How Kindergram works

Private photo sharing for our families — no app store, no passwords, no ads.

🔑 Signing in

Enter the email address the program has on file for you. We email you a 6-digit code (and a one-tap link) — type either one and you're in for 30 days. There is no password to create, remember, or leak.

📱 Make it an app

On iPhone: open this site in Safari → Share → Add to Home Screen. On Android: menu → Add to Home screen. It opens full-screen like a regular app. Once installed, tap 🔔 Notify me on your feed to get a notification the moment new photos of your child are posted.

👀 Who sees what

You only ever see posts that include your own child (or room-wide posts for your child's room). Other families cannot see your child's individual photos, and you cannot see theirs. Which photos may include your child at all is controlled by the photo permissions you signed when you first logged in — you can change those choices any time by contacting the director.

💾 Saving photos — please do!

For your family's privacy, photos are automatically deleted 30 days after posting — this is deliberate, so there is never a big archive of children's photos sitting on a server. Save the ones you love: tap a photo to open it full-size, then long-press (phone) or use the Save link. Posts show a countdown when they're about to expire.

💌 Grandparents & family

Tap Invite in your menu to get a personal QR code / link. Anyone you share it with can request access; the director reviews and approves every request. They get their own sign-in — never share yours.

🌐 En español

Tap the 🌐 Español button on your feed and announcements appear in Spanish (translated privately on our own server), with the original a tap away.

• No public links. Every photo request is checked against your sign-in and your family's permissions — there is no URL that works without them. The site is also excluded from search engines.
• Location data stripped. Every uploaded photo is re-encoded on arrival, which removes GPS coordinates, camera details, and all other hidden metadata before it is ever stored.
• Short retention. Photos are deleted 30 days after posting. A smaller archive is a smaller risk, period.
• Consent is enforced by software. Room-wide photos are blocked at upload if the room includes a child whose family declined group photos — it's not left to memory.
• Access ends immediately. If a family leaves or the program revokes a person's access, it takes effect on their very next tap — not at some future logout.
• Everything is logged. Sign-ins, posts, photo views, downloads, and every permission change are recorded, so "who saw this?" always has an answer.
• Encrypted in transit. All traffic is HTTPS-only.
• No ads, no tracking, no selling data. No analytics scripts, no third-party fonts or trackers. Photos and family information are never shared with anyone outside your program.
• Contact info doesn't linger. When a family leaves the program, their email addresses and phone numbers are automatically erased 90 days later. Signed consent forms and the access log are retained as program records.

Posting: tap ＋ Post → choose photos (or take one right there) → tag the children in the photo, or choose whole-room. The consent checker will warn you if a room-wide photo could include a child without group-photo permission.

Post from your camera: Android — install the app and Kindergram appears in your share sheet. iPhone — see the one-time shortcut setup.

Announcements: choose Announcement → pick one room or all rooms. Directors can see who has and hasn't seen each announcement.