A few years ago, the debate about posting your kids online was mostly about oversharing. Embarrassing bath photos. Birthday meltdowns. The question was: will your kid be mad at you someday?
That question now feels quaint.
In 2026, the danger isn't embarrassment. It's exploitation. And most parents have no idea how bad it's gotten.
What's changed: AI image generation
Generative AI tools can now take a handful of ordinary photos of a person — including a child — and produce photorealistic images of them in any context. Any pose. Any scenario. Any state of undress.
This is not theoretical. It's happening at scale.
The Internet Watch Foundation reported that AI-generated child sexual abuse material (CSAM) is now appearing on known offender forums, and much of it is being created from publicly available photos of real children — sourced from parents' social media accounts.
The National Center for Missing & Exploited Children (NCMEC) has warned that public photos of children are being harvested in bulk for this purpose. A single clear photo of a child's face is enough for current AI models to generate hundreds of synthetic images.
Let that land for a moment. One photo from your Instagram. That's the input.
The scale of the problem
A 2023 study published in the British Medical Journal found that by the time an average child turns 13, parents have posted approximately 1,300 photos and videos of them online. Many of these are posted before the child can consent — or even speak.
Research from Barclays Bank estimated that by 2030, sharenting will account for two-thirds of identity fraud cases targeting young people. The data trail parents create — full name, date of birth, school name, location tags — is a gift to anyone building a profile of a child.
The Australian eSafety Commissioner's 2024 investigation found that generative AI has "supercharged" the production of child exploitation material, with models being fine-tuned on scraped images from social media, family blogs, and public photo-sharing platforms.
"But my account is private"
This is the most common response, and it's understandable. But it doesn't hold up.
- •Screenshots exist. Anyone you've accepted as a follower can screenshot and redistribute your photos.
- •Platform breaches happen. In 2024 alone, multiple social media platforms experienced data leaks exposing user photos and metadata.
- •Private doesn't mean secure. Most platforms' privacy settings control who sees content on the platform — they don't prevent the platform itself from using your images for AI training, ad targeting, or data partnerships. Meta's own privacy policy grants them a broad license to use content you upload.
- •Friends share. A photo you post privately can be reshared, screenshotted, or forwarded by anyone in your circle.
A private account reduces risk. It does not eliminate it.
Digital kidnapping and identity harvesting
Beyond AI-generated CSAM, there's a growing phenomenon called "digital kidnapping" — where strangers take photos of other people's children from social media and repost them as their own, sometimes building entire fictional personas around them.
The Children's Commissioner for England documented how children's digital footprints — created almost entirely by their parents — follow them into adulthood, affecting everything from college admissions to employment background checks to identity theft vulnerability.
What the experts recommend
The American Academy of Pediatrics (AAP) recommends that parents carefully consider the digital footprint they create for their children and avoid sharing identifiable information publicly.
The UK Children's Code (Age Appropriate Design Code) establishes that children's data requires special protection, and advocates for privacy-by-default in any service that handles children's information.
Practical guidance from child safety organizations consistently includes:
- •Never post photos showing a child's face publicly. If you share photos, use angles that don't reveal identifying features.
- •Disable location tagging on all photos of your children.
- •Never include identifying details — school uniforms, street names, routine locations.
- •Audit your followers. Remove anyone you don't know personally.
- •Ask before posting. If your child is old enough to have an opinion, they should have a say.
- •Think about permanence. The internet doesn't forget. Every photo you post is a photo that exists forever.
The consent problem
There's a deeper ethical question here that most parents haven't confronted: your children never consented to any of this.
A 2021 study by Microsoft Research found that children as young as 6 expressed concern about their parents sharing photos of them online. By age 10, many children described feeling embarrassed, anxious, or violated by content their parents had posted.
Your toddler can't tell you they don't want their potty training journey on Instagram. But in 10 years, they might have strong opinions about it. And by then, the photos will have been online for a decade, scraped by an unknown number of AI models, and potentially redistributed in ways you never imagined.
So what do you do with the memories?
This is the hard part. Because the impulse to share your child's life comes from a good place — pride, love, the desire to connect with other parents going through the same thing.
And the memories genuinely matter. You should be capturing them. The mispronounced words, the first steps, the way they laugh at the dog. These are the moments that disappear fastest.
The answer isn't to stop capturing. It's to stop uploading.
Keep your memories on your device. Modern phones have enormous storage. Your photos don't need to live on someone else's server to be safe.
Share intentionally. Send photos directly to grandparents via encrypted messaging (Signal, iMessage). Don't broadcast them to an audience.
Build the archive locally. When you're ready, turn those memories into something physical — a printed book, a framed photo, something your child can hold someday without it ever having been on the internet.
That's the philosophy behind Smalldays. Every photo stays on your phone. No cloud uploads. No social sharing. No data harvested for AI training. When you're ready, we turn your moments into a linen-bound keepsake book — and the uploaded images are deleted within 48 hours of printing.
Your child's story deserves to be told. It doesn't deserve to be public.
Join the waitlist and keep their story where it belongs — in your hands.