Privacy policy

Last updated: 2 October 2026

Yisty is a private photo and video album for families, provided by Palms Collective, trading as Yisty (“we”, “us”). Each family has its own separate space that only that family, and the guests it chooses, can see. There is no advertising and no tracking. This page explains what information Yisty holds and what it is used for.

Who can use Yisty

• Family members sign in with their Google account, either to start a space for their family or after being invited to one. They can add, organise and share photos and videos. One family can never see another family's space.
• Guests are people a family member has chosen to share an album with. They open a personal link and confirm a one-time code sent to their email address. Guests can only see what was shared with them.

Information from Google

When a family member chooses "Sign in with Google", Google tells Yisty three things: their name, their email address, and a Google account identifier. Yisty uses these only to recognise the person and sign them in.

• Yisty never sees or stores a Google password.
• Yisty does not ask for, or have access to, anything else in a Google account, such as Google Photos, Drive, Gmail, contacts or calendar.
• Information received from Google is not shared with anyone, not used for advertising, and not used to train AI models.

Yisty's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Other information Yisty holds

• Photos and videos that family members upload, along with details they carry or that members add: the date taken, the place taken, the camera used, captions, album names and the names of people in them.
• Descriptions for search. Each photo is described automatically (for example "a child on a beach") so that it can be found by searching.
• Guests' details: the email address and name a family member entered when sharing, and a record of when the shared album was opened. If the family member chooses, a guest is emailed at the start of a month when photos were added to the album; every such email has a link to stop them.
• Hearts, comments and photos from guests. Where a family member allows it, a guest can mark a shared photo as loved, leave a comment, or add photos of their own. Hearts and comments are visible to the family and to everyone that album was shared with. Photos a guest adds are seen only by the family until a family member approves them; if declined they are deleted, and if nobody decides within 60 days they are removed.
• Place names. When a photo records where it was taken, Yisty names the nearest town. This is worked out inside the family member's own browser; the location is not sent to any mapping company. Guests are never shown where a photo was taken.
• Faces. Family members can ask Yisty to group photos of the same person. This is done entirely inside their own browser, and what it works out about faces is kept only on that device; it is never sent to or stored on Yisty's servers or shared with anyone. Only the names a family member confirms are saved, as the names of people in a photo. It can be removed from the device at any time from the People page.
• Email choices and time zone for family members, so that optional emails ("On this day" and a monthly summary) arrive in the morning. They can be switched off in Settings.
• Plan details for families who pay for Yisty: whether the plan is on a trial, active or ended, the dates of the trial and the next payment, how much storage is being used, and reference numbers that link the family to its record at Stripe. Yisty never sees or stores card numbers.
• Sign-in records: the times someone signed in and the type of device used, so that sign-ins can be reviewed and ended.

How information is used

Only to run the album: to show photos and videos to the people entitled to see them, to make them searchable, to send invitation and sign-in code emails, to take payment for a family's plan, and to keep the album secure. Nothing is sold, rented or used for marketing.

What guests can see

Guests see only the albums or items shared with them. Location and camera details are removed from the copies guests see, and family members can end a guest's access at any time.

Cookies

Yisty uses only the cookies needed to keep you signed in. There are no advertising or analytics cookies.

Services Yisty relies on

• Cloudflare hosts the website, stores the photos, videos and records, protects the site from abuse, and runs the automatic photo descriptions.
• Google provides sign-in for family members.
• Mailgun delivers invitation and sign-in code emails, emails about a family's plan, and the optional reminder emails described below. These emails never contain photos.
• Stripe takes payments for families who pay for Yisty. The card details, billing name and address you enter on Stripe's pages go to Stripe, not to Yisty. Yisty gives Stripe the email address of the family member who starts the plan. Stripe keeps payment records as the law requires.

These services process information only to provide Yisty, under their own security and privacy commitments.

How long information is kept

• Photos, videos and albums are kept until a family member deletes them. Deleted items can be restored for 30 days and are then permanently removed. A backup copy of each photo and video is kept in a second private store, and is removed within a further 30 days.
• Guest access ends on the date chosen by the family member, or as soon as they stop sharing.
• If a family's plan ends, its photos and videos are kept for at least 90 days so the plan can be started again, and the family is emailed before anything is deleted.
• Sign-ins expire automatically, and one-time codes expire after 10 minutes.

Security

Photos and videos are stored privately and are never publicly accessible. Every request is checked before anything is shown. All connections are encrypted.

Your choices

If you are a family member or a guest, you can ask to see the information Yisty holds about you, to have it corrected, or to have it deleted. If you appear in a photo and would like it removed, you can ask for that too. Family members can remove Yisty's access to their Google account at any time at myaccount.google.com/connections.

Children

Yisty is a family album and may contain photos of the family's children. The website itself is intended for use by adults.

Changes

If this policy changes, the new version will be published on this page with a new date.

Contact

Questions or requests: hello@yisty.app