Privacy notice

What we collect

• The photo you upload, and the image files we generate from it.
• The words you write or accept, and the optional details you give us: a nickname, relationship, occasion, mood, a memory, your own name and a language.
• Your card list: a nickname and a relationship only. Nothing else — no phone numbers, emails, addresses, dates of birth, ID numbers, social handles or free-form notes.
• If you order something: the contact and delivery details the carrier needs, and the order record itself.
• Basic account details if you sign in, plus your text-size preference and the version and time of the confirmations you accepted.

What we never collect or do

• We never store card numbers, CVCs or bank details. Payment happens on Stripe's own hosted page; we keep only Stripe's reference IDs, payment status, amount, currency and receipt details.
• We never use face recognition or biometric identification, and we never collect ID documents or dates of birth.
• We never use your photos, messages or card list to train AI models.
• We never sell your data, build advertising audiences, or run third-party ad pixels or cross-site trackers.
• We never import, scrape or enrich contacts.

Why we hold each thing

• Photos and generated images: to show you a preview and produce what you asked for.
• Wording details: to write and refine the message you asked for.
• Card list: so you do not have to retype a nickname next time.
• Order and delivery details: to take payment, print and ship, and handle returns, refunds and tax records.

How long we keep it

• Guest uploads: 24 hours.
• Saved drafts: 30 days after you last touch them.
• Finished digital items: 90 days.
• Print files: 30 days after delivery, cancellation, or a final refund.
• Temporary AI inputs and outputs, and failed jobs: 24 hours.
• Card list entries: deleted the moment you remove them. We ask you to review after 12 months of inactivity and delete at 18 months unless you keep them.
• Order, invoice, refund and tax records: kept for the statutory period required in the relevant jurisdiction, confirmed with counsel. We do not state a number here before that confirmation.
• Backups rotate on a finite schedule (target 35 days), so deleted data ages out of them.

These are upper limits. Nothing is kept indefinitely, and we do not keep hidden copies or indefinite “soft deleted” rows.

Where it is processed

Our hosting and database providers (Vercel and Supabase) and our AI, payment and print providers may process data outside Bahrain and Saudi Arabia. We choose regions deliberately, keep a register of these transfers, and put the required contracts and safeguards in place with each provider. Where a transfer is not permitted, we block the processing rather than proceed.

How it is protected

• Private storage buckets with short-lived signed links. Raw file addresses are never public.
• Location and camera information (EXIF/GPS) is stripped from uploads.
• Encrypted in transit and at rest. Keys stay on our servers, are rotated, and never appear in the browser.
• Staff access is least-privilege, requires multi-factor sign-in, is logged and reviewed, and support sees only the minimum needed.
• Share pages are unlisted, tokenised, expiring, revocable and excluded from search engines.

Your choices

• Delete any single photo, card or person from your library at any time.
• Delete your whole account: we cancel non-essential jobs, revoke sessions and share links, delete your content and card list, and ask our processors to delete their copies. Order records required by law are retained for that period only, and we explain which.
• Revoke or expire a share link at any time. Files already downloaded or forwarded by someone else may still exist outside our service.
• Anyone named or pictured — including people who have never used Dearly Studio — can ask us to delete at /privacy/request. We verify proportionately and never ask for ID documents by default.

Children

You must be 13 or older to upload a photo or create an account. Under-13 visitors can look at the samples and the gallery only. We do not knowingly collect any data from a child under 13.

Contact

Our published contact point, the named controller, and the roles and locations of each processor are added here before launch, alongside legal review. We do not list a placeholder address.