Only the members of your family that you invite. There is no public feed, no discovery and no way for someone outside your family to browse your photos. A family admin can choose to share a single post outside the family with a link that expires.
Yes. Every photo and video is encrypted by the app before it is stored, with its own key, and each album has its own key protected by Amazon Web Services' key management service. Photos open only through links that expire: within a day in the app and after seven days in email.
How WholeFamily encrypts your photos →
No. Photos and videos are never sent to an AI model, never used for advertising and never sold. Two features send text only to an AI model, translation when you ask for one and the daily email summary, under terms that prohibit using it for training.
Privacy policy →
Yes. Location, device and camera details are removed from photos and videos when you upload them.
What a phone video carries →
Yes. A family admin can create a link to a single post. Anyone with the link can see that one post without an account, nothing else in your family, and the link expires after seven days. The admin can also revoke it sooner.
We do not read your family's posts out of curiosity, for advertising or for product research. We do scan and review content to detect child sexual abuse material and other content our terms prohibit, and report it where the law requires.
Terms of use →
Sign-in has no password to steal, sign-in attempts are rate limited, all traffic is encrypted in transit, and a share link opens only the one post it was made for.
How WholeFamily protects your family's photos →