Privacy Policy

We may collect:

Account information

• name
• email address
• login/authentication information
• account settings
• email preferences

Album information

• uploaded photos
• album titles
• captions
• gift messages
• selected layouts
• image crop adjustments
• cover choices
• recipient names
• family contributor information

Order and delivery information

• recipient name
• delivery address
• phone number, if provided
• order details
• plan type
• cover type
• extra gift copies
• shipping and tracking information

Payment information

Payments are processed by Stripe or another payment provider. We do not store full credit card numbers.

Technical information

• IP address
• browser/device information
• usage events
• pages visited
• cookies or similar technologies

We use information to:

• create and manage accounts
• let customers create albums
• upload and store photos
• generate album previews
• save crop adjustments and captions
• create print-ready PDF files
• produce and ship printed albums through Gelato
• send account, order, reminder, and support emails
• invite family contributors
• allow recipients to view the digital album through a private QR code
• allow recipients to send reactions/messages back
• process payments through Stripe
• provide support
• prevent fraud or misuse
• improve the product
• comply with legal obligations

Your family photos are private.

We use uploaded photos only to provide the Grandparent Album service, including preview creation, print file generation, printing, shipping, customer support, and the private digital album experience.

• We do not sell your photos.
• We do not make your albums public.
• We do not use your private family photos in advertising without your permission.
• We do not use private family photos to train public AI models.

If you invite family members to add photos, they may upload photos through a private contributor link.

Contributors should not see:

• payment details
• billing information
• subscription details
• private delivery addresses
• admin information

Printed albums may include a private QR code page.

The QR code lets the recipient view the digital album and send a reaction or message back.

The QR code is private, but anyone with access to the printed album or QR code may be able to open the digital album. Please do not share the QR code publicly if you want the album to remain private.

We use trusted service providers to operate Grandparent Album. These may include:

• Supabase or similar hosting/database/storage providers
• Gelato for print-on-demand production and shipping
• Stripe for payments
• Resend for email sending
• analytics and error-monitoring tools
• customer support tools

We share only the information needed for each provider to perform its service. For example:

• Gelato may need the print file and delivery address.
• Stripe may need payment and billing details.
• Resend may need email address and email content.
• Supabase may store account, album, photo, and order data.

Falvore s.p. is based in Slovenia. Customers may be located in the United States.

Your information may be processed in the European Union, United States, or other countries where our service providers operate.

Where required, we use appropriate safeguards for international transfers of personal data.

Where GDPR applies, we process personal data based on:

• performance of a contract, such as creating, producing, and delivering albums
• legitimate interests, such as improving the service, preventing misuse, and providing support
• legal obligations, such as tax/accounting records
• consent, such as optional marketing emails or non-essential cookies

We keep personal information only as long as needed. Typical retention:

• account data: while your account is active
• album photos/layouts: while your account or album is active
• order records: as required for accounting, tax, and legal purposes
• support emails: as needed to resolve issues
• email preferences: until changed or unsubscribed

You may request deletion of your account or photos, subject to legal and operational limits.

If an album has already been approved for print, produced, or shipped, we may not be able to stop production or remove information already sent to the print provider.

Depending on where you live, you may have rights to:

• access your personal information
• correct inaccurate information
• request deletion
• request restriction of processing
• object to certain processing
• request data portability
• withdraw consent
• unsubscribe from marketing emails
• lodge a complaint with a data protection authority

California and other U.S. state privacy laws may provide additional rights where applicable. We do not sell personal information.

To exercise privacy rights, contact: hello@grandparentalbum.com

We may send:

• account emails
• album reminders
• contributor invitations
• preview-ready emails
• order updates
• shipping updates
• grandparent reaction emails
• optional marketing emails

You can manage reminder and marketing preferences in your account or unsubscribe using links in our emails. Transactional emails may still be sent when needed.

We may use cookies and similar technologies for login, security, checkout, analytics, and product improvement. See our Cookie Policy for more information.

We use reasonable technical and organizational measures to protect your information.

No online service is completely secure. Please keep your login details safe.

Grandparent Album is intended for adults creating family albums.

Children may appear in uploaded family photos, but children should not create accounts or use the service without a parent or guardian.

We may update this Privacy Policy from time to time.

If changes are significant, we may notify users by email or in the app.