Safety model
Public QR codes. Private family memories.
What is public
The 28 mission QR links are public. They only show the blank mission form and book challenge context.
What is private
Every created memory gets a long random share token. There is no public gallery, search page, or sequential memory ID.
Owner control
The parent gets a separate owner token for the dashboard, stored on the device. Lost it? We email your private link to the address you set up with, so you can reopen the diary on any device — no password, no account.
Media protection
The media route checks the memory token or the owner token before it loads any file. Nothing sits in an open static folder. Uploaded photos and videos are automatically deleted within 24 hours.
Email boundaries
Recipients can receive a specific memory link. We do not subscribe them to anything.
Children's photos
The upload form requires parent or guardian permission. We re-encode every uploaded photo so no EXIF or GPS data survives. Uploaded photos and videos are automatically deleted within 24 hours — only the written diary entry is kept — and the owner can delete a memory and its files at any time.