Privacy Policy

The short version

• We use what you give us to make and deliver keepsakes. We do not sell personal information, use it for advertising, or show ads.
• Keepsakes are shared by private links. Anyone with a link can open what that link opens, so share links like you would share a key.
• A card can be shared with everyone in the keepsake, or written just for the person it’s for. The organizer cannot read a card written just for the person it’s for.
• Our small team does not read cards, except where needed to run and fix Love From All, to respond to a report or a request from you, to keep people safe, or where the law requires it.
• Some features use artificial intelligence (AI) to write songs, draw illustrations, translate and describe. We send the content those features need to the AI providers listed below, and only for that purpose.
• If you order a printed book or party prints, we share your name, shipping address, phone and email with the printer so it can make and deliver your order. Card payments are handled by Stripe; we never see your full card number.
• You can delete a keepsake, or your whole account, at any time, and you can ask us about your data at privacy@ai4kidz.com.

1. Who this policy covers

Love From All involves several kinds of people, and this policy covers all of them:

• Organizers: people with an account who start a keepsake, invite others and give it.
• Contributors: people invited by link to write a card. Contributors don’t need an account.
• The person celebrated (the “recipient”), and at a gathering, everyone attending: the people a keepsake is made for and given to.
• People who appear in content: anyone named, pictured, recorded or described in a card, photo, video or song, even if they never visit Love From All.
• Visitors: anyone who visits our pages, including the public example keepsakes.

2. Information we collect

Account information (organizers). Your name, email address and password, or, if you choose to sign in with Google, Apple or Facebook, the name, email address and profile details that provider shares with us. Passwords are stored by our authentication provider in hashed form; we cannot read them. We also keep your language and notification settings. Your Love From All account is the same account as Edventures, our app for families: the same sign-in, and the same token balance. Each service’s content is kept apart, and Edventures has its own privacy policy.

What organizers tell us about a keepsake. The person’s name, the occasion and its date, the words you use to describe them (what they love, places, people, jokes, things to avoid), an optional description of their appearance (used to draw them in illustrations), and, if you choose, their email address or mobile number so we can deliver the keepsake. For the people you invite: their names, relationships, and the email addresses or mobile numbers you enter. For a gathering: its time and place, a menu, the dishes people are bringing, party designs, and a charity you choose.

What contributors add. Your name and relationship, your card’s message and answers, photographs, videos, voice and audio recordings you record or upload, paintings and drawings, your dish or a hope for the year if the keepsake asks, notes sealed inside a card, gift certificates, and replies, thank-you notes and guestbook messages.

A photo to describe your appearance (optional). If you choose to share a photo so the illustrations can draw you, we send it to an AI provider to produce a short written description (for example, hair and clothing). We keep only that description, not the photo, and we do not create face templates, face geometry, voiceprints or any other biometric identifier or biometric information (as defined in the Illinois Biometric Information Privacy Act, the Texas and Washington biometric laws, or similar laws). We don’t use photos, videos or recordings to identify anyone.

What the service makes for you. Songs and their lyrics, illustrations and themed artwork, translations, a group song, films and soundtracks you make, share images, and printable files for books and party prints.

Orders and purchases. For tokens, we keep what you bought and when. For a printed book or party prints: your name, shipping address, phone number and email address, the shipping option, what you ordered and its status. Payments are processed by Stripe, which collects your card details directly. We receive confirmation of payment and limited details (such as the amount), not your full card number.

Messages and support. Emails we send you and their delivery status, your email preferences and unsubscribes, and anything you send us, including reports about a card.

Technical and usage information. Like most websites we receive your IP address, browser and device type, the pages you visit, timestamps, and an approximate location derived from your IP address. We use this to keep the service secure (for example, to limit abuse), to understand overall usage, and to fix problems. If something breaks, an error report may be sent to our error-monitoring provider; we remove email addresses from those reports.

Information stored on your device. We store small pieces of information in your browser (local storage and similar technologies): your sign-in session, your language, which cards you have opened, player settings, and drafts. These are needed for Love From All to work. We do not use advertising cookies or cross-site tracking.

