Privacy Policy

To produce an animated film for you we need to receive personal details and family photographs from you. This page explains what information is collected, what it is used for, who it is passed to, how long it is kept and what you can ask us to do with it — as section 11 of the Privacy Protection Law, 5741-1981, as amended by Amendment 13, requires.

Who is responsible for the information

The controller of the database is the site’s operator, whose name, number and contact details appear in the Terms of Service and at the foot of every page. For any question or request about privacy, write to us — by e-mail to the address at the foot of the site, or by WhatsApp to 052-400-0820.

Guests’ details in digital invitations, and what hosts collect in them, are also covered by the “Invitations and guests — privacy and terms of use” page.

What information we collect

• Contact details: full name, e-mail address and phone number.
• Event details: the type of event and its date.
• The brief: the free text you write to us about the story the film should tell.
• The photographs: the image files you upload for producing the film, and the captions you wrote on them.
• A song of your own: the music file you chose to upload as the film’s music, its name, and your declaration that you may use it.
• A recorded dedication: the voice recording you made or uploaded to be included in the film.
• Greetings for the film: blessings written on the film’s page (a name and a message), and video greetings family and friends uploaded on the greetings page (a name and a video).
• Correction and change requests: the moments in the film you marked, the kind of change and what you wrote, our answers, and the version you chose.
• A discount code: a coupon or bring-a-friend code you entered, and the discount it gave.
• A review: the rating, the words and the name you wrote, and whether you agreed to their being shown on the site.
• Enquiries: what you wrote to us in the contact form or in an invitation design request — name, phone, e-mail if you left one, the topic or the event’s details, and the message.
• Signing in (optional): if you choose to sign in to the site with a Google account — the name and e-mail address on your Google account, a user id, and a sign-in cookie in your browser; and if you add an event invitation to the account — the link between the account and the invitation.
• Order details: the package and add-ons chosen, the choices made in the studio (pace, style, the song you chose or asked for, font), the order status, and the payment confirmation with the reference number from the payment processor.
• Technical information: server logs (IP address, time of the request, browser type) that the hosting provider keeps for a short time for security and operations, and request-rate counters, which we keep only as an encrypted hash and delete within a day.

Credit card details are not stored by us. They are entered on the payment processor’s secure page; we do not see them and do not store them on the site’s servers.

There is no legal duty to give us the information — giving it depends on your wish and consent. But without the contact details, the event details and the photographs we cannot produce the film, because they are the material it is made of.

What the information is used for

• Contact details — to send you the order link, status updates, the finished film and the receipt, and to answer your enquiries. We will not send you marketing mail without separate consent.
• Event details and the brief — to fit the film’s content and the delivery date to your event.
• The photographs, the song and the studio choices — solely for producing your film: by the person editing it, and in the processing systems listed below. The photographs are kept in private storage that is not open to public access.
• Enquiries from the contact form — to answer you, and to keep a record of the answer.
• Order details — to carry out the order, charge for it, issue a receipt, handle enquiries and cancellations, and keep books as the law requires.
• Bring-a-friend codes — each order keeps a discount code with its owner’s e-mail address: to send them a credit when someone orders with the code, and to recognise when the owner uses it themselves (once, on another film order of theirs). The code’s owner is not told by us the name of whoever ordered, or anything else about them.
• Coupons — to work out the price, count the code’s uses and prevent misuse.
• The recorded dedication, the blessings and the video greetings — to show them to you and to put into the film what you chose, at your request only.
• Correction and change requests — to correct the film, moment by moment, and to answer you.
• A review — to learn and improve, and to show it on the site only if you agreed.
• Signing in — to show you, once Google has verified your e-mail address, the films ordered with that address and the event invitations you added to the account, so you can come back to them without looking for the links. Whoever made an invitation sees the e-mail addresses of the accounts that saved it, so they can remove them.

The photographs and the film are not used for advertising, a portfolio, examples on the site, training artificial-intelligence systems or any other purpose. If we would like to show your film as an example, we will ask for your separate, explicit, written consent, which you may refuse or withdraw at any time with no consequence for the order.

Messages we send you

We e-mail you only about your order: the order confirmation and status updates, the finished film, answers to your correction and change requests, a notice of a bring-a-friend credit you earned, and one e-mail after delivery asking you to rate the film. These are service messages, not advertising.

Advertising — only with consent. We will not send you an advertising message — by e-mail, text message or WhatsApp — without explicit consent you gave in advance, as section 30A of the Communications (Telecommunications and Broadcasts) Law, 5742-1982, requires. If you consent, every such message will be marked as advertising, carry our details and a simple way to say you want no more, and we will honour the refusal at once.

