Privacy policy

Your child’s photo is the most sensitive thing we handle. Here is exactly what happens to it.

Last updated 15 October 2026. Written in plain English to match how DreamKeeps works today.

Who this is for

DreamKeeps is used by parents and legal guardians. We don’t offer the service to children directly, and you must confirm you are the child’s parent or guardian before creating pictures.

What we collect

  • Your child’s photo, first name, age and dream job.
  • Your email address, and the time and version of the consent you gave.
  • The pictures we create, and which ones you keep.
  • Payment status and amount. Card and PayPal details are handled by PayPal; we never see them.
  • For framed prints only: the delivery name, address and email PayPal passes to us.
  • If you choose the bundle: the name you enter to sign the certificate.
  • A short, one-way code derived from your connection, kept for up to two days to stop abuse of the service.

We never sell data.

Advertising measurement

With your permission (and by default outside the EU, EEA, UK and Switzerland), we use the Meta Pixel to learn which of our ads bring parents to DreamKeeps. It records page visits and steps such as starting a set of pictures, reaching checkout and completing a purchase, with the order value. It never receives your child’s photo, name, age or dream, or anything you type. You can change your choice any time with “Privacy choices” at the bottom of every page.

How the photo is handled

  • It is checked for content and quality on your own device before anything uploads.
  • It is then stored in private storage that only our service and our authorised reviewer can reach.
  • It is sent to OpenAI to create the pictures. OpenAI does not use data sent through its API to train its models and may keep it for up to 30 days to monitor abuse.
  • It is never shown publicly and never used to train any model.

When we delete things

  • The original photo is deleted when your order is delivered.
  • If you don’t buy, the photo is deleted after 7 days and the preview pictures after 30 days.
  • Pictures you bought are kept so you can download them again. Ask us and we’ll delete them, along with your order details, except what we must keep for tax and accounting.

Who processes data for us

  • Lovable Cloud and Supabase: hosting, database and private file storage.
  • OpenAI: creating the pictures.
  • PayPal: payments.
  • Prodigi: printing and delivering framed prints, if you order one. They receive the picture and the delivery address that PayPal collected.
  • Meta: advertising measurement, only as described above.
  • An email provider, to send order emails when we use them.

Your private order link

Your order is reached through a private link that only you receive. Anyone with the link can see the pictures, so please keep it to yourself. This browser also remembers your recent orders; you can clear that with your browser’s site data.

Your rights

You can ask to see, correct or delete the data we hold about you and your child, or withdraw your consent at any time. To do that, reply to the email address on your PayPal receipt with your order link. We’ll answer within 30 days.

See also our terms and refund policy.