Security & trust
Family photos deserve infrastructure that is private, durable, and serious.
ILY is designed so your family’s media is not sitting loosely on application servers. Uploads go into private cloud object storage with strong access controls, encryption in transit, and policies built for sensitive family content.
Media storage
Not on our app servers
Photos, videos, and voice notes are stored in private Amazon S3 object storage. Application servers handle accounts, permissions, and coordination. They are not used as a place to keep your family media files.
Access
Private by policy
Buckets are configured for private access. Media is delivered through time-limited signed URLs, not public open links. Family membership and roles decide who can see what inside ILY.
Transit
Encrypted in motion
Client connections use HTTPS/TLS. Uploads and downloads to object storage are protected in transit so family media is not sent as open traffic across the network.
Compliance posture
ISO-backed cloud storage
Amazon S3 is in scope for Amazon Web Services compliance programs that include ISO/IEC 27001, ISO/IEC 27017, and ISO/IEC 27018, along with SOC reports. We use that hardened storage layer for family media rather than inventing our own disk farm.
- AWS ISO & CSA STAR certified services (Amazon S3 is listed in scope)
- AWS Artifact for on-demand ISO certificates and auditor reports
Privacy
No ads. No data sales.
We do not run advertisements inside ILY and we do not sell customer data. The only marketing exception is apps in our own ecosystem for child development or keeping families together.
Scale
Built for 50 million users
The architecture is designed to grow with families: private object storage for media, family-scoped data, and services that can scale toward tens of millions of users without turning your album into a public social network.
How it works in practice
Strong policies around a private family system.
- Upload path: the app requests a signed upload, then sends media directly to private object storage.
- Read path: authorized family members receive short-lived signed links to view or download content.
- Family controls: invite people with the access they need, including limited roles and member grouping when sides of the family should not cross-share everything.
- Reliability: durable cloud object storage is built for long-lived archives, which matters when you are keeping a child’s first years for decades.
Read our Privacy Policy or contact [email protected].