You may ask at any time that we stop sending the rating request or any other message that is not needed for the order — by replying to the e-mail or by writing to us.

Minors

The site is intended for adults. Photographs in which minors appear are uploaded by a parent or guardian and under their responsibility, and we treat them with particular care: they are shown to no one but the person editing the film, are passed to the processing providers listed below only to create the clips, and are deleted at the time set out below. We do not ask for photographs of minors and collect no information about them beyond what is in the photographs and the captions.

Access to your order

The site has no passwords. Access to an order is through a personal link sent to the e-mail address you provided, valid for 30 days. Keep the link safe — anyone who holds it can view the order details and the film during that period. If you fear the link has reached the wrong hands, write to us and we will issue a new link that cancels the old one.

You may also, if you wish, sign in to an account with Google. You sign in on Google’s page, through Supabase’s sign-in service (Supabase Auth), and we receive only your name, your e-mail address and the confirmation that the address is verified. Your account shows the films ordered with that address, and the event invitations you added to it yourself with their management link; from it, the pages those links open are opened at an address that lasts 12 hours. Signing in is optional: the personal links work without it.

If you made the film a page of its own or a greetings page, anyone holding their links can watch the film, write a blessing or upload a video greeting, until they are deleted together with the order’s files. These pages do not appear in search engines.

How long the information is kept

• The photographs, the captions, the song you uploaded and the finished film — are deleted automatically from our storage 7 days after the film is delivered, and likewise in our production system (the intermediate clips made along the way are deleted there sooner). The period is there to download the film and to ask for its round of corrections, and a corrected version is kept again for the same period from its delivery; once it ends we cannot recover the film, so download it and keep a copy. You may ask for earlier deletion at any time.
• The recorded dedication, the video greetings and the blessings on the film’s page — are deleted together with the photographs and the film, at the same time, and so are the links to the film’s page and the greetings page.
• An order that was never paid for — is deleted, together with the photographs uploaded for it, within 30 days.
• A cancelled order — the photographs and the song are deleted on cancellation.
• Enquiries from the contact form — are kept for up to 12 months from the reply, so that a conversation that began can continue.
• A review — is kept with the order’s record; it is shown on the site only if you agreed, and taken off it when you ask.
• The account — the name, the e-mail address and the link to the invitations you added are kept as long as the account exists; the sign-in cookie is deleted from the browser when you sign out, or by itself after 30 days without a visit. You may ask at any time for the account to be deleted.
• Order details and accounting records — name, contact details, package and discount details, the receipt and payment records, and the order’s log (correction, change and cancellation requests) — are kept for the period required by the bookkeeping rules (seven years), even if you asked us to delete the rest of the information.

Your rights

Under sections 13 and 14 of the Privacy Protection Law, you may:

• review the information kept about you and receive a copy of it — where possible as a file in a common format, and while they are kept, the photographs and the film too;
• correct information that is wrong or out of date;
• ask us to delete the photographs and the rest of the information, subject to the retention duties imposed by law;
• withdraw any separate consent you gave (for example to showing the film as an example, or to showing a review), and ask us not to send you messages that are not needed for the order.

Requests are made in writing, from the same e-mail address the order was placed from — that is how we know it is you — to the e-mail address at the foot of the site, or by WhatsApp to 052-400-0820 quoting the order number. We will acknowledge the request within 2 business days and answer it in full within 30 days at most. If you believe we did not handle a request properly, you may approach the Privacy Protection Authority.

Service providers and transfers abroad

We use external service providers to run the site, store the files, process the payments, send e-mail and create the motion in the film. These providers receive access to the information only to the extent needed to provide the service, and may not use it for any other purpose. We grant no provider permission to use your photographs, song or film to train its models.

