Privacy & GDPR

Controller

Chefen, Danish business registration (CVR) 28014201, Violvej 18, 3500 Værløse, Denmark, is the controller for MiMoments. Send privacy questions and requests to support@mimoments.com.

Information we process

Account and family: name, email, a password hash, email verification, membership, role and invitations. We also process additional profile or contact details you choose to provide.

Content and displays: uploaded photos and thumbnails, file information, albums, photo selections, screen names, connections, last device contact, schedules and calendar events if you use the calendar. Photos and events may include information about people other than you.

Operation and security: login and access tokens, IP addresses or derived values used to limit abuse, server logs, system actions and technical errors. Upload diagnostics contain error types and technical information, not the photo itself or your password. Support messages and your contact information are processed when you contact us.

Purposes and legal bases

For account holders, necessary processing to provide the requested account, family space, sharing, display and support is based on performance of the agreement (GDPR Article 6(1)(b)).

Operation, troubleshooting and abuse prevention are based on our legitimate interest in a working, secure service (Article 6(1)(f)). For people depicted in family content or receiving invitations, the purpose is to enable the requested sharing or invitation, balanced against their rights and privacy.

Processing required by a specific legal obligation relies on Article 6(1)(c). Any voluntary marketing requires a separate signup and can be unsubscribed from. General acceptance of terms is not consent to marketing.

Sharing and access

Content is available to family members according to their access and on the screens selected by the family. Someone with a direct photo or display link may gain access without a family login. Protect links and the devices displaying your photos.

QR guests do not need an account to send a photo. It is initially assigned to the originating screen and also appears to family administrators in the web gallery. They may choose to show it on other screens within the family. Optional local controls let people at a frame send and hide photos there.

Authorised people at Chefen may process information as necessary for operation, support or security. We do not sell family photos to advertisers. Screen campaigns use separate advertising images, not family members' photos or behavioural profiles.

Permanent upload invitations

An owner or administrator may create an upload link for a specific screen. Anyone with the link can send photos, but it does not grant access to family photos, calendars or settings. Uploaded photos appear in the family web gallery and initially on the selected screen; the family may later select other screens of its own.

We store the invitation label, creator, creation time, a hash of the access key and any revocation. When a signed-in user saves an invitation, we store the connection between that user and invitation. Uploads are associated with the invitation and, when using saved access, the uploading user. A guest link does not verify the identity of its holder.

Links do not expire automatically. The owner can revoke a link, also stopping uploads from saved access. Users can remove screens from their own lists. Revocation does not delete photos already uploaded. Protect the link because it can be forwarded.

Hosting and providers

Chefen operates MiMoments at Adeo Datacenter in Denmark and handles its own backups in Denmark. Email for verification, invitations and support is also processed as part of operation.

Your chosen email provider processes messages delivered to your inbox under its own terms. External websites you choose to open have their own privacy rules. No payment provider is currently active in the MiMoments checkout.

The described hosting and backups are in Denmark. If we change service providers or introduce transfers outside the EU/EEA, we must ensure a valid transfer basis and update information about the affected processing.

Retention and deletion

Account data, family content and display settings are retained while used to provide the family's service. When content is deleted or an account closed, we remove information no longer needed. Information may be retained as required for a specific legal obligation, ongoing dispute or security investigation.

Chefen keeps backups for 14 days. Deleted information may therefore remain in backups during that period. Operational and security data are limited to what is needed to investigate errors, prevent abuse and document relevant actions; the purpose and any ongoing incidents determine retention.

Removing a photo from an album or hiding it on a screen is not deletion. Removing a screen preserves family photos, including QR photos. Contact us to request deletion of QR photos or an account.

Android tablets store downloaded photos and display settings locally for offline use. Offline devices receive changes and removals only when reconnected. Clear app data on devices you no longer control. A browser or installed web app may also store technical files locally.

Your rights

Depending on the processing, you have rights of access, rectification, erasure, restriction, objection and data portability. Where processing relies on consent, you may withdraw it without affecting the lawfulness of previous processing.

Write to support@mimoments.com and identify the processing concerned. We may request information necessary to confirm your identity; never send your password. We normally respond within one month. If the rules permit an extension, we explain it and the reason.

You may complain to the Danish Data Protection Agency. Read more about your rights.

Share thoughtfully

Only upload photos and events you are entitled to share. Do not use MiMoments for confidential documents or particularly sensitive information. MiMoments is not used to make automated decisions with legal or similarly significant effects on you.