Privacy policy

Last updated: 9 October 2026

In short: your photos are used only to make your film. We never use them to train AI, never redraw them with generative AI and never make them public. Photos, music you uploaded and films are deleted automatically 90 days after the final film is delivered; unfinished films are deleted 90 days after their last change.

Dear Ever ("we") handles personal data in accordance with Hong Kong's Personal Data (Privacy) Ordinance. This policy explains what we collect and how we use and keep it.

1. What we collect

The couple's names in English or Chinese, for the opening title.
The photos you upload, and any music you choose to upload.
Account details: your email address and, if you sign in with Google, the name Google provides. Used for sign-in, contact and delivery.
Order records: amount, payment and refund status, and the film content at the time of payment. Payments are handled by Stripe; we never receive or store your card number.

2. How we use it

We use the film and contact information above to create and deliver your film and to answer your questions. Optional visit-source records are used only to understand which channels lead to sign-ups and orders.

3. Our commitments

We never use your photos to train any AI model.
We never redraw or alter the people or content in your photos with generative AI.
We never make your photos or film public, or use them for promotion, without your written consent.

4. Retention and deletion

We automatically delete your photos, uploaded music and film 90 days after delivering the final film; unpaid or unfinished films are deleted automatically 90 days after their last change. You can delete a film at any time in My films (immediately, with no undo) or ask us by email. Order and payment records are kept as Hong Kong law requires (business records for 7 years); they do not include photos, music or films.

We never sell your personal data. We share it only with suppliers essential to the service, and only as far as the service requires:

Cloudflare: website hosting and delivery.
Supabase: accounts, sign-in and film data (stored in Singapore).
Amazon Web Services: storing and producing photos, music and films (Singapore).
Stripe: payments and refunds.
Resend: sign-in codes and delivery emails.
Google: only if you choose to sign in with Google.

Your data may therefore be stored or processed outside Hong Kong; we choose only suppliers that commit to protecting it.

6. Website tracking

When you sign in, we keep your sign-in in this browser’s local storage so you stay signed in; signing out clears it. This is needed for your account and is not used for tracking.

With your permission, we save the first campaign link’s source, medium, campaign and content labels in this browser for up to 90 days. We do not collect full URLs or place names or email addresses in these labels. After sign-in, the source is linked to your account in Supabase and copied to an order when it is created. Later visits do not replace the first source. You can decline without affecting the service. Use “Visit source preference” in the footer to stop recording and clear this browser; when signed in, we also request removal of the account and order source records. If signed out, this request is sent after your next sign-in. You can also contact us to request deletion. We do not send these records to a third-party analytics service. Website analytics such as PostHog remain disabled.

7. Access and correction

You have the right to access and correct the personal data we hold about you. Email info@dearever.cc.

8. Changes to this policy

We may update this policy from time to time and will publish the updated version on this page with its date.