30 days in advance to the email address you have registered for your account.

Despite the said storage limits, we will keep your personal data to the extent deemed necessary to comply with our statutory obligations, resolve disputes, maintain security, prevent fraud and misuse or enforce the terms of use.

We may keep anonymized information after your personal data has been deleted.

5. Jurisdiction

Little Feather AS is a company founded in Norway, and as such, we follow Norwegian law and EU law regarding data protection and privacy.

6. Information Security

We prioritize the security of your data and employ industry-standard measures to protect against unauthorized access or disclosure.

7. Misconduct and Account Termination

• Little Feather AS reserves the right to terminate any account in the case of misconduct or violations of our Terms of Service.
• Users acknowledge that Little Feather AS has the right to access their accounts for the purpose of app maintenance, troubleshooting, and investigations into misconduct or violations.

8. You have the right to

• know what information we have registered about you
• require that incorrect, unnecessary, incomplete or outdated personal information be corrected or removed
• at any time withdraw consents to processing of personal data that you have provided to us or ask us to limit the processing. Please note, however, that this may mean that we may no longer deliver all or part of our services to you
• disable the collection of data by the cookies we use at all times
• request that your personal data be disclosed in order to transfer it to another similar service (data portability) to the extent that this is practically possible and in accordance with applicable local law and regulations
• be informed of any security breaches without undue delay, if it is probable that the breach may entail a high risk of the spread or loss of your personal data
• demand that your personal data be deleted (with the restrictions set out in section 4). Data stored in the app can be deleted by the user through app functionalities, and you can delete your whole account yourself in the app's Settings. Deleting your account does not cancel a subscription bought through Apple or Google; cancel it in your App Store or Google Play settings.
• you will be able to safeguard and resolve most of the above rights yourself through privacy settings in the app. You can otherwise make contact as indicated below.

If you believe that we do not comply with this privacy policy or the applicable privacy legislation, which includes the GDPR, we appreciate very much if you let us know, so that we can rectify it as soon as possible. You also have the right to complain to your local Data Protection Authority.

9. Parental Responsibility

Information posted about your baby is at the parents' discretion and risk. Exercise caution and ensure the appropriateness of shared content.

10. Changes to Privacy Policy

We reserve the right to update our Privacy Policy. Users will be notified of any material changes.

11. Contact Information

For any privacy-related inquiries, please contact us at littlefeatheras@gmail.com, or at Little Feather AS, Sommerfuglveien 2, 3182 Vear, Norway.

12. Cookies and Local Storage

The app stores only what it needs to keep you signed in and working, on your own device. We do not use advertising or analytics cookies. Firebase may collect the technical data described in section 1.

By using the Little Feather AS app, you acknowledge that you have read and understood this Privacy Policy.

Terms of Use