Privacy Policy

Last updated: 16 August 2026

Ajatu is an app parents use to build a time capsule of their children's voices and stories. Your family's memories are the most personal data there is — this policy explains in plain language what we collect, why, and what your rights are.

1. Who is responsible, and how to reach us

The data controller is Kindela OÜ (Estonian registry code 17097713, address Põrja/1, Purtsi küla, Elva vald, Tartu maakond 68709, Estonia), the company behind the Ajatu app (ajatu.family). For any privacy question, write to contact@kindela.eu.

2. What we collect

• Account data: your email address and name. There is no password — sign-in works with a code or link sent to your email.
• Capsule content:voice recordings, their transcripts, photos, and capsule details (the child's first name, birth date, recording notes). You create and control this content — we do not create or share it.
• Technical data: a device notification token (if you enable notifications) and ordinary security logs.
• Usage statistics:the app sends us usage events (e.g. "app opened", "recording started", "recording abandoned") so we can see where the app gets in your way. When you are signed in, these events are linked to your account, and during the testing period we may use them to reach out to you personally about your experience. Recording content, transcripts or anything else personal is not included in the events. On the app's own screens, usage statistics stay on our own server — no third-party analytics or advertising services, no cookies, no trackers. The one exception is error reports: when the app or a web page crashes or an operation fails, a technical error report goes to Sentry (EU servers) so we can find the fault and fix it. On the public website and on capsule web pages (including when opened inside the app) we use cookieless web statistics (PostHog, EU servers) that set no cookies and do not follow you across other sites — on capsule pages we anonymously measure which chapters are viewed and listened to, so we can make the page better. Recording content never reaches the statistics.

3. Why we use it

• To provide the service: storing, organizing and assembling your capsule (performance of contract).
• To automatically transcribe and categorize recordings so the capsule builds itself (performance of contract).
• During the testing period, a member of our team may listen to recordings and review their transcripts to validate the quality of the automatic transcription and categorization (legitimate interest in ensuring the service works correctly). This review is limited to our own team, is used only for quality assurance, and will end when testing ends.
• To send notifications, if you have enabled them (consent — withdrawable at any time).
• To understand how the app is used and to improve it, including — during the testing period — contacting you individually about your experience (legitimate interest in developing the product; you can object at any time).
• To keep the service secure (legitimate interest).

4. Children's data

Time capsules contain children's voices and stories. Content is uploaded and controlled by a parent or guardian. When you record other people (including family members), you are responsible for their consent. Children's data is not used for anything other than providing your capsule — not for advertising, not for profiling.

5. Our promises

• There are no ads in the app.
• Your data is not sold.
• Your recordings are not made public and are not used in any context beyond providing your own family's capsule, unless you have explicitly consented to that specific use.
• Data is stored on servers in the European Union.

What happens to your recordings in the long run — including if Ajatu should ever close — has its own page: our promise →

6. Where and with whom data is processed

We use the following processors to provide the service:

• Cloudflare — application hosting and storage of recordings and data (EU-jurisdiction servers).
• Google— automatic transcription, speaker attribution, and generation of titles and summaries (Gemini); capsule details such as the child's first name and age accompany the processing. Also delivery of mobile notifications. Processing happens under a data-processing agreement and may occur outside the EU. Your data is not used to train Google's models.
• Resend — sending email (sign-in codes, invites, notices); sees your email address and the capsule name.
• PostHog— cookieless web statistics on the public website and on capsule web pages, including when they open inside the app (EU servers); not present on the app's own screens.
• Sentry — app and web error reports (EU servers): the error message, where it happened, and the device and app version. Recordings, transcripts and capsule content are not included in error reports.

7. How long we keep it

Your capsule is yours: we keep it until you delete it. Deleting a recording or a capsule removes the files from our storage. You can permanently delete your account directly from the app's settings (or the web app) — this removes all capsules, recordings and cloud copies. You can also write to us and we will erase all of your data. Full instructions for deleting your account and data →

8. Your rights

• Access and correct your data.
• Delete your data (the "right to be forgotten").
• Data portability — you can export your entire archive from the app at any time, in open formats.
• Withdraw consent (for example, turn off notifications).
• Object to processing based on legitimate interest (for example, usage analytics or being contacted about your experience).
• Complain to your supervisory authority — in Estonia, the Data Protection Inspectorate (aki.ee).

9. Changes

If we change this policy, we will announce significant changes in the app or by email and update the date above.