Privacy Policy
1. Who we are
Pocket Treasures ("we", "us", "our") is an iOS and Android app published by Niels Ltd, Wendover, UK. Questions? Email us at hello@pockettreasures.app.
2. Data stored on your device
By default, everything stays on your iPhone or iPad:
- Photos and memories — stored in a local database on your device by default. Never sent to any server unless you choose to enable an optional cloud feature, and we'll always explain what that involves first.
- Location data — place names derived from your photos' GPS data are stored locally and never transmitted.
- Your name and home country — entered during onboarding, stored locally in app preferences, never transmitted.
- Children's profiles — names and emoji stored locally on-device only.
We run no cloud analytics, no ad tracking, and no telemetry inside the app.
3. Family Sharing (optional)
If you choose to enable Family Sharing, you can share specific adventures you select with a private family circle. This is entirely optional and off by default. When you share:
- End-to-end encryption — the selected adventures (photos, titles, stories, dates and locations) are encrypted on your device with a key that only you and your invited family members hold. Our server stores only unreadable ciphertext. We cannot view, scan or analyse shared content.
- What our server stores — the encrypted data itself, plus minimal routing metadata: your circle's name, a stable sharing identifier derived from your Sign in with Apple/Google account, member identifiers, and timestamps. Hosting is provided by Cloudflare, Inc. (sub-processor), with data processed in their global network.
- Sharing identity — enabling Family Sharing requires signing in with Apple or Google. We receive only a pseudonymous account identifier (and, if you consent, your name to display to family members). Private-only use of the app never requires any sign-in.
- Deletion & revocation — un-sharing an adventure, removing a member, or deleting your circle removes the corresponding encrypted data from our server immediately. Deleting the app or your circle erases all server-side data associated with it.
- Lawful basis — your explicit consent, given when you enable the feature and confirm each first share. You can withdraw it at any time in Settings → Family Sharing.
4. Notifications
If you grant notification permission, the app schedules local "On This Day" reminders that recall memories from this date in previous years. These notifications are generated entirely on-device — no data is sent to any server to produce them.
5. Photo book orders (optional)
If you choose to order a printed photo book, the following data leaves your device solely to fulfil that order:
- Your photo book (as a PDF) — temporarily staged on our own Cloudflare storage under an unguessable address and automatically deleted within 24 hours.
- Your name, email address, and delivery address — shared with Prodigi Group Ltd, our print fulfilment partner, solely to print and deliver your order. Prodigi's privacy policy is available at prodigi.com/privacy.
We do not retain your delivery address. It is passed to Prodigi and held by them only for the purpose of order fulfilment.
6. Location permission
The app requests "When In Use" location access to tag new adventures with your current location (shown as a place name on the map). Location data is stored locally on your device only and is never transmitted to us or any third party.
7. Photo library permission
The app requests photo library access to let you add photos to your adventures. If your photos contain GPS metadata, the app reads that data to pin adventures on the map. This happens entirely on-device.
8. Children's privacy
Pocket Treasures is designed for parents to capture their children's memories. We do not collect any personal data from children. All data is stored on the parent's device. The app is rated 4+ on the App Store and complies with COPPA and the UK Children's Code.
9. Your rights (EEA, UK & California)
If you have placed a photo book order, you can request deletion of your personal data held by Prodigi by contacting hello@pockettreasures.app and we will forward your request. Family Sharing data can be erased instantly from Settings → Family Sharing (un-share or delete your circle). For all other data (stored on your device), simply delete the app.
10. This website
This website uses privacy-friendly analytics (Google Analytics with Consent Mode, and Ahrefs) only if you accept the cookie banner; declining disables them. No personal data is sold or shared. If you submit the contact form, we collect your email address solely to reply to you.
11. Changes to this policy
If we make material changes, we'll update the "Last updated" date at the top of this page.
12. Contact
Questions about your data? hello@pockettreasures.app