Their art deserves thoughtful care.

About this notice

Made While Little LLC operates this website and the Made While Little app. The app is made for parents and caregivers. It is not designed for children to create accounts or use on their own.

We are preparing our first public release. Image safety screening is enabled for new cloud and book uploads. Hardcover ordering is enabled for prelaunch testing, with real payments and production printing.

Your local collection

You choose what to add with the camera or Apple’s system photo picker. The picker gives the app only the photos you select; the app does not request access to your whole photo library. The app keeps a local copy, previews, paper borders, and the titles, dates, notes, child profiles, artwork, and book drafts you create. Child profiles may include a name and birth year supplied by an adult; they are not children’s login accounts.

Local Collection keeps media on your device unless you choose an online operation such as cloud backup or preparing a hardcover. Removing an original from Photos does not remove the app’s copy, and removing the app’s copy does not remove the Photos original. Uninstalling the app can remove local work that has not been backed up.

Adult accounts and family backup

Sign in with Apple and Amazon Cognito authenticate adult accounts. We receive account identifiers, the name and email Apple supplies, and your family membership. Your email may be an Apple private-relay address. Authentication tokens are kept in the device Keychain. We use this information for sign-in, account security, and family access.

When you use Made While Little Plus cloud features, selected originals, artwork and book information are stored with Amazon Web Services so you can back up, restore, sync, and read them on supported devices. Invited adult family members can access the family’s shared collection according to their membership. We store invitations, membership and permission records to provide that access. Joining a family does not give that family access to your device’s entire photo library.

Private books and invitations

You decide whether to create a private book invitation. Anyone who receives or is forwarded a working invitation may be able to read that book, so share it only with people you trust. The invitation does not expose the rest of your family’s library. Links expire after 30 days and can end sooner if you revoke them or access changes.

The browser reader uses a secure, limited-duration session cookie to authorize reading. It does not use the invitation for advertising, and it does not keep the book or invitation in browser local storage. Private book responses instruct browsers not to cache or index them. These protections cannot prevent a recipient from photographing or otherwise copying what they can see. The public website does not offer account library sign-in at launch.

Image safety checks for online features

When you upload photos for cloud features or book preparation, we use Amazon Rekognition in the AWS Oregon region to check for explicit sexual content, graphic violence and hate symbols before making the images available online. We send a resized copy with embedded photo metadata removed and without Made While Little account or family identifiers. Details visible within the image remain visible to the screening service. Local-only artwork is not sent for these checks.

We have opted out of AWS using this content for Rekognition service improvement, including model training. The opt-out does not eliminate retention needed to provide the service. Our cloud and print storage periods are explained below.

We record screening outcomes and processing status to enforce these checks and handle support requests. Flagged images are held from online access and book preparation; unavailable checks can also delay processing. Automated checks can make mistakes. The app explains the hold or delay and offers a way to contact support for review. These checks do not remove the artwork from your device.

Safety reports and blocking

Adults can report a concern about a family member, and private-book recipients can report the book they are reading. We store the selected reason, relevant account, family or shared-book references, report time and review status to investigate and respond. Recipient reports use a rotating, hashed network reference to limit abuse; the report record does not store the raw IP address. Making a report does not extend a book invitation or retain a separate copy of its artwork.

An in-app account block records the two adult account identifiers and prevents them from sharing a family while the block remains. Blocking may remove a member or cause you to leave a family; the app explains the effect before you confirm. Unblocking does not restore membership automatically.

The private browser reader also lets you block links from a family in that browser. A secure cookie remembers up to 20 blocked families for up to one year. It is used to enforce your choice, not for advertising. You can unblock from the reader; clearing site data removes these browser blocks. They do not apply to other browsers or devices and do not change app membership.

Subscriptions, payments, and printed books

Apple processes Plus subscriptions. We receive verified purchase identifiers, product, renewal, expiration, refund and entitlement information to provide access and restore purchases. Apple handles your App Store payment method; we do not receive its full payment-card details.

Hardcover preparation uploads the selected source photos and creates print files, even if you do not subscribe to Plus. Those temporary print inputs are separate from collection backup. If you order, Stripe processes payment and Lulu and its fulfillment partners receive the print files and recipient contact and delivery information needed to print and ship your book. We retain order, quote, payment, shipment and support records to fulfill the purchase, handle problems and meet legal obligations.

Stripe may process payment, device and interaction information for payment processing, fraud prevention and service improvement. See Stripe’s privacy policy, Apple’s privacy policy, and the provider information shown during your purchase. A private invitation never authorizes a payment or printed-book order.

Website visits, service operation, and support

We do not use advertising trackers or behavioral advertising on this website. Hosting and security services may process IP addresses, browser and device information, requested routes and access times. Our app services also process operational events, error and performance information to deliver features, prevent abuse and resolve failures. If you enable notifications, Apple and our service use a device push token to deliver them; you can change notification permission in device Settings.

If you email support, we receive your address, message and anything you include. The app’s support action opens your email app and does not attach artwork automatically. Please do not send children’s names, school details, payment-card numbers or artwork unless we ask for specific information needed to resolve your request.

We may use automated support tools to organize and help answer messages. Our email and support providers may process the message and attachments you send for that purpose. You can ask for a person to review your request.

Service providers

We use Apple for sign-in, subscriptions and notifications; Amazon Web Services for hosting, account processing, storage, image safety checks and app operations; Stripe for hardcover payments; Lulu and delivery providers for printing and shipping; and business email and support-tool providers for support. Which providers receive information depends on the features you choose. Their processing may take place outside your country. We do not sell your family’s artwork or use it for targeted advertising or cross-company tracking.

Retention and your choices

Local work remains until you remove it or erase the app’s data. Plus cancellation keeps full service through the paid-through date and any verified Apple billing grace, then provides 90 days of read-only access and account-data recovery. A verified refund or revocation starts that recovery period immediately. After recovery ends, Plus-only access stops and primary hosted media is deleted within 30 days, except where another valid entitlement or required retention applies.

Temporary hardcover source inputs are kept for up to 90 days. Share-only book copies are removed within 24 hours after their final link ends unless another active right retains the edition. A shipped hardcover includes its exact in-app companion while Made While Little operates; it does not provide permanent original-photo backup.

Use the app’s account settings to request account-data export or deletion. Account deletion also ends the linked app authorization with Apple. It does not cancel an Apple subscription: manage that separately in Apple Account subscription settings. Limited payment, order, security and support records may remain where needed for outstanding obligations, fraud prevention or law. Protected backups expire on their normal schedule and are not used to restore access to a deleted account.

For help accessing, correcting or deleting information, email support@madewhilelittle.com. We may need to verify your identity and authority over the information before acting.

If Made While Little winds down, we will stop new purchases and uploads and provide at least 90 days of read-only app access and account-data portability. We will explain the available recovery steps and how outstanding subscriptions and orders are handled.

Children’s privacy

Children’s drawings may contain names or other personal details, so parents and caregivers should review what they choose to add. We do not knowingly ask children to create accounts or submit personal information. If you believe a child contacted us directly, please email us so we can respond appropriately.

Security

We use safeguards appropriate to the current service, including Apple’s system photo picker, protected app storage, Keychain storage for authentication tokens, HTTPS for online requests, encrypted hosted storage, and restricted service access. No method of storage or transmission can be guaranteed completely secure.

Changes to this notice

We will update this notice when our data practices materially change. The updated date will appear at the top of this page.

Contact