Privacy Policy

Last updated: June 29, 2026

RetroMyPhotos exists to make new photos of the people you love — which means we handle something genuinely personal: your photos and the faces in them. This policy explains, in plain language, what we collect, what we do with it, and the choices you have.

What we collect

Photos you upload, and data we derive from them: detected faces and numerical face descriptors ("embeddings") used to group photos of the same person together in your workspace. We also collect your email address when you check out or sign in, order and shipping details when you buy prints, a salted hash of your IP address used for abuse prevention (we don't keep the raw address with your work), and product analytics about how the site is used.

How we use it

To run the service: generate the retro photos you ask for, group your photos by person so you can pick who's in a scene, deliver purchases and receipts, prevent abuse, and understand how the product is used so we can improve it. We don't sell your data, and we don't use your photos for advertising.

Face data (biometric)

Face detection and grouping happen solely to organize your own photos within your own workspace. The numerical face descriptors are biometric data, so we ask for your explicit, opt-in consent before any face analysis begins — and you can withdraw that consent at any time by deleting your photos. Face descriptors are never used to identify you or anyone else across other services or other customers, are never sold or shared for identification, and are deleted when the photos they came from are deleted.

Service providers

We share data only with the providers we need to operate, and only what each needs: an AI provider receives your photos to generate your requested images; a payment processor (Stripe) handles cards — full card numbers never touch our servers; cloud object storage (AWS S3) holds photos privately; a print lab receives your order's images and shipping address when you buy prints; an email provider sends receipts and sign-in links; and an analytics provider (PostHog) receives usage events.

How long we keep things

You can delete your uploaded photos and generated results in the Studio at any time — deletion also removes the derived face data. If you try the service as a guest and don't make a purchase or create an account, your uploads, face data, and results are automatically deleted after 90 days of inactivity. Work tied to an account or purchase is kept so your photos and orders stay available, until you delete it or ask us to.

Children

The service is for adults. We don't knowingly let children use it directly. Photos that include children may only be uploaded by a parent or guardian (or with their permission), and we treat those photos with the same protections as everything else here.

Your rights

You can access your work in the Studio, delete photos and results yourself, and email us to ask what we hold about you or to have all of it deleted. We honor deletion requests for guests and account holders alike — include the email you used at checkout or sign-in so we can find your purchases.

Security and cookies

Data is encrypted in transit, photos are stored in private buckets accessed through expiring links, and sessions use signed, HTTP-only cookies. We use a session cookie to keep your guest workspace attached to your browser, and analytics cookies to understand product usage.

Changes and contact

If this policy changes materially we'll update the date above. The best way to reach us about your data is email — we read everything.

Questions? Email us at support@retromyphotos.com .