Is FamilyAlbum Safe? What We Can Show You
Written by the FamilyAlbum Editorial Team, drawing on our user research. FamilyAlbum is our own app, so read this as an informed-but-interested guide, and check the linked sources yourself. Facts current as of October 2026.
You searched this before installing anything. That’s the right instinct, and honestly it’s the question we’d want a parent to ask.
We’re the company behind the app, so you shouldn’t take our word for any of this. What we can do is show you where every claim comes from, in public documents you can open yourself.
The quick version: FamilyAlbum is invite-only, so your album can only be seen by you and the people you invite. It’s made in Japan by MIXI, Inc., a company founded in 1999 and listed on the Prime Market of the Tokyo Stock Exchange. The app has been running since 2015, and more than 30 million people across 175 countries and regions use it. To use it you only need nicknames and your relation to your child. Not even an email address is required. You control whether the people you invite can save your photos, on any plan, and turning that off blocks screenshots too. Data is encrypted in transit, servers sit in a data center with 24-hour security, the storage runs on Amazon Web Services, and the app undergoes regular security inspections by outside agencies.
Who’s actually behind the app
Parents in our research, drawing on more than 160 interviews, told us this was one of their first questions. Not the feature list. Who runs it, and how long has it been around.
FamilyAlbum by the numbers
| 30 million+ | people using FamilyAlbum worldwide, as of May 2026 |
| 175 | countries and regions, in seven languages |
| 11 years | running, since 2015 |
Source: MIXI Sustainability. One parent in our research said she wouldn’t adopt an app unless it had been out at least six months and someone she trusted was already using it. By that standard, eleven years and 30 million people is a reasonable answer.
The company
FamilyAlbum is made in Japan by MIXI, Inc., headquartered in Shibuya, Tokyo. The company was founded in June 1999 and is listed on the Prime Market of the Tokyo Stock Exchange under ticker 2121, which means its governance, audits, and financial reporting are subject to public disclosure rules rather than to nobody in particular.
MIXI, Inc. is also named as the data controller in the privacy policy, with a postal address and an appointed data protection officer (FamilyAlbum Privacy Policy). That sounds like a small thing. It means there’s a specific, named legal entity accountable for your family’s photos.
What we’re actually trying to build
Two statements guide this app. They’re worth reading if you’re deciding whether to hand over 10 years of your family’s photos.
Our mission is to build emotional infrastructure for families around the world.
Infrastructure is a deliberate word. It means the dependable, slightly boring kind of thing you stop noticing, the way you stop noticing running water. Not a product designed to pull at your attention.
Our vision is to still be the service families love most, 100 years from now.
You can read a hundred years as ambition, and it partly is. It also sets an incentive. A company planning in those terms can’t treat your family’s photos as inventory to be traded this quarter, because the whole point is that the album is still there when your child shows it to their own kids.
Who can see your photos
- Only the people you invite. There’s no public profile, no follower count, and no feed. Your album can only be viewed by you and the family you invited (FamilyAlbum Privacy).
- Invited family can view in a browser, with nothing to install. The browser version is more limited than the app, but it’s often what gets a less tech-comfortable grandparent in.
- Photos you delete are deleted from our servers, automatically, within 30 days (FamilyAlbum Privacy).
- Share Groups let you choose who sees each photo or video and save reusable groups. It’s a Premium Family and Premium Family Pro feature, and only album admins can change the settings (FamilyAlbum Premium).
- Invitation links work once. If the link you sent gets forwarded, it won’t let anyone else in.
- An admin can remove a member at any time. An invitation is reversible.
That last one exists because of a pattern we kept hearing. Parents don’t want one audience. They send their own parents fifty unedited photos and send their partner’s family a curated dozen once a month, and they built that difference on purpose.
Seeing a photo and keeping a photo are separate things
On most platforms they aren’t. Once a photo is on someone’s screen, whether they save a copy is their call, not yours.
In FamilyAlbum, download permission is controlled by the album, and downloads only work for the photos and videos a person actually has permission to save. With download permission off, the app also blocks screenshots and screen recordings of those photos. None of that is a paid feature, so the control is there on the free plan too. An admin can remove a member at any time, so inviting someone isn’t a decision you’re stuck with.
Underneath that, the audience number still does the heavy lifting. Post publicly and the people who could copy your photo are everyone who scrolls past plus whoever the algorithm shows it to. Share in an invite-only album and it’s the relatives you chose. We unpack that further in private photo sharing for families.
