UPDATED SEPTEMBER 25, 2026

Lillepost SMS Privacy Notice

This notice covers Lillepost’s optional SMS/MMS program and the SMS consent form. Requesting a sign-in code sends a verification text to the number you enter. Saving a preference in your account does not itself send a text.

Information we collect

When you save SMS preferences, we record the mobile number you enter, your signed-in account identifier, the consent choices you make, the wording and version of the disclosure, and the time you save or withdraw consent. A saved number remains unverified until a phone verification step is completed.

Once messaging is activated, we will also process phone verification and delivery information, your incoming texts and attachments, and the sender and recipient numbers needed to save memories in the intended family archive.

For phone signup and sign-in, we process your phone number, short-lived verification information, and consent. Codes expire after five minutes. We limit requests using counters for phone numbers and hashed network addresses to prevent abuse. Verifying your phone creates a private account or signs you back into your existing phone account.

How we use it

For invited relatives, we also store the name supplied by the inviting parent, the family and selected children, the invitation status, and the consent disclosure and timestamp. We learn the relative’s number from their verified incoming connection text. No email address or account is required. Invitation tokens are stored as hashes, expire after 7 days, and can connect one phone.

Connection codes are stored as hashes and expire after 10 minutes. Incoming photo downloads are stored privately with your memory. Failed imports can be retried from your SMS preferences.

We use this information to record and honor your choices, verify phone ownership, connect messages to the correct family, save memories you submit, provide requested confirmations and help, and send weekly memory prompts only if you separately select them.

Sharing and service providers

We do not sell mobile numbers or SMS consent records. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties except the providers needed to operate and deliver the messaging service.

Lillepost uses OpenAI Sites and Cloudflare infrastructure to host the app and store account and consent information. For texting, Twilio and participating mobile carriers will process the information necessary to send and receive messages. We may also disclose information when legally required.

Your family’s information

The inviting parent can see a contributor’s name, connected phone number, and invitation status, and can remove their access. Contributors can send memories only to the children in their invitation. They cannot read the family archive through that invitation. Keep personal invitation links between you and the intended recipient.

SMS preferences are accessible through the signed-in account that saved them. A typed phone number alone does not grant access to another family or prove ownership. This program is for adults; children do not need a phone number or SMS subscription. Only send photos, notes, and schoolwork that you are authorized to contribute.

Your choices and retention

You can review or withdraw consent in SMS preferences. When texting is active, replying STOP will unsubscribe your number from Lillepost texts. Email and web use remain available.

Consent and withdrawal records are retained to keep a history of your choices and honor opt-outs. Withdrawing SMS consent does not automatically delete your archived memories. For questions or requests about your SMS information, contact ctndrfx@gmail.com.