Privacy policy

Updated October 15, 2026

YOU, THE MOVIE uses family information to prepare and deliver personalized AI-assisted family films. For privacy questions or requests, contact tal@youthemovie.ai.

The movie builder

Names, email and message entered in the movie builder are saved in this browser’s local storage so you can continue where you left off; they are cleared from this browser once your order is paid, or when you clear this site’s data. We use Supabase Auth to keep your preview with your email: when you enter an email address that has no movie with us yet, you are signed in on this browser right away. If the address already has a movie or an order, we first send you a 6-digit code by email through our email delivery provider, and the same email contains a sign-in link as a fallback, so only the owner of the address can open it. This lets you return to your saved preview. When you continue from the photo step, your three selected photos are uploaded to private Supabase storage and sent to OpenAI’s image service to create a personal movie cover before payment. When a cover is ready you can save its front, with a small youthemovie.ai mark, to your device; the print-quality cover set is available only after payment. Your cover and approval are saved with your draft. Refreshing the page reads your saved work; it does not create a new image.

Unpaid drafts

Once 30 days have passed since your last change to an unpaid draft, our daily clean-up deletes your uploaded photos and every cover image made from them, in every size, from our storage. It also removes the names, email address and message from the draft and from any unfinished checkout for it, including the details PayPal sent us about a payment that was never completed. What we keep has no names, email address, photos or message: dates, the photo permission you gave, the number of covers made, which one you approved and what they cost us to make, the price and status of any payment attempt, and PayPal’s and our image provider’s reference numbers, linked to your sign-in account. If money was paid or refunded, that payment record is kept. Our database provider’s backups can hold removed details until those backups expire on the provider’s schedule. Your email address stays registered with our sign-in service so you can sign in again; contact us to delete it, or to delete a draft sooner.

Your finished movie

We deliver your finished movie through a private page on this site. We email you a link, and you sign in with your email address to watch the movie and download it together with your cover. The movie is stored privately with our database and storage provider, Supabase, and the page gives only you short-lived links to it. We keep the movie on your private page for 12 months after delivery, then delete it from our storage automatically, together with any other copy of it stored there; you can ask us to delete it sooner. If an order is fully refunded, its movie is deleted from our storage too. We send order emails, such as the start of production and the delivery of your movie, through our email delivery provider, Resend.

When you contact us or order

We receive your order details, authorized family photos and approved cover. We use them to produce and deliver the film and cover, communicate about the order, handle corrections and meet record-keeping obligations. A draft can expire, and you can ask us to delete an abandoned draft; transaction records may need to be retained.

Production providers and payment

OpenAI processes the submitted photos to create the cover preview. OpenAI and Amazon Web Services also run the safety checks described below. AI tools process the submitted photos to create your personalized film after payment, and our team reviews the film before delivery. Names, faces and messages may be processed outside your country by these providers. Only submit family images with the required permissions. PayPal processes payment details directly under its own privacy terms; we do not receive your full card number. We verify payment before production and before making the approved cover file available to download.

Safety checks

To keep the service safe, we check your photos, the names and message you type, and every generated cover automatically before a cover is made or shown to you. OpenAI’s moderation model checks them for sexual, violent, self-harm and other unsafe content. Amazon Web Services (Amazon Rekognition, in Frankfurt, Germany) compares the faces in the photos and covers with its database of well-known public figures, to prevent movies of celebrities. This comparison does not identify private individuals, and we do not keep any face measurements from it: we keep only whether a photo or cover passed and, if not, why. Photos that fail are deleted right away. We have instructed Amazon Web Services not to store or use the images it checks for us to improve its own services. Before delivery, our team runs the same public-figure check and an explicit-content check on frames of your finished movie. You agree to these checks when you give photo permission in the movie builder, and we use them only for safety. Our Content and Safety Policy explains what the checks look for.