What we ask for, and what we don’t
To use FamilyAlbum you provide a nickname for yourself, a nickname for your child, and your relation to your child. That’s it. An email address, payment details, and your child’s birthdate are all optional, added only if you want them (FamilyAlbum Privacy).
We also don’t store payment information ourselves. Card payments are handled by secure and trusted payment service providers rather than kept by us (FamilyAlbum Privacy).
If you ask us to delete your account, your personal data is deleted from our servers within 30 days, unless a law requires us to keep it longer (FamilyAlbum Privacy).
How the photos are protected
From our privacy page and MIXI’s published security disclosures:
- Data moving between your device and our servers is encrypted.
- Our servers sit behind a firewall.
- We undergo regular security inspections by outside agencies.
- Servers holding personal information sit in a data center with 24-hour security, and access is limited to specific employees (MIXI Information Security).
What the infrastructure underneath is required to do
Your photos sit on cloud infrastructure run by Amazon Web Services, which means several of these guarantees aren’t ours to give or take away. Three that matter:
- The storage is designed for 99.999999999% durability, which is 11 nines. Files are kept redundantly across multiple devices, and their integrity is re-checked regularly using checksums (AWS). Whatever you’re worried about losing your photos to, it probably isn’t the disk.
- AWS designs its systems to prevent its own personnel from reaching customer data for any unauthorized purpose, and states that its operations never require it to access, copy, or move customer data without the customer’s knowledge and authorization. Access to systems holding customer data is logged, monitored for anomalies, and audited, and every operator action is traceable to a named person rather than a shared account (AWS).
- Storage media cannot leave an AWS data center unless it has been physically destroyed or sanitized using the techniques described in NIST 800-88 (AWS).
That last one is the kind of detail nobody thinks to ask about, and it’s why a decommissioned drive doesn’t quietly become somebody’s problem years later.
The security program behind it
An app is only as careful as the company running it, so here’s what MIXI publishes about how it operates. Every row is from a public document.
| Area | What’s in place | Why it matters to you |
|---|---|---|
| Governance | Three separate bodies share the work: a Risk Management Committee, a personal information protection (PMS) section, and an information security section. Serious incidents are reported to the Board of Directors | Security isn’t one team’s side project, and bad news has a route upward |
| Incident response | An in-house response team called “mixirt,” which is a member of the Nippon CSIRT Association and shares threat information with other members | Someone is on the hook for detecting and handling incidents, and they’re not working alone |
| Internal audit | Security policies and systems are audited at least once every two years, with results reported to the Board | Somebody inside checks the work, and reports upward |
| Technical measures | Zero Trust based controls, application vulnerability assessments, and infrastructure configuration monitoring | The app is tested, not just shipped |
| Software supply chain | A Software Bill of Materials (SBOM) is generated so components are tracked continuously, which speeds up impact assessment when a new vulnerability is announced | When the next big library vulnerability lands, the response starts from a list rather than a guess |
| Vendors and contractors | Cloud services used internally are inventoried, and an external assessment service evaluates providers’ security posture. Contractors get access limited to their scope of work | The weak link in most breaches is a third party |
| Training | Annual security training and phishing drills for all directors and employees, including contract, temporary, and part-time staff | Most incidents start with a person, not a server |
Sources: MIXI Information Security and the MIXI GROUP Integrated Report 2026, p.60.
Why is it free? What’s the catch?
This question comes up a lot, usually phrased as “if it’s free, what are you doing with my data.” Fair.
The free plan really does include unlimited photo and video uploads, and viewing and commenting are free for everyone you invite. The money comes from three ordinary places:
- Premium subscriptions. $2.99, $5.99, or $10.99 a month, with the first month free for new subscribers (FamilyAlbum Premium).
- Physical products. Prints, photobooks, and similar keepsakes.
- Advertising. The free plan shows third-party ads in the app. Every Premium plan, including the $2.99 one, removes them (FamilyAlbum Premium).
That third one is the part worth being straight about, because “free app” plus “ads” is exactly where the suspicion usually lands. So, plainly: ads are part of how a free plan with unlimited uploads stays free, and paying removes them. Being precise about what that means for your data: your photos and videos are not sold or shared with advertisers. What does go to advertising networks and analytics providers is the ordinary ad-tech set, including identifiers like your user ID, and profile details such as whether you have children. Under California law that counts as a “sale” or “share,” and you can switch it off through the Do Not Sell or Share My Personal Information link or in the app’s settings (FamilyAlbum Privacy Policy).
