Privacy policy

Six promises about your photos

• Only you can open them

  Photos go into private storage. They open only in the browser that added them or, once you sign up, in your account. Nothing you add is public.

• Where they were taken stays on your phone

  Before a photo leaves your device, we resize it, keep the date it was taken and remove the rest of its hidden details, including its location.

• Faces are never generated or changed

  Every face in her film is from your own photos. We crop, pan, rotate, zoom in up to twice the size and adjust the color of the whole photo. We never redraw or generate a face.

• Never used to train AI

  Your photos and answers are used only to make her film. We don’t use them to train AI, and we don’t sell or rent them.

• Deleted 30 days after your last change

  Her photos are deleted automatically 30 days after you last worked on her film.

• Delete them any time

  One tap removes a film’s photos, narration and finished film at once, or everything including your account.

We never create or store faceprints or face embeddings; we keep only where each face sits in a photo, to keep it in frame, and delete that with the photo.

How long we keep things

Deletion runs automatically every day. Your last change is the last time you added a photo, confirmed a step, signed up or asked for the film. Anything below goes sooner, at once, when you delete it.

1. 1 hourafter you add a photo

   Photos you have just added, while we check them. Each one is moved into her film’s storage or deleted.

2. 2 daysafter your visit

   A scrambled code made from your internet address, used to limit how many films one address starts in a day. We never store the address itself.

3. 30 daysafter your last change

   Her photos, and where each face sits in them.

4. 90 daysafter your last change

   Her name, the party date, your answers and the facts you confirmed, the script, how names are pronounced, the narration audio and our reminder email records.

5. 90 daysafter the film is made

   The film, its preview and captions, and any share links.

6. 24 monthsafter you sign up

   A sign-up record with no email address or name (the date and which ad you came from), and a record of which music track each film used. The sign-up record stays after you delete your account.

7. Until you delete itwhile you have an account

   Your email address and sign-in details.

What we collect

Her photos

The photos you add, and what we learn from them to plan the film: the setting, the decade, the occasion, how many people are in it and where each face sits.

Her story

Her name, her milestone birthday, the party date, your answers, the facts you confirm, and the names of people in her story and how they sound.

Your account

Your email address and password, when you sign up.

How you found us

The ad or link you came from: the ad’s click ID and campaign tags.

How the site is used

Which pages and film steps are opened, so we can see where people get stuck. This never includes her photos, your answers or the names in her story.

Cookies

One cookie keeps her film open in this browser before you sign up. Sign-in cookies keep you signed in, and our analytics uses its own cookie to count visits.

Who helps us make her film

These companies handle your data for us, only to run Fondreel. We don’t share it with anyone else unless the law requires it.

• Vercel

  Runs this website.

  What it receives: Your visits to the site, including your internet address.

• Supabase

  Stores accounts, her photos, answers and films, and handles sign-in.

  What it receives: Everything you add, and your email address.

• Railway

  Runs our own film-making servers: preparing photos, voicing the narration and making the film. The narrator voice (Kokoro) runs on these servers, so the script is not sent to a voice company.

  What it receives: Her photos, your answers and the script.

• Anthropic

  Its Claude AI describes each photo and drafts suggestions and the script from your answers.

  What it receives: Her photos (resized), your answers and the facts you confirm. Anthropic doesn’t use what we send to train its models.

• Resend

  Sends sign-up, film and reminder emails.

  What it receives: Your email address, her name and links to her film.

• PostHog

  Measures how the site is used.

  What it receives: Which pages and steps are opened and which ad a visit came from. Never her photos, your answers or the names in her story.

• Google

  Shows our ads on Google Search, and hosts the face-finding tool your browser downloads for the first preview.

  What it receives: Your click on an ad, under Google’s own policy. The face finder runs on your device; your photos are not sent to Google.

• jsDelivr

  Delivers part of the face-finding tool to your browser.

  What it receives: The download request only, including your internet address. No photos.

Deleting your data

One film

Open the film, then choose Delete this project in its Outline. Its photos, answers, narration and finished film are deleted at once.

Everything

On Your films, choose Delete everything now. Every film, your account and your music records are deleted at once. Only the sign-up record with no email address or name stays.

Shared links

Links you shared stop working within a minute of deleting the film. You can also turn off a share link on its own at any time.

Emails we send

We email you to confirm your sign-up and when her film is ready, and send one reminder if her film is waiting and the party is still ahead. Every reminder has an unsubscribe link that works without signing in, and it includes our postal address.

Contact us

Fondreel is for adults 18 and over. For questions about this policy or your data, write to us at:

Our postal address hasn’t been added yet.