Privacy Policy
Last updated July 2026
Who we are
Tiaki Journal is a New Zealand family photo journal service, operated by Emgo Limited. Every month we turn your family's photos into a beautiful printed journal and post it to your grandparents. You can reach us at hello@tiakijournal.co.nz.
What we collect and why
We collect only what we need to deliver your journal. Here's exactly what that means for each person involved:
Account holders
- First name and family name
- Email address
- Password (securely encrypted — we never see or store it in plain text)
- Stripe customer ID to manage your subscription
Contributors (family members you invite)
- First name
- Email address
- Push notification token, if you've enabled notifications
Beneficiaries (your grandparents)
- First name
- Delivery address
Journal content
- Photos uploaded by contributors
- Captions added to photos
That's it. We don't collect last names beyond your family name, phone numbers, dates of birth, or anything beyond what's listed above.
How we use it
Everything we collect is used for one purpose: delivering your Tiaki Journal. That means generating your monthly journal, sending it to print, and posting it to your grandparents.
We do not use your photos or personal information for marketing or advertising. We do not sell your data to anyone, ever.
We'll send you transactional emails as part of the service — things like subscription confirmations, payment receipts, and monthly reminders to upload photos. If we ever send marketing emails about new features or offers, you can unsubscribe at any time from the link at the bottom of any email.
Visibility within your family
Tiaki Journal is built around shared family journals, so some information is visible between the people you invite. Contributors can see the first names and uploaded photos of other contributors in the same family.
If you're part of more than one family on Tiaki Journal, your name and photos are visible separately within each family you belong to — families never see each other's information.
Only the account holder (the person who set up the subscription) can see billing and subscription details. Other contributors cannot see this.
A note on invite links: joining a family is done via a shareable invite link. These links don't expire and can be used more than once, so anyone who has the link can join. We recommend treating your invite link like a password and only sharing it directly with people you trust.
Push notifications
If you've enabled push notifications, we'll send you a reminder to upload photos if your family's photo count is running low in the lead-up to your monthly journal (around the 20th of the month, and again a few days before your journal is created), and a confirmation once your journal has been sent to print. Notifications don't include personal information beyond what's needed to identify which family the reminder relates to. You can turn these off at any time in your device settings.
Who we share it with
We share your information only with trusted third-party services that help us operate Tiaki Journal, including providers for payment processing, cloud storage and database hosting, app infrastructure, PDF generation, website hosting, push notifications, and address lookup.
We also share your journal PDF with our print partner, who prints your journal each month. For now, delivery addresses are handled by us directly, and we post your journal ourselves — this may change as we grow, and we'll update this policy if a print partner takes over posting as well.
One provider worth calling out specifically: Stripe handles all payment processing. We never see or store your card details — Stripe handles that entirely.
All third-party providers access only the minimum data needed to perform their function and are bound by appropriate data protection agreements.
Where your data is stored
We use cloud-based services to store and process your data. Some of these services operate servers outside New Zealand, including in Australia and the United States. We've taken reasonable steps to ensure your data is protected wherever it's stored, including data processing agreements with our providers. All data is encrypted in transit and at rest.
How long we keep it
We keep your account data for as long as your subscription is active.
Photos you upload are automatically deleted 10 days after that month's journal has been successfully generated. This gives a short window to catch any issues with a journal before the original photos are removed. Your generated journal PDF remains in the app afterward, so your family can look back through past journals for as long as you'd like — the printed record is what's kept long-term, not the individual source photos.
If you cancel your subscription, your family retains access to view your past journals in the app indefinitely. We don't automatically delete your data on cancellation.
If you'd like your data deleted entirely, email us at hello@tiakijournal.co.nz and we'll complete this within 30 days.
Security
We take reasonable steps to protect your personal information. All data is encrypted in transit. Access controls mean each family can only access their own information. We do not store payment card details — ever.
If we become aware of a data breach that poses a risk to your personal information, we will notify the New Zealand Privacy Commissioner and affected users as soon as practicable.
Cookies and analytics
Our website uses only the cookies necessary to operate the service. We do not use advertising cookies or third-party tracking. We may use analytics tools to understand how our website and app are used — where this involves cookies or tracking, we'll only use the minimum necessary, and we'll update this policy if our approach changes.
Age requirements
Account holders must be 18 or over. By creating an account you confirm you meet this requirement. Contributors may be invited by the account holder regardless of age — by inviting someone you take responsibility for their participation, including obtaining parental consent for anyone under 18. By uploading photos that include images of children you confirm you have the right to share them.
Your rights
Under the New Zealand Privacy Act 2020 you have the right to access the personal information we hold about you and to request corrections. Email us at hello@tiakijournal.co.nz and we'll respond within 30 days.
If you're not satisfied with how we've handled your information, you have the right to complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes to this policy
If we make material changes to this policy — such as collecting new types of data or sharing it with new categories of third parties — we'll let you know by email and update the date at the top of this page.
Questions
Get in touch any time at hello@tiakijournal.co.nz.