3. How we use information

We use personal information only to:

• Provide Love From All: start keepsakes, collect cards, assemble and deliver them, play songs and films, and let you print, download and share what you made.
• Run the AI features you use: write songs and lyrics, draw illustrations and artwork, translate cards, time lyrics to music, suggest wording, and describe appearances for illustrations.
• Send messages: invitations and reminders that an organizer asks us to send, notices that a keepsake is ready, updates about a keepsake you are part of (which you can turn off), order confirmations and shipping updates, and essential service messages.
• Fulfil orders and take payment: print and deliver books and party prints, process payments and refunds, and keep the records the law requires.
• Keep Love From All safe: prevent fraud, spam and abuse, enforce our Terms, and respond to reports.
• Improve reliability: diagnose errors and understand, in aggregate, how features are used.
• Comply with the law and protect the rights, safety and property of our users, the public and us.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not use your content to train our own AI models.

Legal bases (EU, UK and similar laws). We rely on: performance of a contract (to provide Love From All and fulfil orders); legitimate interests (to deliver keepsakes and invitations on organizers’ behalf, keep the service secure, and improve it, balanced against your rights); consent (where we ask for it, such as optional updates; you can withdraw it at any time); and legal obligation (such as tax and accounting records).

4. Who can see what inside Love From All

Love From All is built on private links rather than public profiles. Who sees a card depends on the link and on how the card was shared:

• Links. Each keepsake and invitation has its own hard-to-guess link. Anyone who has a link can open what it opens, so the people you send it to can see the keepsake and may pass the link on. Organizers decide who receives links.
• Shared cards can be read by the person it’s for, the organizer and other contributors once the keepsake is given, and by anyone with the keepsake’s link.
• Cards just for the person it’s for are seen only by that person and the card’s writer. The organizer sees that such a card exists but cannot read it in Love From All. The same applies to notes sealed inside a card and to gift certificates.
• Song links and QR codes. Each shared card with a song has a link (also printed as a QR code in books and on the print page) that plays that one song and shows its words, and nothing else of the card or the keepsake. Anyone with the link or the printed page can listen.
• Printed and downloaded copies. Printed books, party prints, downloaded albums, films and share images leave Love From All. Once you print or download them, you control who sees them.
• Link previews. When a Love From All link is pasted into a messaging app or social network, that service may fetch a preview showing the keepsake’s title, the person’s first name and an image. Private keepsake pages are marked so that search engines do not index them.
• Example keepsakes on our website are fictional, made by us to show how Love From All works.

5. Companies that help us run Love From All

We share personal information with service providers who process it on our behalf, under terms that limit their use of it to providing their service to us. We share only what each needs:

• Supabase: database, file storage, sign-in and server functions. Hosts all keepsake content.
• Our website hosting and analytics provider: serves the website and gives us aggregate usage statistics.
• Cloudflare: generates link previews when Love From All links are shared.
• Resend: sends our emails (invitations, reminders, updates, receipts).
• OpenAI and Anthropic: AI models that write and suggest text, translate, time lyrics to music, and describe photos for illustrations. Their published terms for business API customers say they do not use the data we send to train their models by default; we rely on those terms and do not control these providers.
• Mureka, through Apiframe: AI music generation for songs.
• Image-generation services, through our automation provider n8n: illustrations and themed artwork.
• Stripe: payment processing for books, prints and purchases.
• Lulu: prints and ships hardcover books. Receives the book’s files and the buyer’s name, shipping address, phone and email.
• Prodigi: prints and ships party prints. Receives the print files and the buyer’s name, shipping address, phone and email.
• Every.org: if a gathering’s organizer turns on Give together, gifts are made on Every.org’s own pages, under its privacy policy. We receive only a count and total of gifts, not who gave.
• Sentry: error monitoring, with email addresses removed.
• Google, Apple and Facebook: only if you choose to sign in with them.

Lulu, Prodigi, Stripe and Every.org also act as independent businesses for some purposes (for example, Stripe’s fraud prevention, or a carrier’s delivery records), and their own privacy policies apply to that use.

Other disclosures. We may disclose information if required by law or valid legal process, to protect anyone’s safety or rights or to investigate abuse, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply or you will be notified of any change. We may share information with your consent or at your direction (for example, when you share a keepsake through WhatsApp or Messages).

6. International transfers

We are based in the United States, and our providers process data in the United States and other countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK addendum, or a provider’s certification under the EU-U.S. Data Privacy Framework where available. For users in Japan, we take the measures required by the Act on the Protection of Personal Information for transfers to third parties outside Japan.

