Privacy Notice

Who we are

Friddle is operated by Mideum Lee. For the personal data described below, Mideum Lee is the data controller.

Data we collect

• Account data — your email address and authentication credentials.
• Family & child profiles — kid names, birthdays, and family group membership you enter.
• Artwork uploads — images you upload, plus any captions or notes.
• AI-generated content — interpretations our AI produces from your uploads.
• Usage data — device, browser, IP address, and basic telemetry needed to operate the service.
• Support messages — anything you write to us.

How we use it

• To create and maintain your account and family group (contract performance).
• To run the gallery and produce AI interpretations of your uploads (contract performance).
• To keep the service secure and prevent fraud or abuse (legitimate interests).
• To improve the product and fix bugs (legitimate interests).
• To respond when you contact us (legitimate interests / contract).
• To comply with legal obligations (legal obligation).

Who we share data with

We share personal data only with the following categories of recipient:

• Paddle — our Merchant of Record. Paddle handles payments, subscription billing, tax compliance, invoicing, and related customer service. See Paddle's Privacy Notice.
• Hosting & infrastructure providers — including our cloud database, file storage, and serverless compute providers, used to run the service.
• AI providers — uploaded images and prompts are sent to AI model providers solely to generate the interpretations you request.
• Professional advisers and authorities — where strictly required by law.

How long we keep it

We keep your account and gallery data for as long as your account is active. If you delete your account, we delete or anonymise associated personal data within a reasonable period, subject to legal retention requirements (e.g. billing records held by Paddle).

Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. UK and EEA residents also have the right to lodge a complaint with their local data protection authority. To exercise any of these rights, email hello@littlecurators.app and we will respond within one month.

International transfers

Our providers may process data outside your country of residence, including in the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and isolation of family data through database-level security policies.

Cookies

We use only essential cookies and local storage needed to keep you signed in and remember your preferences. We do not run advertising or marketing cookies.

Contact

Questions? Email hello@littlecurators.app.