KeepsakeLens Privacy Policy
Effective and last updated: October 12, 2026
Who we are and what this policy covers
Focalward LLC provides KeepsakeLens, a tool for turning selected photos, memories, and commentary into editable storybooks. This policy covers the web and mobile apps, optional account collaboration, story drafting, protected reader links, and exports. KeepsakeLens is in development. Availability depends on the build and services you use; a preview or disabled feature does not establish public release availability. For privacy questions, contact support@focalward.com.
Photos, memories, and storybook information
KeepsakeLens handles files you choose, including photos, audio, and video, together with the titles, commentary, names or credits, dates, places, and other context you add. It also stores story arrangements, editorial revisions, contribution permissions, and publication choices. Photo selection may read embedded capture dates and GPS locally so you can review, correct, or omit them. We do not continuously track your location, identify faces, or infer personal characteristics from your photos. Original uploaded files may contain embedded metadata; review your selections and location choices before uploading or sharing.
Device-only stories and local recovery
Device-only stories and unsent drafts stay in the browser or app’s local storage unless you explicitly transfer, upload, export, or share them. Signing in does not automatically upload a local library. Browser storage is not an encrypted vault; local files rely on your device and browser security and may be affected by operating-system backups. Signed-in shared work can also leave account-scoped local recovery copies or pending uploads. These copies do not make an unsaved edit synchronized, and an offline device cannot receive an immediate remote removal. Use a trusted device, protect its access, and keep any exports you need before clearing local data.
Accounts and private cloud storage
When you use account features, Amazon Cognito handles authentication, including your email address, account identifier, and session information. An enabled Google or Apple sign-in option also uses that provider under its own policies. KeepsakeLens uses Amazon Web Services to store and process shared storybooks, selected original media, private image copies, contribution and membership records, permissions, and usage information. The service processes this material to provide the features you request. Cloud storage uses encryption and access controls, but it is not end-to-end encrypted: authorized service processing can access story content. A private team workspace is separate from a published reader edition.
Collaboration, contributions, and credit
Approved team members see material according to their roles and your contribution choices. Organizers-only submissions are restricted to the owner, editors, and their author and are excluded from other contributors and reader publication until eligible permission is given. Processing permission and permission to publish are separate. Joining a storybook or uploading a file does not authorize every future use, and an owner cannot widen another contributor’s consent. Your chosen display credit or anonymous preference is used for attribution; an account email is not a public credit. Attributed quote changes require the author’s review. Only the owner controls publication and membership roles.
Contacts, invitations, and cloud file selection
Where contact selection is available, it reads the contact you choose rather than uploading your address book. Selecting a contact alone does not grant membership or send a message. When you create a hosted invitation, KeepsakeLens stores the intended recipient’s email address, the requester’s display name, the selected access and expiry, and an optional first question so you can manage the pending invitation. Invitations expire after seven days. Acceptance or revocation removes the recipient address, requester name and pending question from the invitation record; expired links stop working immediately, while expired records may remain until service cleanup runs. If a first question is activated after joining, it becomes an ordinary in-app memory request and follows the story’s data and deletion rules. Invitation status records may remain for retry and account cleanup without those addressing or question fields. Account deletion also clears invitations associated with that recipient or requester. Hosted invitations are bound to the intended verified recipient, and joining remains an explicit choice. Automatic email or SMS delivery is not currently connected; you can copy a private invitation link to send yourself. System file providers and configured Google pickers retrieve only the files you select. Google import access tokens are temporary to the import operation; import does not scan your whole library, start background synchronization, or itself upload files to KeepsakeLens or an AI provider. Removing a provider permission does not delete copies you already imported.
Optional AI story drafting
When AI drafting is enabled and you choose it, the KeepsakeLens service sends selected, permitted source context and prepared photos to OpenAI to create a reviewable draft. Processing permission is checked separately from reader-publication permission. Provider-bound photos are resized and re-encoded to remove embedded metadata; private original files are not sent unchanged. The request disables stored model responses, but this is not a guarantee of zero provider retention. OpenAI’s applicable data-handling and abuse-monitoring policies also apply. Generated wording may be inaccurate; it remains a draft for review and does not publish automatically. Merely opening a storybook, joining its team, or selecting photos does not start AI drafting.
