Privacy policy

Who is responsible

Arctic Fox ApS, CVR 45593088, Bramsvej 13, 2920 Charlottenlund, Denmark, operates Juneberry and is the data controller for the personal data described on this page. The same company is also registered in Denmark under the secondary name Juneberry ApS; the controller is Arctic Fox ApS either way.

For anything about your data, write to help@byjuneberry.com.

What this policy covers

It covers byjuneberry.com and the messages you exchange with Juneberry — the questions we send and the answers you give, whichever channel carries them.

What we hold

Your account: your name, your email address, your mobile number and your chosen language. We ask for your name and your email when you sign up — the name so that a family’s pages can call you something true, the address so that we have a way of reaching you about your account. We use that address for confirmation letters — when it is first given, when it is changed, and when you ask us for a new one — so that we know it reaches you. Confirming is not required in order to use Juneberry, and the address is not a way of signing in: your number is what you sign in with.

Your child: the name and date of birth you enter, and the time zone your device reported, so questions and dates fall on the right day.

Your memories: the photographs you send or upload — including the technical details a photograph carries inside it, such as the day it was taken — and the words you write with them.

Your messages: when you answer through WhatsApp, we receive and keep the message’s content and its delivery identifiers. Photographs and words become part of your story; video and voice messages are not kept.

Your WhatsApp connection: if you choose to connect WhatsApp, we keep the WhatsApp number you connected with — which may be a different one from the number you sign in with — and when the connection was made and, if it happens, ended again. We also keep the technical traces of the connection itself: when the one-time code was created and used, and from which number. We never store the code itself in our database. There we keep only a one-way fingerprint (a hash), which the code cannot be recovered from. While you connect WhatsApp, the readable code is stored temporarily in your browser, in the cookie described below. The cookie expires automatically. It is voluntary: you can answer on Juneberry without connecting WhatsApp, and you can end the connection again under Settings.

Other people: a memory may name or show somebody who is not the account holder — a grandmother’s words on the back of a photograph, a friend in the frame. Those details live only inside your own family’s story.

Invitations: when you invite somebody into the family, we hold the email address you invited, what you chose to call them, and what became of the invitation. Once they sign in, we also hold the mobile number they signed in with — that is what the invitation becomes attached to. If you invited somebody by number before we began sending letters, that number is what we hold.

Technical records: the small set of cookies described below, and ordinary server logs kept for security.

What we use it for, and on what basis

To run Juneberry for you — sending questions, keeping answers, composing the story and the book. Legal basis: our contract with you (GDPR article 6(1)(b)).

To keep the service safe — verifying sign-ins, preventing abuse, keeping security logs. Legal basis: our legitimate interest in running a secure service (article 6(1)(f)).

To meet legal duties where they apply. Legal basis: legal obligation (article 6(1)(c)).

If we ever ask for your consent to something, we will say so clearly at the moment we ask, and you can withdraw it as easily as you gave it (article 6(1)(a)).

Data about your child, and about other people who appear in your memories, is processed solely so that your own family’s story can exist. Our legitimate interest is helping you keep a private family archive; anybody who appears — or their parents — can object or ask for removal at any time via help@byjuneberry.com.

Children

Juneberry is used by adults, about their children. A child’s name, birth date and photographs are given to us by a parent, and they are used for exactly one thing: the family’s own private story and book. They are never used for advertising, never shared beyond the family, and never used to train anything.

Who helps us

A small number of companies help us run Juneberry. They handle your data on our instructions and for nothing of their own.

Supabase provides the database, the sign-in and the private storage your photographs live in. The project that holds them runs in the European Union.

Vercel runs the website. We have set the servers that render your pages to run in the EU — though, as with any website, the network that delivers pages worldwide, the system that builds them and the technical records of requests are not all confined to one country.

Twilio carries messages. It sends your sign-in codes by text, and it carries the WhatsApp conversation in both directions — which means a photograph or a line you send by WhatsApp passes through Twilio’s systems, and remains in their record of that message, before and after it reaches us.

Resend sends those confirmation letters and the invitation letters. A letter holds a link and a code — an invitation also holds the first name of the person who sent it — and nothing else — nothing about your child, your family or your memories. Resend is an American company: it sends from servers in Ireland, while the account, the address the letter went to, and the record of our having sent it are held in the United States. We have a data-processing agreement with them, and we have not switched on any tracking of whether a letter is opened or a link followed.

WhatsApp itself is Meta’s service. A message sent there travels through Meta’s network under Meta’s own terms and privacy policy, exactly as your other conversations on it do.

When you write to help@byjuneberry.com, your message is handled by the company that provides our email, as any email is.

