Privacy policy

Little Moments (“we”) helps you make personal letters, virtual bouquets and digital gifts. Your words and photos are personal, so we collect as little as we can and protect what we keep. This policy is written to meet India's Digital Personal Data Protection Act, 2023. It is a starting draft and should be reviewed by a qualified lawyer before public launch.

What we collect

• Account details: name, email, optional phone number, how you heard about us, language preference, and your consent choices.
• Gifts you create: recipient's first name, your messages, design choices, flowers, and photos you upload.
• Contact messages: name, email, category and message.
• Technical data: standard server logs needed to run and secure the service. We do not use hidden device fingerprinting or record keystrokes.

Why we use it

• To run your account and show your gifts to the people you share them with (necessary to provide the service).
• To answer your messages and keep the service safe (legitimate use).
• To send reminders or offers — only if you opted in. Signing up does not mean you agreed to marketing; you can switch it off any time in Account settings.

Who can see your gifts

Drafts are private to you. A published gift can be opened by anyone who has its link; links are long and random so they can't be guessed, and you can switch a link off at any time. Photos are kept in private storage and shown only through short-lived secure links when someone opens your gift.

Internal reporting (Google Sheets)

So our small team can see how the service is used, we copy a minimised set of records to a private Google Sheet that only authorised team members and our server's service account can access. It includes account details (name, email, optional phone, sign-up date, consent status), gift metadata (occasion, template, recipient first name, design choices and status), photo metadata (file name, type and size — never the photo itself), contact-form submissions and consent records. The text of your letters is not copied unless we tell you otherwise in an update to this policy. The sheet is never public.

Service providers

We use Supabase (database, login and file storage), Vercel (hosting), Razorpay (payments — they handle your card, UPI or bank details; we only receive an order and payment reference) and Google Workspace (internal reporting). They process data on our behalf under their own security and privacy commitments. We do not sell your data.

How long we keep it

• Your account and gifts: until you delete them or your account.
• Contact messages: up to 24 months.
• Consent records: kept after account deletion where the law requires us to prove consent, without other personal details.
• Backups are overwritten on a rolling basis.

Your rights

You can see and update your details in Account settings, delete individual gifts from your dashboard, and permanently delete your account there too — this removes your gifts, photos and login and erases your personal details from our reporting sheet. You can also ask us for a copy of your data, a correction, or to raise a grievance by writing to littlemomentsforyourlovedonce@gmail.com. We aim to respond within 30 days.

Children

Little Moments is meant for people aged 18 and over. If you are under 18, please use it with a parent or guardian's permission.

Security

We use encryption in transit, access controls on every database table, private file storage, and keep secrets on the server only. No system is perfectly secure; if something goes wrong we will tell affected users and the authorities as the law requires.

Contact

Email littlemomentsforyourlovedonce@gmail.com or call +91 95698 84116 or +91 78969 27604.