Protected reader links and publication
An owner can publish a reviewed edition only from material eligible for that audience. The current hosted reader uses a password-protected link: anyone with both the link and password can read it and may forward them. The password does not verify a reader’s identity or grant team access. Published editions currently contain approved text and safe JPEG copies; private audio and video are not yet available in these reader links. Changes to the private workspace do not silently replace an approved edition. Withdrawal or changed permission can suspend affected publication until repaired. Revocation stops new authorized access, but a previously issued media or download link can remain usable for its short validity window, and downloaded copies or screenshots cannot be remotely erased.
Exports and recovery archives
Exports and sharing happen when you request them. A reader export contains eligible reviewed content. An owner recovery archive can include originals only where the required active permissions allow them, so it may contain material unsuitable for reader sharing. Restoring an archive creates a new private storybook and does not restore memberships or publication permission. Protect downloaded archives and check their contents before sharing. The app or destination you choose receives exported content under its own policies; deleting a storybook does not remove copies held by those recipients.
Plans and billing
KeepsakeLens’s current plan chooser is a catalog preview. Selecting a preview does not charge you or activate a paid entitlement. Commercial billing is not currently connected. The service can retain storage totals, drafting usage, and allowance records to operate enabled features. We will update this policy and show the applicable provider, price, and payment disclosures before enabling purchases.
Security, service providers, and support
We use the service providers described here to deliver requested functions. Hosting, authentication, security controls, and optional integrations may process connection and technical information, including IP addresses, request timing, errors, and session records. Operational logs are designed to contain limited status, count, and timing information rather than story content or credentials. We do not sell your personal data. Information you email to support is used to investigate and respond to your request; avoid sending unrelated private media or anyone’s password. Information may also be retained or disclosed where required by law or to protect users and the service. Encrypted transport and access controls reduce risk, but no storage or transmission system is completely secure.
Retention and cleanup
Active account storybooks, originals, revisions, permissions, and published editions remain while needed to provide them or until you request applicable deletion. Withdrawing permission stops future use but preserves the original until you separately delete it. Hosted export output expires after 24 hours; temporary recovery-import uploads have a one-day cleanup window. Expiration and provider cleanup run asynchronously. New worker logs generally expire after one month and API access logs after two weeks. Database recovery copies can retain earlier data for up to 35 days. Restricted deletion markers and permission records can remain to prevent withdrawn content, stale uploads, or restored backups from becoming accessible again. Support correspondence is retained as needed to resolve and document requests or meet legal obligations. Independent providers have their own retention rules. There is no promise of permanent preservation or immediate erasure from every backup.
Your choices, withdrawal, and deletion
You can review permissions, withdraw your own contributions, and request deletion of your original sources through available privacy controls. Leaving a team ends access but is separate from withdrawing contributed material. Removing a memory from the story arrangement does not delete its source. Owners can delete a storybook. Account deletion requires an explicit choice about withdrawing contributed material or allowing existing permitted contributions to remain with anonymous deleted-account credit; owned storybooks are separately acknowledged for deletion. Cloud access is blocked before asynchronous data and identity cleanup completes, and failed cleanup remains retryable. The service targets cleanup within 24 hours after outstanding uploads and work have settled; this is an operational target, not a guaranteed deadline. Uninstalling the app or clearing browser storage does not delete cloud records. Independently contributed copies, exports, screenshots, and provider-held data may require separate removal.
Privacy requests and reported content
For help accessing, correcting, withdrawing, or deleting information, email support@focalward.com with the subject KeepsakeLens privacy request or KeepsakeLens account deletion. Use your account email when applicable. We may ask you to verify ownership before acting; do not send your password. You can also report material that includes you or your child without appropriate permission, even if someone else uploaded it. Tell us enough to locate the affected story or contribution without attaching unnecessary private content. We will review the request and explain any applicable legal, security, provider, or previously shared-copy limits.
Children and policy changes
KeepsakeLens starts with adult account holders and is not directed to children under 13. Photos or memories involving children require appropriate permission from the people responsible for that content; uploading a child’s photo does not authorize identification or broader reuse. Contact us if you believe a child has supplied personal information or if child-related material needs removal. We will update this policy as features, providers, or data practices change and provide additional notice or consent where required.
Privacy questions or requests: support@focalward.com.