Privacy Policy — Swaddlebook

Last updated: 2026-09-29 · Developer: TanzSoft Co., Ltd. (Seoul, Republic of Korea) · Contact: tanzsoftkor@gmail.com

Swaddlebook (“the app”) is a private family photo album and baby log for parents. It is designed so that we do not hold your photos. This policy explains exactly what goes where.

1. Your photos and videos stay in your own Google Drive

Original photos and videos stay on your phone. When you share one with your family, the app makes a family copy (photos up to 1600 px, videos 720p) and a small thumbnail, encrypts them on your phone (AES‑256‑GCM) and saves the encrypted files in a “Swaddlebook” folder in your own Google Drive.
The app uses the Google Drive permission drive.file, which only lets it see files that the app itself created. It cannot see your other Drive files.
The encrypted files are shared as “anyone with the link can view” so that family members you invite can download them without a Google account. The files are unreadable without the album key.
A private “recovery” file with your album key is saved in the same Drive folder (not shared) so you can restore your album on a new phone with the same Google account.
Your use of Google Drive is subject to Google’s own terms and privacy policy.

2. The album key never reaches our server

Each family album has a random encryption key created on the parent’s phone. It is passed to family members only inside the invite link or QR code, after the “#” sign, which browsers and apps do not send to web servers. We cannot decrypt your photos, names, captions, logs or comments.

3. What our server stores

A small relay at tanzsoft.com helps family phones find each other. It stores only:

Data	Why
Random album ID and member IDs, member role (owner / adds photos / views)	To let invited family members join
The Google Drive file ID of each uploader’s encrypted album index	So family phones know which encrypted file to download
Hashes of invite secrets	To check invite links
Encrypted blobs: member display names, likes and comments	So grandparents without Google can like and comment. We cannot read them.
A version counter and standard web server logs (IP address, time)	To tell phones “something new was added”, and to operate and secure the service

We do not store photos, videos, children’s names or birthdays, your email address or your Google account. There is no advertising and no analytics SDK in the app.

4. Baby log

Feeding, sleep, diaper, growth and milestone entries are stored on your phone and, encrypted, inside your album index in your Google Drive, so your family can see them. We cannot read them.

5. Notifications

The app checks for new family photos in the background a few times a day and shows a local notification. It does not use a push service that sees your content.

6. Your choices and deletion

Export everything (Settings) saves all photos, videos, logs and an offline album page as one zip file wherever you choose.
Deleting a photo in the app deletes its encrypted copies from your Drive. You can also delete the “Swaddlebook” folder in Google Drive at any time.
“Close this album” / “Leave this album” deletes the relay records for your membership (and for the album, if you created it). Remaining relay records of inactive albums may be deleted after 24 months of inactivity.
To request deletion of any relay data, email us with the approximate date you created the album.

7. Children

The app is intended for parents and adult family members. It is not directed to children, and children are not expected to use it. Photos of children are kept encrypted in the parent’s own Drive as described above.

8. Security

All connections use HTTPS. Keys and secrets on your phone are protected by the Android Keystore. No system is perfectly secure; if you believe an invite link has leaked, create a new album and invite your family again.

9. Changes

We will update this page if anything changes and show the date above.