The woven passages, and the help that writes them

A few lines in a story are not yours or ours but something in between: the quiet passages that hold a month’s photographs together. Those are drafted with the help of an AI writing service, Anthropic’s.

It is not something the website does by itself overnight. It happens while you are in the room where the book is made: the memories you are looking through are read as soon as you open it, without your pressing anything; a wording is suggested when you press for one; an example of the lightly edited style is written when you press to see it. When you leave the room, it stops. One thing does not happen in that room: when a finished year is made ready so a new year of questions can begin, we run that preparation by hand from our own machine, and it sends the words of that year so the service can point at the pages a new question may already be answered by. It can only point: it writes nothing into your story, and a person decides what happens next.

What is sent is words — yours and the book’s own. Among them are the words you wrote in a memory; a caption you wrote under a photograph; an answer you give when the book asks you about a memory; and a passage already written for you, which goes back — among other times, when you ask for it to be changed, when the book is divided into chapters, and when a month of the book is written. With them go the question those words answered and your child’s first name, so that whoever writes a sentence knows whose story it is. The same goes for the day each memory belongs to, so the chapters follow the year, and for the month of your child’s life each memory falls in, so an older page can be found again. Whoever writes is also told which memories have a photograph beside them, because that is what lays the pages out. No photograph is ever sent: not the picture, not a small copy of it, not a measurement taken from it, and not a description the service itself wrote of what is in it. Neither is your own name, your telephone number, nor your email address. Your child’s birth date we do not send as a fact of its own, and no single request carries both the day a memory belongs to and the month of your child’s life it falls in. We promise no more than that: the days themselves, a whole year of them at a time, can place your child’s birth within a few days; your own words are sent as you wrote them, and they can hold personal details of their own — a date, a name, a place.

Anthropic processes that material for us under their business terms, which say that material sent this way is not used to train their models. They are an American company; see the section on where your data lives.

Where your data lives

The database and the photographs are held in the European Union.

Some of the companies that help us are American, and a message sent by WhatsApp reaches us through them. Where personal data reaches such a company, we rely on the safeguards written into the data-processing terms we have with them — for providers of this kind that normally means the European Commission’s standard contractual clauses, or an adequacy decision covering the company’s certification. Ask us at help@byjuneberry.com which one governs a particular company, and we will tell you.

Cookies

Juneberry sets only the cookies it needs in order to work. There is no advertising, no analytics and no tracking — which is why there is no cookie banner to click away.

The cookies are: your sign-in session; a note of the number a code was just sent to, which lasts a quarter of an hour; your chosen language, and which family you are reading, both for a year; two that exist only while somebody joins on an invitation — the link from the letter, and a note of which invitation it was, each for an hour; one holding the prepared WhatsApp connection code while you connect, for half an hour; and one that only whoever operates Juneberry ever receives, holding a freshly made invitation for half an hour. All are set by us alone, and none follows you anywhere else.

How long we keep things

Your family’s story is kept for as long as your family keeps it. That is the promise the product is built on, and not a retention loophole.

When you remove a memory, it leaves the story at once and is shown to nobody. We do not destroy it in that moment, and we should say so plainly: a removal is meant to be undoable, because people change their minds about a photograph, and nothing in Juneberry deletes anything on a timer. So removed material stays recoverable until you ask us to erase it for good — and then we do, the photograph with it.

We have not yet set a number of days after which removed material is destroyed by itself. When we settle on one, it will be written here.

If you ask us to close your account, we erase your family’s data and keep only what the law requires us to keep, for as long as it requires it.

Your rights

You can ask to see the data we hold about you, have it corrected, have it deleted, have its use restricted, object to a use of it, and receive a copy in a machine-readable form to take elsewhere. If you have given a consent, you can withdraw it at any time.

There is no button for any of this yet. Write to help@byjuneberry.com and a person does it by hand. The law gives us a month to answer, and a month is rarely what it takes.

Complaints

If you believe we handle your data wrongly, tell us first — we want to know. You can also complain to the Danish Data Protection Agency, Datatilsynet: www.datatilsynet.dk.

No profiling, no selling

Juneberry makes no automated decisions about you, builds no profiles, shows no advertising, and never sells or rents personal data.

Security

Photographs live in private storage, data travels encrypted, access is controlled family by family, and messages that arrive from outside are verified before they are trusted. No system on earth is perfect, and we do not claim to be — but Juneberry is built so that privacy is its default, not a setting.

Changes to this policy

When this policy changes in a way that matters, we will say so on this page — and if a change touches how your story is handled, we will tell you before it takes effect.