Your privacy is part of the journey

When a guest reserves a gift, their name or signature appears on the list for other guests — that is what prevents duplicate gifts. Their contact method is shown to you only, so you can reach or thank them, and it stays out of your data export because it belongs to them.

We process your data to deliver the service you asked for, and on a narrow legitimate interest in running, securing and improving the site — including personalising content and suggestions and grouping audiences so we can show what fits your stage. Any targeted promotional message is based on your consent or can be turned off at any time, and publishing anything publicly stays your decision.

We rely on technical providers to run the product: hosting, database and authentication, an email sender, anonymised analytics, and an AI provider that generates name suggestions. Each sees only what their job requires. Some of these systems may operate outside Saudi Arabia; write to us if you want an up-to-date list of them.

We keep your data while your account exists, because the journey itself is cumulative. When you request deletion, public sharing stops immediately, family data is deleted from the database after we review the request, and the sign-in identity is removed by our team by hand. Technical backups may retain a trace until their normal cycle expires.

Access is enforced at the database level: each family reads and writes only its own rows, protected pages require a live session, and traffic runs over HTTPS. Sign-in goes through our authentication provider and we never see your password. Even with these measures, no digital service is completely free of risk; we review and update our safeguards as needed.

You can see your data, get a copy of it, correct it, withdraw consent for publishing, and request deletion. The Privacy & data page inside your family space runs the export and the deletion request directly; any other request reaches us by email and we handle it as soon as we can, sometimes after confirming from your account email.

The account belongs to a parent. Children cannot create accounts, and the baby's details are entered by their parents, who alone decide what appears on any public link.

If something meaningful changes in how we handle your data, we update this page and its date, and email your account when the change calls for it.

For any question or request about your data, write to hello@firstory.life or use the contact page.