Privacy notice · Version 2026-10-28

How we keep your family's memories private

The short version. Your photos, videos, children's names and birthdays are locked on your family's phones before they reach us. We store them only in that locked form and we can't see them. We never sell your data, show you ads, or use your content to train AI.

Who we are

MayBirthday is run by Raw4 Multimedia Services, a sole proprietorship owned by Roffer Monajan, 40 Provincial Road, Calaocan, Santiago City, Isabela, Philippines (DTI Business Name No. 6140605). We are the personal information controller.
Data Protection Officer: Roffer Monajan, privacy@maybirthday.com.

What we keep, and why

Your email address, to sign you in with a code. Legal basis: our agreement with you.
Your family's phones: a record of each phone you approve and a locked copy of your family key for it, so only your phones can open your album. Basis: our agreement.
Your children's details (first name, birthday, photos, videos, notes): stored only locked, so we can't read them. A child's age counts as sensitive information under the Data Privacy Act, so we ask a parent or guardian to agree for each child. Basis: your consent.
A day and month per phone (no year, no name), so your phone can remind you of birthdays. Basis: your consent (you can turn reminders off).
Activity records: which account, phone or share link did what and when (sign-in, upload, view), the internet address and file size. Never the photos. Philippine law requires us to keep these (RA 11930, the Anti-Online Sexual Abuse or Exploitation of Children law, and RA 10175, the Cybercrime Prevention Act). Basis: legal obligation.
Error reports from the app: what broke and where, the app version and phone type. Emails, links, codes and numbers are removed on your phone and again on our server. Not linked to your account. Basis: our legitimate interest in keeping the app working.
Problem reports you send from Help: what you typed, an email if you want a reply, the app version, phone type and recent error codes. Never photos. Linked to your account if you were signed in, so we can help you. Basis: our agreement with you.
Your family plan: which store you bought it in (App Store or Google Play), the store's purchase number, the size, when it started, renews or ends, and whether it was cancelled or refunded. Basis: our agreement with you.
Reports you send us about a photo or link, including the one item you report (your phone sends us that copy). Basis: legal obligation and protecting children.

The copy of each photo and video made for phones has its location removed on your phone before it is uploaded, so anything shared from MayBirthday never says where it was taken. Two settings keep the place for your family only, locked so that not even we and no share link can see it: the untouched original (Keep originals), and where a photo was taken, kept in its locked details (Keep where photos were taken). Both are on for families who join from October 2026, and a parent can turn either off at any time (Family, Full quality).

How long we keep it

Your album: until you delete it or your account.
Photos and videos you delete: 30 days in "Recently deleted", then removed for good. The backup copy is removed within about 40 days after that.
Activity records: 6 months, then deleted automatically, unless the authorities order us to keep them longer.
Error reports: 30 days.
Problem reports: until we've fixed the problem, then 90 days.
Anything linked to a child-safety report or a legal order: as long as that case legally needs it.
Records that you agreed for a child (not the child's name or photos): while we need to be able to show that consent was given.
Encrypted copies of our records, so we can rebuild the service after a disaster: one a day for 35 days, and one a month for 13 months. After you delete your account, your records drop out of these copies as they expire, at the latest after 13 months.
Your family plan's purchase records: while your account exists, then for as long as tax law requires.
An album whose plan has ended: view-only for one month, then deleted. We email every parent when the month starts and 7 days before it ends. If a payment fails, the month only starts once the App Store or Google Play stops trying to take it. Your sign-in stays, so you can start again.

Who else handles it

Cloudflare stores the locked files and our records. It may store them on servers outside the Philippines. It can't open your locked content either.
Backblaze, in the United States, keeps your full-quality originals (when Keep originals is on) once they're a week old. The photos and videos your phones show stay at Cloudflare. For a few more weeks it also keeps our older backup copy, locked, and then empties it. It can't open any of it.
Amazon Web Services, in the United States, keeps the backup: a second copy of every locked file, and a nightly encrypted copy of our records, so a problem at one company can't lose your photos. It can't open your locked content or read the records copy.
Resend sends our sign-in emails, so it receives your email address and the code. It may store them outside the Philippines, for up to 30 days.
Apple (App Store) and Google (Google Play) take payment for the family plan. They tell us that a purchase was made, which size, when it renews or ends, and whether it was cancelled or refunded, with a random number we gave your family to match it. We never see your card, GCash or bank details, or your Apple or Google account.
The authorities (such as the DOJ, PNP, NBI and the courts), only when the law requires, and only what we hold. Because your content is locked, that can only be locked files and the records above.

We will update this notice before adding any other provider.

Your rights

Under the Data Privacy Act you can ask what we hold about you, correct it, download it, object, withdraw consent, and have it deleted. Most of this is in the app: Family → Download everything and Family → Delete my account. You can also email our Data Protection Officer; we answer within 15 days. If you're not happy with our answer, you can complain to the National Privacy Commission (privacy.gov.ph).

Children

Children never have accounts. A parent or guardian adds them, agrees for each child, and can withdraw that at any time by deleting the child's album or the account. If a personal data breach ever involves a child's details, we tell the parents, and explain it to the child in words they understand.

For kids

This is your birthday album. Your mama, papa or guardian made it for you.

Who can see it? Only your family and the people they choose. Not even the people who made this app can see your photos. They're locked, like a treasure box, and only your family has the key.

Where are you? The hidden part of a photo that shows where it was taken is locked, so only your family can see it. Photos your family shares never show it, so nobody can find your home from them.

Something wrong? If you see something that makes you feel bad or scared, tell a grown-up you trust right away. They can press Report, and we'll hide it quickly.

How we protect it

End-to-end encryption; location removed from every shared copy (kept for your family only, locked, when Full quality is on); a PIN or fingerprint to open the app; screenshots blocked inside the Android app; a new phone can't open anything until a family phone approves it; account recovery and deletion requested from the web wait 3 days and warn every family phone. If a breach of personal data creates a real risk of serious harm, we notify the National Privacy Commission within 72 hours and tell the people affected without delay.

Changes

We'll tell you in the app before this notice changes, and ask again for your consent where the law requires it.

See also our Terms of use and Child safety standards.