Short answer: FamilyAlbum is a legitimate app and your photos are not public. But if you are asking whether it is safe, you are probably really asking what it collects — and the answer is more than most parents expect.
This page quotes FamilyAlbum's own privacy policy rather than paraphrasing it, because the specifics are the point.
Quick answer: FamilyAlbum is safe in the ordinary sense — real company, private albums, no known breaches. What it is not is data-minimal. Its own privacy policy lists perceptual hashes of your photos and videos, feature vectors of users' faces, estimated gender and age of each face, results of facial image classifications, and EXIF data including GPS location. Common Sense Media gives it a "Warning" rating for its data practices. That is more granular facial data than Google Photos documents collecting.
What FamilyAlbum's privacy policy actually lists
From family-album.com/privacy_policy, the data collected from uploaded content includes:
| What it collects | What that means in practice |
|---|---|
| Perceptual hashes of photographs and video clips | A fingerprint of each image that lets the same photo be recognised again |
| Feature vectors of users' faces | A mathematical representation of a face — the input to facial recognition |
| Estimated gender and age of each user's face | An inferred demographic label per face, including children's |
| Results of facial image classifications | The output of automated judgements made about faces in your photos |
| EXIF data, including GPS location where present | Where the photo was taken |
| Advertising identifiers and device information | Cross-app identifiers used by ad systems |
| Usage logs and behavioural data | How you and your family use the app |
Common Sense Media has given FamilyAlbum a "Warning" rating for these practices.
Why this matters more than it sounds
Three things are worth separating out, because they get conflated in most discussions.
"Private" is not the same as "not collected." FamilyAlbum albums genuinely are not public — no follower feed, no strangers browsing your child's photos. That is real, and it is more than Facebook offers. It is also a claim about other users, not about the company. Both things can be true: your relatives are the only other people who see the photos, and the service is extracting facial feature vectors from them.
Facial feature vectors are the part parents react to. An age and gender estimate attached to a child's face, stored against your account, is a different category of data from a filename and a timestamp. FamilyAlbum is often recommended in parenting forums as the private alternative to posting on social media, which makes the disclosure worth reading before you accept that framing.
It is more granular than Google Photos. Google's documentation covers machine-learning analysis for face grouping, object recognition and location — significant, and we have written about it at length. But Google does not document per-photo gender and age estimation. On this specific axis, the app marketed as the private option collects more.
What FamilyAlbum does not appear to do
Being fair matters here, and a page that only lists the bad parts is not useful.
- There is no disclosure that photo content is sold. "Not sold" and "not collected" are different claims; only the first is supported.
- There is no evidence of a breach or of misuse of the data collected.
- FamilyAlbum is operated by Mixi, an established public company, not an anonymous developer.
- The free tier's unlimited photo storage is genuine, and unusual.
Who should be fine with it
If your main concern is keeping photos away from a public feed and out of your extended social graph, FamilyAlbum does that, and the free unlimited storage is a real benefit. Plenty of families read the policy above, decide it does not worry them, and are happy — that is a legitimate conclusion.
Who should look elsewhere
If any of these apply, the collection above is probably a dealbreaker:
- You are not comfortable with facial feature vectors being derived from your children's photos
- You do not want an age or gender estimate attached to a child's face
- You want GPS data stripped rather than stored
- You would rather not have advertising identifiers collected alongside family photos
What the alternatives actually offer
Strongest encryption: iCloud Photos with Advanced Data Protection manually enabled is end-to-end encrypted — Apple cannot read the contents. It is off by default, so it has to be switched on in Settings, and it only works well if your family is all-Apple.
No facial recognition, no ads: Keepr Circle collects no biometric data — no facial recognition, no feature vectors, no age or gender estimation — shows no ads, and never sells photos or uses them to train models. Being straight about our own product: we do compute a perceptual hash and an image embedding for duplicate stacking and smart search, but the models are self-hosted on our own servers and photo content is never sent to a third-party AI service. Free tier is 5 GB.
If you object to any automated analysis: self-hosting something like Immich is the honest answer. Keepr does not clear that bar either.
For the full side-by-side of what FamilyAlbum, Google Photos, iCloud, Tinybeans, Amazon Photos and Keepr each collect — with each company's own policy quoted — see what family photo apps collect.
Related: FamilyAlbum Review 2026: Is It Free? · What Family Photo Apps Collect · Is Google Photos Safe for Baby Photos? · Private & Secure Family Photo Sharing · Tinybeans Review (2026)