7. How long we keep information

• Keepsakes and their cards are kept until the organizer deletes the keepsake or their account. Deleting a keepsake deletes its cards, photos, videos, recordings, songs and other files.
• Accounts are kept until you delete them. Deleting your account deletes the keepsakes you organized, and, because the account is shared, your Edventures account and its content too.
• Files for books and prints that were made but never paid for are deleted after 14 days. Order details stay with the keepsake. Payment records are kept by Stripe, and printers and carriers keep fulfilment records, as their own policies and the law require.
• Email and security logs are kept for a limited period to deliver messages, honor unsubscribes and prevent abuse.
• Backups: deleted information may remain in encrypted backups for a limited period before it is overwritten.

We may keep information longer where the law requires it, or to resolve disputes and enforce our agreements.

8. Your choices and rights

Choices everyone has.

• Organizers can edit or delete a keepsake, and delete their account from the account menu.
• Contributors can edit their card until the keepsake is given. To have a card removed afterwards, ask the organizer, or contact us.
• Anyone who appears in a card, or the person celebrated, can ask us to remove content about them, and we will work with the organizer to address the request.
• You can turn off update emails in Love From All, and every optional email has an unsubscribe link.
• You can download songs as an album, print the cards, and save films and share images.

Your privacy rights. Depending on where you live, you may have the right to: know what personal information we hold about you and how we use it; get a copy of it in a portable format; correct it; delete it; object to or restrict certain processing; withdraw consent; and not be discriminated against for exercising these rights. To make a request, email privacy@ai4kidz.com. We will verify your request (for example, by confirming the email address on the account or keepsake) and respond within the time the law requires, usually 30 days in the EU and UK and 45 days in California. You may use an authorized agent where the law allows. If we deny a request, you can appeal by replying to our decision.

California residents. In the past 12 months we have collected the categories of personal information described in section 2: identifiers (such as name and email), customer records (such as shipping address), commercial information (orders), internet activity (usage and device information), approximate geolocation (from IP address), audio and visual information (photos, videos, recordings), and inferences we draw in order to describe appearance for illustrations. We collect them from you, from organizers and contributors, and automatically, for the purposes in section 3, and disclose them to the service providers in section 5. We do not sell or share personal information as those terms are defined in California law, and we do not use or disclose sensitive personal information for purposes that would give you the right to limit it.

Do Not Track and Global Privacy Control. There is no common standard for browser “Do Not Track” signals, so Love From All does not respond to them. Because we do not sell or share personal information, there is nothing to opt out of, but we treat a Global Privacy Control signal as an opt-out request where the law requires.

California “Shine the Light”. We do not disclose personal information to third parties for their own direct marketing purposes.

Other U.S. states. Residents of states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Texas, Oregon and others) can make the requests described above, and appeal our decision by replying to it. If we deny your appeal, you may contact your state attorney general.

EU, UK and Swiss residents. You can also lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.

9. Children

Love From All is a service for adults and is not directed to children under 13. Organizer accounts are for people 18 or older (or the age of majority where they live). Contributors must be at least 13, and contributors under 18 should have a parent’s or guardian’s permission. We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Children are often celebrated, and they often appear in photos, videos and stories that adults add. If you add content about a child, you confirm that you are the child’s parent or guardian or have their permission, and you control who receives the links. A parent or guardian can ask us to remove content about their child at any time.

10. Sensitive information

We do not ask for sensitive information such as health, religion or sexual orientation, but cards are personal and may mention such things. Please think about who will see a card before including them, and consider writing it just for the person it’s for. We process such information only as part of the card you chose to share, to deliver it, and we do not use it to infer anything about anyone or for any other purpose. We do not seek to collect consumer health data.

11. Security

We use reasonable measures to protect information, including encryption in transit, access controls that keep each keepsake’s data to the people who should see it, private file storage reached through short-lived signed links, and rate limits against abuse. No website, app, link or storage system is completely secure, and we cannot guarantee the security of information you share. Keep your links and sign-in private. If we learn of a breach that affects your personal information, we will notify you and the authorities where the law requires.

12. About AI-generated content

Songs, lyrics, illustrations and some suggested wording in Love From All are created with AI from what organizers and contributors write. AI output can be imperfect or unexpected, so review it before you send or print it. We do not use AI to make decisions about you that have legal or similarly significant effects.

13. Changes to this policy

We may update this policy as Love From All changes. If we make material changes, we will tell organizers by email or in Love From All before they take effect, where the law requires. The date at the top shows when it last changed.

14. Contact us

AI4Kidz is responsible for your personal information in Love From All. For privacy questions or requests, email privacy@ai4kidz.com. For anything else, email info@ai4kidz.com.