Payment and accounting records

For a completed PayPal payment, we use iCount to prepare your accounting documents and our email delivery provider to send you the verified original document link. We use the payer name and available country and billing address reported by PayPal, the purchase circumstances you confirm at checkout, and, when available, a country derived from your network IP address by our hosting provider. The network country is supporting evidence for accounting, not proof of residence. This accounting check is separate from advertising and does not request GPS or precise device location. We keep the country, its source and observation time, your recorded confirmation, and the applied tax rule with the private accounting records; we do not store the raw IP address in those country records. If the country needed for your invoice is missing, we ask only for your country of residence on your private order page after payment. A missing street alone does not delay an invoice. We do not infer nationality or residence from your name, language or payment currency. We use transaction details and the recorded purchase circumstances to determine the applicable tax treatment, with internal review for exceptions. We send iCount the payer name and invoice address, your verified delivery email, the payment date, amount and currency, and the PayPal and order reference numbers. We retain your consent to electronic documents and the supporting billing and tax records privately. We keep these accounting records to manage the transaction and meet record-keeping obligations. Family photos, cover images, your movie and personal messages are not sent to iCount.

Website operation

Our site is hosted on Vercel, which may process technical request information such as IP address, browser details and access time to serve and protect the site. Cloudflare Turnstile checks that requests to save your email, to send a sign-in code or to create a cover come from a person; Cloudflare may process technical information such as IP address and browser details for this check. Fonts are requested from Google Fonts. These providers may process information in other countries.

Contact messages

When you use our contact form, we use your email address, message and any name you provide to answer your request. Resend delivers your message to our support inbox and sends an automatic confirmation to your email address. Cloudflare Turnstile helps protect the form from spam. We do not send contact-form contents to our analytics tools.

Cookies and analytics

To understand how the site is used, we count every visit without cookies and without storing anything in your browser: Vercel Web Analytics counts page visits with the country, device type and the site or campaign you came from, and PostHog counts page visits, progress through each creation step, time spent on a page, how far it was scrolled and which of our pages a link leads to. For this PostHog turns your IP address and browser type into a code that changes every day to group visits from the same browser within that day; the IP address itself is not stored. These counts never include your family names, photos, email address or message, and page addresses are sent without their query parameters (only campaign tags such as utm_source are kept). On the payment and confirmation pages, and when a payment is recorded, PostHog also receives your order’s reference code (a random code, not your name or email address), so we can see at which checkout step an order stops

With your permission, we use Google Analytics 4 to measure page visits, progress through each creation step, and checkout, PostHog to measure the same limited events, site performance and sanitized browser errors, and Microsoft Clarity to record interactions on public information pages so we can see where visitors have trouble. Clarity is not loaded in the movie builder, payment or confirmation pages. PostHog also records navigation and interactions on public information pages and the movie builder when its URL contains no private identifiers. These recordings mask all text, block form fields and images and exclude console logs, network headers and request or response bodies. PostHog recording is not loaded on payment, confirmation, account, contact or private movie pages. Recordings are retained for 30 days. We keep PostHog automatic page-content event capture off. We do not send your family names, photos, email address, message or card details to these services, and only PostHog receives your order’s reference code, as described above. Page URLs and referrers sent by our event code omit query parameters. Checkout events include the purchase amount and USD currency. These providers may use cookies or similar browser identifiers and process technical browser information in other countries. Our PostHog project discards client IP addresses from stored events.

Advertising measurement (Meta)

We use the Meta Pixel and Meta’s Conversions API to measure whether our Facebook and Instagram ads lead to visits and orders. The Pixel runs on the home, information and movie builder pages, never on the payment or confirmation pages. It lets Meta set cookies and receive the page address and these steps: a page visit, starting to create a movie, saving your email, sending your photos for a cover, seeing your cover preview, approving your cover and submitting your movie details. These steps carry only our product code, never your details, and we turn off the Pixel’s automatic collection of page content. When you save your email, approve your cover, open PayPal checkout and pay, our server also tells Meta about it, with a one-way hashed (SHA-256) form of your email address and account identifier, your IP address, browser details and Meta’s cookie identifiers, so Meta can match it to the ad you saw. From your cover onward it adds the price, and for checkout and payment the amount and the items in your order. We never send Meta your family’s names, photos, cover, film, message or order identifier, and never your email address in readable form. Meta may use this information under its own terms, including to show you ads

