Privacy policy
Effective July 9, 2026
Who this is for
Raya's Book Shelf is a family app: a parent or guardian (the "account holder") creates the family, adds each child as a profile, and captures photos of the books their kids make or collect. Children don't sign in, don't have their own credentials, and don't provide any information directly — everything in the app is entered by the parent.
What we collect
- Account holder email address, used only to sign in (we send a one-time sign-in link — there are no passwords to leak).
- Family and child profile names, entered by the account holder.
- Photos of book pages that the account holder captures or uploads, plus the pages' reading order and light metadata (book title, page count).
- Reactions (a small set of emoji) left by people the account holder has shared a book with — no account or personal information is required to leave a reaction.
- We don't collect location, contacts, browsing history, or device advertising identifiers, and there are no analytics or advertising SDKs in the app.
How we use it
- Solely to run the app: storing and displaying the family's books, generating short-lived links so an account holder can share a book, and sending sign-in emails.
- We do not sell data, run ads, or use it to train any model. We do not share it with anyone outside the service providers listed below.
Who processes it on our behalf
- Supabase — database, file storage, and authentication. Photos and family data live in Supabase's infrastructure, access-controlled so one family's data isn't reachable by another.
- Vercel — hosts the web pages used for shared-book links (the pages friends and grandparents open).
- Bridges to Sunshine LLC (us) — Vercel and Supabase are the only infrastructure providers with access to this data; we don't use separate marketing, analytics, or ad-tech vendors.
- Sentry — crash and error reporting, configured to never receive account emails or photo contents; only technical details needed to fix a bug (e.g. which screen crashed).
- Expo (EAS) — builds and delivers app updates; doesn't have access to family data.
Sharing links
When an account holder shares a book, we generate a link tied to a random token — not a public URL guessable from the app or the book's name. Anyone with that link can view the shared book and leave a reaction; the account holder can revoke a link at any time from the app, which immediately breaks it.
The images behind those links are served through short-lived signed URLs (they expire on their own even if never explicitly revoked).
Retention and deletion
We keep a family's data as long as the account is active. Deleting a book removes its photos from storage immediately, not just the reference to them.
To delete your account and all associated data (family, child profiles, photos, and any active share links), email bridgestosunshinellc@gmail.com. We'll confirm and complete the deletion within a few business days. An in-app deletion option is planned before public release.
Children's privacy
The parent or guardian is always the account holder and the one who consents to this policy at sign-up — children never create accounts, provide information, or interact with anything outside the app the parent set up for them.
We don't knowingly collect information directly from children, and nothing in the app enables a child to share information publicly on their own.
Changes to this policy
If this policy changes in a way that affects how we handle your data, we'll update the effective date above and, for material changes, notify account holders by email.
Contact
Questions about this policy or your family's data: bridgestosunshinellc@gmail.com.