Shared only by invitation.

Who is responsible

Keepsake Film is the operator responsible for this service. Privacy questions and requests can be sent to support@keepsakefilm.com.

What we keep

We keep the account details you provide; storyteller names, relationships, and notes; uploaded photographs; interview transcripts; automated photo descriptions for June; generated memory titles, motion descriptions, and films; optional interview recordings; invitation and sharing email addresses; delivery and email activity records; and payment amounts, currency, authorization, capture, and Stripe reference details. We also receive the information you send when you contact support. Existing consent records, where present, remain stored with the project. For films previously published to YouTube, we keep the resulting video identifier, visibility, and upload time. Stripe collects and handles payment-card details; Keepsake Film does not store your full card number or security code.

The saved original photograph may include camera or location metadata embedded in the file. Remove that metadata before uploading if you do not want it stored with the original.

How the AI services receive your photograph and interview

• Tavus receives the call information, photograph title, automated photo description when available, live video, and audio needed for your conversation with June. If recording is enabled and accepted, Tavus also writes that recording to the operator’s private storage.
• Before the interview, xAI Grok receives the photograph to describe visible details for June. We keep that short description with the project and send it to Tavus; the uploaded photograph itself is not sent to Tavus.
• After the interview, xAI Grok receives the photograph and transcript to suggest a memory title and write a restrained visual-motion description. We can also use the saved photograph and transcript to name an older memory that still has a generic title, without making another film.
• xAI Grok receives the photograph and motion description to render the visual film. The video-rendering request does not include the raw transcript; the writing step above does.

We use these services to provide your interview and requested film. The transcript guides generation; your finished deliverable is the video, not a written narrative or interview recording. We do not sell family data or use it for targeted advertising.

Hosting, payment, and email services

DigitalOcean hosts the service and its private account and media storage. Stripe processes card authorizations, payments, and refunds. Lark delivers service email and handles messages sent to our support and privacy address. Those emails include the recipient address and the message contents, such as a private invitation link or film title and photograph preview.

These providers process information to operate their part of the service under their applicable agreements. Their retention and legal obligations are separate from the copies in your Keepsake Film account.

Previously published films

YouTube publishing is not currently available in Keepsake Film. For any film previously published through the service, YouTube received the finished film, title, description, audience setting, and selected visibility. Keepsake Film does not keep a YouTube refresh token.

Any existing YouTube copy remains controlled through the selected YouTube account and subject to Google’s and YouTube’s terms and privacy practices. Deleting a Keepsake Film account does not delete that YouTube copy; the channel owner must manage or remove it in YouTube Studio.

Consent before the interview

Before starting, the page explains that we analyze the photograph to give June a brief visual description, that the interview connects your microphone to June through Tavus and that the conversation is transcribed to guide the film. Your camera starts off. If you choose Turn camera on during the interview, the page requests camera access and shares your video with June through Tavus. You can turn it off at any time. When interview recording is enabled, the notice also says that the conversation will be recorded and stored with the project. Selecting Start interview asks us to begin the disclosed processing; there are no separate consent checkboxes.

A device preview does not itself start the interview. You can stop before connecting, and an invitation holder can ask the account owner to revoke the invitation. After processing has begun, a later deletion request cannot undo work already performed, but it controls the copies still held under the retention rules below.

Generated-film limits

The film is an AI-generated visual interpretation made from the uploaded photograph and interview-derived description. It is not historical footage, proof that an event happened as shown, or a source for identifying people. Generated movement and details may be inaccurate.

Sharing and security

Films are private to their owner and the people the owner invites. A shared viewing link requires the recipient to sign in; the first account to claim it receives access until the owner revokes it. A remote-storyteller invitation opens that one story and its finished film without a separate account; it does not open the family archive. Owners can revoke viewing and interview links. Keep invitation links private.

If you contribute through an invitation, your photograph, interview, and finished film are saved in the inviter’s account. The account owner can add, replace, or delete the photograph before the interview starts. Once an interview starts, the photograph is fixed to that memory. Contact the privacy address if you need help with information you contributed to another person’s account.

Retention and deletion

Active projects remain until the account owner deletes the account. Before the interview starts, the owner can also remove a photograph from its photo page while keeping the invitation and payment reservation. Account deletion removes the active profile, photographs, films, sharing records, saved YouTube publication identifiers, recordings, transcripts, generated titles and descriptions, consent records, and invitations. It does not remove a copy the owner separately published to YouTube or a copy someone has already downloaded.

Backup copies expire within 30 days. Off-server backup copies are encrypted. Deleting your account does not automatically delete information held separately by Tavus, the generation providers, Stripe, or the email provider. Contact the privacy address for a request covering those copies; provider agreements and legal recordkeeping requirements determine what can be removed or must be retained.

Delete the account from Account settings, or contact the privacy address if access is lost. A film owned by somebody else is not deleted when a recipient removes their own account; that recipient’s access is removed.

Cookies, OAuth, and email

We use essential session and security cookies. If you use Facebook, TikTok, or Google to sign in, that provider authenticates your account under its own privacy terms. Keepsake Film receives basic profile information, including your account identifier, name, and email address when the provider shares them. Facebook and TikTok sign-in do not grant permission to post. Google sign-in does not grant YouTube upload permission. We send transactional account, invitation, sharing, purchase, and film-ready email; there is no marketing mailing list in the product.

Film-ready emails include a small preview of the original photograph, visible to people who can open that email. The preview does not include the original file's camera metadata.

If you choose a photograph before signing in, your browser keeps a local draft so you can continue after creating an account. The photograph is uploaded only when you save the project at checkout or send its interview invitation. Removing the photograph or completing that save deletes the local draft. Drafts expire after 24 hours and are cleared when the browser next checks them; they are not available on another device.

We keep aggregate daily counts for page views and product milestones such as signup, photograph upload, payment, interview completion, generation start, finished films, and sharing. These counters do not store an account, IP address, browser identifier, request path, or session trail, so they cannot reconstruct an individual visit.

Separate service and security logs record errors and information needed to protect accounts and diagnose failures. They are not the aggregate product counters described above.

Film-ready emails can include a small first-party image and links that record delivery, reported opens, and watch or download clicks for each recipient. Email apps may load images or check links automatically, so these signals do not prove that a person read the email. These email activity records store counts and timestamps, not IP addresses or browser identifiers, and are removed with the film owner's account.

Children and family consent

The service is intended for adults. Account owners must have the right to upload and animate each photograph and must obtain appropriate permission from living storytellers and people whose personal information they submit. Do not invite a child to participate or upload sensitive information about a child without the legally required permission.

Your privacy requests

Contact support@keepsakefilm.com to request access, correction, deletion, or a copy of account data. Available rights and lawful retention duties depend on the jurisdiction that applies.