Privacy

1. Who we are

Tinfully is made by KEYPOPPY, a heritage preservation business in Mars, Pennsylvania 16046, USA. "We" means KEYPOPPY; "you" means the person using Tinfully. Questions about privacy go to support@tinfully.com.

2. What we collect

• Your account: your name, your email address or phone number, and, if you sign in with Google, the name and picture Google shares with us.
• What you add: photographs of recipe cards, family photos, letters, stories, captions, and the names and dates you write down. Family photos often show people, including children and people who have died.
• What Tinfully makes from it: the words read from your cards, the recipes, your corrections, and the cookbook you lay out.
• The people you invite: the names and email addresses (or phone numbers) you give us, so we can send the invitation.
• Orders, when printing opens: the shipping name and address, and what you ordered. Card payments are handled by Stripe; we never see or keep your card number.
• Messages: what you write to us, and what you tell us when you ask to hear when something is ready.
• What computers send anyway: your internet address and browser type, kept briefly in our hosting provider's logs to run and protect the service.

About the photos themselves. Phones and cameras store information inside a photo. We read the date it was taken and the camera, to help date the card. We do not read, keep, or use where a photo was taken. We keep your original file exactly as you uploaded it, so it may still hold whatever your camera put there, including a location; the copies Tinfully shows and prints are made without it.

3. How we use it

To run Tinfully for you: to read your cards, show your tins to the people you choose, lay out and print what you order, keep your account safe, and write to you about your account, your tin, and things you asked to hear about. To keep Tinfully safe and lawful: to stop abuse and to answer the law when we must. That is all. We do not sell or rent personal information, we do not use it for advertising, and we do not share it for anyone else's marketing.

4. The AI that reads your cards

Every photo you add is looked at by an AI model from an established AI provider, used through its business service: first to tell a card from a family photo, then to read the words on cards, letters, and clippings and to set out the recipe. The model may run on the AI provider's own servers or on other cloud environments on the AI provider's behalf. Under their business terms, they may not train their models on what we send, and they delete it within 30 days, unless their safety systems flag it, when they may keep it for up to two years to look into misuse. We do not train any AI on your content either. If that ever changed, we would ask you first, and it would never cover what you had already uploaded. The AI can be wrong; check the card before relying on a reading.

5. Faces

Tinfully does not use face recognition. We do not measure faces, make face templates, or ask the AI to say who anyone in a photo is. If we ever offered something like that, we would explain it and ask you before it touched your photos.

6. Who can see what you add

• Private, to start with. A new tin is seen only by you and the people you or your family invite.
• Shared by link, if the tin's owner turns it on for a recipe: anyone with the link can read and print that recipe. It cannot be found by searching.
• Public, if the owner chooses: the recipe can be found in Tinfully's public search and by search engines such as Google and Bing. Family photos and stories are never made public.
• Copies. If the owner lets the family save copies, a relative can keep a copy of a recipe, with its photos, in their own tin. Deleting yours does not delete their copy.

7. Photos of other people

A family archive is full of other people. Only add photos and stories you have the right to share with your family. If you appear in a photo on Tinfully, or a family member who has died does, and you want it taken down, write to us at support@tinfully.com. We will look at it, tell the tin's owner, and remove it where that is right. Intimate images shared without consent are removed within 48 hours of a valid request.

8. The companies that help us

Like most online services, Tinfully relies on a small number of trusted companies to run it for us: hosting and storage, the database, signing in, sending email, the AI that reads the cards, taking payments, and printing and delivering what you order. Each receives only the information it needs for its part, may use it only to provide that service to us, and must keep it secure. Printers, for example, receive the pages to print and the shipping address, nothing else. None of them may sell your information or use it for their own advertising.

We may also share information when the law requires it, to protect someone from harm, or if KEYPOPPY were ever sold or merged, in which case this policy would still apply to what you had already given us.

9. Cookies and tracking

Tinfully uses a few small cookies to keep you signed in and to remember things like the tin you opened last. There are no advertising cookies, no analytics trackers, and nothing that follows you to other websites. No other company tracks you across sites through Tinfully. Because we do not track you, a browser's "Do Not Track" signal changes nothing here.

10. Where it is kept, and for how long

Your information is stored in the United States. Pages for a printed order may be sent to the printer that makes it, which may be in the United Kingdom or elsewhere. We keep your tins for as long as you keep your account. When you delete a recipe, a tin, or your account, it is deleted at once, and it is gone from our backups within 30 days. Order records are kept as long as tax law requires.

11. Your choices

You can see and correct what you added at any time, download everything from your tin, and delete any recipe, photo, tin, or your whole account. You can also write to us to ask what we hold about you, to correct it, or to delete it; we answer within 30 days. We do this for everyone, wherever you live. If you live in a place whose law gives you more rights, such as the European Union or the United Kingdom, you have those too, including the right to complain to your data protection authority. We use your information because you asked us to provide Tinfully (our contract with you), and for emails you did not ask for, only with your consent.

12. Children

Tinfully is for adults; you must be 18 to have an account. We do not knowingly collect information from children under 13. Photos of children are often part of a family's history, and adults may add them to a private tin. If you believe a child has an account, or a parent wants a photo of their child removed, write to us and we will take care of it.

13. Keeping it safe

Everything travels encrypted, your photos are kept in private storage that only signed-in members of the tin can reach, and only KEYPOPPY can see the systems behind Tinfully. No system is perfect; if your information is ever exposed, we will tell you, and the authorities, as the law requires.

14. Changes to this policy

If this policy changes in a way that matters, we will tell you in Tinfully or by email before the change takes effect. A new use of what you have already uploaded will always ask you first. The date at the top shows when it last changed.

KEYPOPPY · Mars, Pennsylvania 16046 · support@tinfully.com · Terms of use