Your memories are your own. Period.

We built yeerbook on the belief that your most personal reflections shouldn't be accessible to anyone but you. Not even us.

Last Updated: July 14, 2026

Hybrid End-to-End Encryption

Traditional services trade privacy for convenience. True encrypted services trade convenience for privacy. yeerbook uses a hybrid model that gives you both: total cryptographic privacy by default, with "just-in-time" permissions for AI features and printing.

User-Held Keys

Your master keys are derived from your password or your unique Recovery Phrase on your device. We never see your password, and we never store your master keys.

Ephemeral Grants

When you want our AI to process your month, your app provides Just-in-Time Access using a temporary, short-lived key. It is deleted the moment the task is done.

Signer Privacy

All signer contributions (including text notes, voice notes, signatures, and handwriting or drawings) are end-to-end encrypted. Signatures are always visible to the creator and other signers. Notes are also shared with other signers on group memories; on regular memories, notes are visible only to the creator. When a signer records a voice note, they choose whether the creator can hear the recording itself or only read the transcribed words. If they decline, the recording is deleted, not merely hidden.

How we compare

	Legacy Cloud Apps	yeerbook hybrid	Standard E2EE
Who holds the keys?	You & The Company	Only You	Only You
Can the server read it?	Yes (permanently)	Only ephemerally (Briefly, when requested)	No (never)
AI Features & Processing	Supported	Supported	Impossible
If database is leaked?	Your data is exposed	Your data is safe	Your data is safe

Data Collection & Minimization

We only collect what is necessary to run the service. This includes your email for your account, your shipping address for book delivery, and technical logs (like your IP address) used for security and fraud prevention. Payment information is handled exclusively by Stripe; we never see or store your credit card details. Your content, including photos, voice reflections, and signatures and handwriting/drawings, is encrypted before it ever reaches our servers, and stays encrypted at rest. The exception is when your finalized pages are decrypted to generate a PDF, either to produce your physical book or when you request a digital export. That decrypted PDF is stored temporarily on our servers, up to 30 days after your book is first finalized, or 14 days if you request a fresh export later, before it's automatically and permanently deleted.

How We Use Your Data

We use your data to generate your monthly reflection prompts, layout your yearbook, and print your physical book. When you authorize AI features, most processing uses temporary keys that are destroyed immediately after use. Reflection prompt generation is optional: it only runs when you tap to request one, never automatically. When you do, the relevant decrypted text is briefly sent to our servers and our AI provider to process it, then the result is re-encrypted before saving.

Retention & Deletion

You are in control of your personal data. Because yeerbook uses zero-knowledge encryption, we do not hold your master decryption keys and cannot decrypt your memories on our servers. Under applicable privacy laws (such as GDPR and CCPA), you may contact support for a copy of your account metadata: information like your account details and order history that isn't part of your encrypted content. To access your fully decrypted memories, you can request a digital PDF export of a finalized yearbook from your authenticated dashboard. Only one export can be generated at a time. If one is already processing or available, you'll need to wait for it to complete or expire before requesting a new one. Once generated, your PDF is available for download for 14 days, after which it's automatically and permanently purged from our servers. You may also delete your account at any time from your account settings. Your account and content become inaccessible immediately and are fully purged, including from backups, within 30 days.

AI Training & Data Usage

We never use your personal memories, photos, or voice reflections to train AI models. Your data is used exclusively to provide the yeerbook service to you. We believe your history should belong to you, not an algorithm.

Third-Party Sub-processors

We use a small number of trusted partners: Supabase for database and storage, Google AI (Gemini) for voice note transcription, and Stripe for payments. Photo clustering is based on timestamp metadata only and never involves sending photo content to a third party. We use enterprise-grade APIs which explicitly state that data sent via the API is not used to train their foundation models.

To fulfill your print order, your finalized book pages are briefly decrypted to generate the print file, which is then sent securely to our print fulfillment partner. They process your files solely to produce and ship your book, and are contractually prohibited from using your content for any other purpose. Print files are stored by our print partner temporarily, consistent with their data retention practices, to accommodate reprints or support requests for damaged shipments, after which they are automatically deleted. Digital PDF exports, whether generated at finalization or requested later, are stored temporarily on our servers for up to 14 days after compilation, after which they are automatically and permanently purged.

The "No Master Key" Guarantee

Because we do not hold your master keys, we cannot recover your data if you lose your password. To protect against this, we provide you with a high-entropy Recovery Phrase. This phrase acts as a secondary master key that only you possess. We recommend storing it in a physical, secure location (like a safe or a password manager). Without either your password or this phrase, your memories are cryptographically lost forever.

Cookies & Tracking

We believe in a clean web. We do not use cross-site tracking cookies. We only use essential session cookies to keep you logged in and functional.