For the full breakdown of what free actually covers, see is FamilyAlbum really free.
Worth knowing: on the free plan, each video can be up to two minutes. Premium Family ($5.99/mo) raises that to 10 minutes.
Your rights over your data
You can ask to access your data, correct it, or tell us to stop using it, at any time. You can also complain about us to a data protection authority (FamilyAlbum Privacy).
Some specifics that are easy to check:
- An appointed data protection officer, with contact details published in the privacy policy.
- Appointed representatives in the EU and the UK (DP-Dock GmbH in Hamburg, and DP Data Protection Services UK Ltd in London) for GDPR matters.
- Standard contractual clauses approved by the European Commission for transfers of data out of the EEA and the UK.
- A California section covering CCPA rights, including the right to know and the right to delete.
All of that is in the full privacy policy, which is long but specific.
Is it safe for children’s photos in particular?
FamilyAlbum is used by parents and grandparents. Children are in the photos, not on the accounts, and the data we collect comes from the adult who signed up.
The app isn’t intended for anyone under 13 registering themselves without a parent’s consent. If we learn we’ve collected personal information from a child under 13 without parental consent, we delete it (FamilyAlbum Privacy).
There’s also nothing to discover. No public profile, no username to search, no shareable public page. A photo of your child in FamilyAlbum isn’t findable by anyone who wasn’t invited.
FAQ
Your album is invite-only and can only be seen by you and the people you invite. Data in transit is encrypted, the servers sit behind a firewall in a data center with 24-hour security, access is limited to specific employees, and the app undergoes regular security inspections by outside agencies.
MIXI, Inc., a company founded in 1999 and headquartered in Tokyo, Japan, listed on the Prime Market of the Tokyo Stock Exchange. It’s also the named data controller in the privacy policy. FamilyAlbum has been running since 2015 and is used by more than 30 million people across 175 countries and regions.
Only if they have download permission. That’s controlled by the album on every plan, including the free one, so being able to view a photo and being able to keep a copy of it are separate things.
Not when download permission is turned off. In that case the app blocks screenshots and screen recordings of those photos as well.
It won’t work. Invitation links are single-use, so only the person you sent it to can join.
Yes. An album admin can remove a member at any time.
Your photos and videos are not sold or shared with advertisers. Identifiers such as your user ID, and profile details such as whether you have children, do go to advertising networks and analytics providers, which California law treats as a “sale” or “share.” You can opt out using the Do Not Sell or Share My Personal Information link or the app’s settings (FamilyAlbum Privacy Policy). We don’t store payment information ourselves.
Servers holding personal information sit in a data center with 24-hour security, and access is limited to specific employees. Data moving between your device and our servers is encrypted. The storage underneath runs on Amazon Web Services, designed for 99.999999999% durability, and storage media cannot leave an AWS data center unless it has been physically destroyed or sanitized (AWS).
No. Invited family can open the album in a browser, though the browser version is more limited than the app. They do need an invitation from you.
A nickname for you, a nickname for your child, and your relation to your child. An email address is optional.
Yes, with unlimited photo and video uploads on the free plan. The free plan shows third-party ads, and every Premium plan removes them while adding longer videos, Share Groups, and other features. See is FamilyAlbum really free.
Sources
- FamilyAlbum Privacy — what we collect, who can see it, and how it’s protected
- FamilyAlbum Privacy Policy — data controller, DPO, EU/UK representatives, CCPA
- FamilyAlbum Premium — plans, Share Groups, ads, and video length
- MIXI, Inc. — Information Security (governance, mixirt, Zero Trust, internal audits)
- AWS — Amazon S3 data durability
- AWS Trust Center — Operator access and media destruction (NIST 800-88)
- MIXI, Inc. — Company Overview
- MIXI Sustainability — FamilyAlbum users, languages, and countries
- MIXI GROUP Integrated Report 2026 — supply chain security and SBOM, p.60; stock listing, p.79 (Japanese-language document)
Ready to start? Try FamilyAlbum for free.
Written by the FamilyAlbum Editorial Team. The perspectives here reflect patterns from our user research (more than 160 interviews conducted between 2024 and 2026), not any individual user. FamilyAlbum is our own app. Facts current as of October 2026.