In the United States and its territories, this Meta measurement is on by default and a short notice on the site tells you so. Under some US state privacy laws, such as California’s, sharing this information with Meta for advertising can count as “selling” or “sharing” personal information. You have the right to opt out at any time: select “Reject” on the notice, or “Do Not Sell or Share My Personal Information” or “Cookie settings” at the bottom of this Privacy Policy page. Selecting “OK” on the notice also turns on the optional analytics described above. To choose which notice to show, our hosting provider tells the page only whether your connection comes from the United States or its territories; we do not store it

Everywhere else, the Meta Pixel and these server-side messages stay off until you choose “Accept all”

If you opt out or decline, or your browser sends a Global Privacy Control signal, the Pixel does not load and our server does not tell Meta about any of these steps, including your checkout and purchase. We treat a Global Privacy Control signal as a request to opt out of selling and sharing, wherever you are. Opting out also removes Meta’s cookies from this site. Your choice is saved in this browser, so make it again if you use another browser or clear this site’s data. You can manage ad preferences in your Facebook or Instagram settings

A Global Privacy Control signal also keeps PostHog session recording and Microsoft Clarity off, including when an earlier analytics choice was saved. Google Analytics, PostHog recording and Microsoft Clarity otherwise are off until you choose “Accept all”, or “OK” on the US notice. You can decline and still use the site, or change your choice later through “Cookie settings” at the bottom of this Privacy Policy page. Withdrawing permission stops session recording immediately and reloads the page to stop the loaded analytics scripts; it cannot erase information already sent. Contact us if you need help with a data request

Party invitation and poster extras

If you buy the party invitation pack, you give us the party details you want on the invitation: a headline, the date and time, the place and city, an optional street address and note, and the name and the phone number or email address guests should reply to. We check this text with the same automated safety check as the names you type, use it only to make your video invitation and card, and store it privately with Supabase. These details appear on the invitation, so only add what you are comfortable sharing with your guests. We delete the party details 30 days after the party date, or sooner when the order or the invitation pack is refunded. The invitation files and the poster file stay on your private page for 12 months after we deliver them and are then deleted; if the order or that extra is refunded, its files are deleted too. Before delivery, our team runs the same public-figure and explicit-content check on these files as on your movie.

Reminder emails

If you make a movie cover and do not order, we may send you up to three reminder emails, about one, three and seven days later, so you can finish your movie. They show your cover; the third, only if you reached the payment page, may offer your family a lower price for a limited time. Every reminder has an unsubscribe link, and you can also reply to it. Once you unsubscribe, we keep your email address on a do-not-email list so we do not send reminders again. Emails about an order you paid for still reach you.

Reviews on our site

After you receive your movie, you can rate it and write a short review on your private movie page. If you tick the box, we show your rating, your review and the name you choose on youthemovie.ai, with the month you wrote it, but never your email address, your order or your photos. Your rating counts in the average shown on the site right away; we publish the text after a quick check. We publish every review except ones that share private details, are offensive, are not about the movie or our service, or are advertising, and we tell you if we could not publish yours. We check the text with the same automated safety check as the names you type. To withdraw your review, email tal@youthemovie.ai and we delete it.

Reviews (Trustpilot)

About three days after we deliver your movie, we ask Trustpilot A/S (Denmark), an independent review platform, to invite you to review your experience. For this we send Trustpilot only your email address, the two names you entered for Dad and Mom (used in its greeting) and your order reference, never your child’s name, photos, cover, movie or private movie link. Trustpilot sends the invitation under its own privacy policy, and you can unsubscribe from its emails there. We invite every customer who received a movie the same way, including after a refund, and we never pay or reward anyone for a review. We do this based on our legitimate interest in honest, public feedback about our service. You can object at any time: email tal@youthemovie.ai, and if the invitation has not gone out yet, we will not send your details to Trustpilot.

Your choices and family images

You may request access, correction or deletion of information you sent us by contacting our support email. Some records may need to be retained to meet legal or transaction obligations. You do not grant permission to publish your family’s photos, cover or film in advertising by placing an order; that requires separate permission.

Children

The creator is intended for purchasers aged 18 or older. Children should not submit information or use the order form themselves. An authorized parent or guardian must give permission for use of a child’s image.