• Vercel (United States) — hosting the site and running its server code. The site’s pages are served from a global content network; the server code runs in Frankfurt, Germany (the European Union), beside the database.
• Supabase (Frankfurt, Germany — European Union) — the orders database (name, phone, e-mail and event details) and file storage: the uploaded photographs and the finished film; and, for those who sign in, the sign-in service (Supabase Auth), which keeps the name, the e-mail address and the user id.
• Google (United States) — signing in to an account, for those who choose it: you sign in on Google’s page, and Google gives us your name, your e-mail address and the confirmation that the address is verified. Google receives nothing from us about your orders.
• Grow (Meshulam) (Israel) — payment processing. Card details are entered on Grow’s secure page and never reach our servers; we receive only a payment confirmation and a reference number.
• Resend (Ireland — European Union) — sending the e-mails: the recipient’s address, name and the content of the message.
• Our production system (Israel) — a server under our control where the film is edited and assembled: the photographs, the song, the choices, the generated clips and the finished film are kept there for the period above, with signed-in access only.
• Cloudflare (United States) — the protection and traffic network through which the production system is reached. It sees the traffic in transit and shields against attacks; it does not store the files.
• fal.ai (United States) — a platform through which we run models for video generation and image editing: it receives the photographs (and at times clips made from them) to create the motion, the transitions and the clips in the film, and returns the clips. Some of its models are developed and run by the companies that made them (Google, for example), and then the photographs pass through fal.ai to that company, for the processing only and under fal.ai’s terms of service.
• Runway (United States) — a provider of video-generation models, which receives the photographs to make clips from them when we use it, under its terms of service and data-processing agreement.
• OpenAI (United States) — a vision-and-language model that receives the photographs to describe them and plan the transitions (who appears, what is happening, how to move from one photograph to the next). OpenAI states that data sent through its API is not used to train its models by default.
• WhatsApp — when you write to us on WhatsApp, the messages pass through Meta’s service and under its terms.

This means that some of the information — the photographs and the song included — is stored and processed outside Israel, mainly in the European Union and the United States, with the providers above and only for the purpose of the service; the model developers working through fal.ai may also process the photographs in other countries where they operate. The transfer is made under the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001: with your consent, given by placing the order after reading this policy (regulation 2(1)); and by virtue of each provider’s written contractual undertaking (a data-processing agreement) to protect the information to a standard no lower than Israeli law requires, to use it only for the service and not to pass it to anyone else (regulations 2(4) and 3). Germany is also subject to European Union privacy law, from which Israel receives information on the same terms (regulation 2(8)).

We do not sell information, do not share it with advertisers, and do not hand it to anyone else — unless the law obliges us to, for example by order of a competent authority.

Cookies and tracking

The site uses no tracking cookies, no social-network pixels and no third-party analytics. The accessibility settings you choose (text size, contrast) are stored in your browser only and are not sent to us. Whoever signs in to an account with Google gets a sign-in cookie — readable by the server only, not by scripts on the page, and sent only over an encrypted connection — kept until you sign out or for 30 days from your last visit, and beside it a small cookie that says only that you signed in, so the bar can show "My account". Besides these, a login cookie exists only in our back office, which is not open to visitors.

A few more things are kept in your browser’s local storage — not with us — for your convenience: the studio’s draft of the film, the photographs and the song you chose included, until the order is opened; a bring-a-friend code you arrived with; the list of digital invitations you made in this browser; and the name you wrote with a blessing or in an album, so you need not type it again. All of these can be deleted in the browser’s settings.

The song covers and the 30-second audio excerpts in the song choice load directly from Apple’s servers (Apple Music), so Apple receives the browser’s IP address and the request, under its own privacy policy. Links to WhatsApp, Waze, Google Maps, Bit and PayBox open outside services, whose own privacy policies apply to them.

The site measures itself, and only itself: which steps of building the film were completed (arriving at the page, choosing the kind of film, uploading photos, watching, going to payment) and which options were chosen. The measurement uses no cookies and no identifying details — no IP address, no name, no e-mail — only a random id that lives in the browser tab and is gone when you close it. Two steps are counted after the site — a completed payment and a delivered film — per order, again without identifying details. Each visit also records where it came from, as a label only: the tag of an ad or of one of our own links (such as the link at the foot of every invitation), or the kind of site that sent it (Google, Facebook and the like) — never an address. A film order also records whether the browser has made a digital invitation here — yes or no, never which one — so we know whether the two services bring each other.

Information security

The photographs and the film are kept in private storage that cannot be reached from the internet; a download is possible only through a signed, short-lived link created for the order’s owner. The personal order link is long and random, and only a hash of it is stored with us; it is replaced automatically after payment and after delivery. Communication with the site and with the production system is encrypted (HTTPS). The production system runs on a server under our control, with signed-in access only, behind Cloudflare’s protection; files leave it only through signed, short-lived links. Access to order details and photographs is limited to the person editing the films, after signing in. Our providers meet accepted information-security standards.

That said, no system is entirely immune, and we cannot guarantee absolute security. Should a security incident occur in which your information is exposed or stolen, we will notify you without delay, tell you what we know and what we are doing, and report to the Privacy Protection Authority to the extent the law requires under the Privacy Protection Regulations (Data Security), 5777-2017.

Changes to this policy

We may update this policy from time to time. A change that widens the use of information or its disclosure will not apply to information already given to us without your consent; a material change will be published on this page, and customers with an open order will be notified by e-mail. The date of the last update appears below.

Last updated: 14 October 2026.