Legal

Privacy Policy

Last updated 11 October 2026

Safeguard Vision helps schools, nurseries and clubs share photos without identifying the people in them. This policy explains what personal data we handle, why, who helps us, and how long we keep it. The short version: we use your photos only to anonymise them, we delete them automatically after 48 hours (or 7 days if you choose), and we never use them to train AI.

1. Who we are

Safeguard Vision is a product of WebDawson, a UK business. For anything in this policy, or to exercise your rights, email hello@safeguard-vision.com.

2. Two roles: your account, and your photos

Your account. For your sign-in, purchases and how you use the website, we are the controller of your personal data.

The photos you upload.The people in your photos — often children — are your organisation's data subjects. For those photos you (or your organisation) are the controller and we are your processor: we only process them on your instructions, to anonymise them. Our obligations as your processor are set out in section 6 of our terms. Questions from the people in your photos should go to your organisation first; we'll help you answer them.

3. What we collect

  • Account details — your email address, and whether you agreed to occasional product emails.
  • Purchases — which packs you bought, when, and the amounts. Stripe handles your card; we never see or store card details.
  • Your agreement to our upload checklist — the wording you agreed to, when, your IP address and browser, so your organisation can show who confirmed they had the right to use the photos.
  • Photos — the photos you upload and the anonymised versions.
  • Job records — for each photo: when it was processed, its file name, how many faces were found and changed, where those faces were (box coordinates), and the result, including why a photo was refused. These records contain no images.
  • Usage data — basic analytics and logs about how the website is used.

4. How your photos are handled

  • Finding faces usually happens on your device.When you add a photo, faces are found in your browser. If your browser can't do this, the photo is sent to a face-finding model run by Replicate instead. Before uploading, your browser redraws the photo, which removes hidden information such as its GPS location.
  • Uploads are stored privatelyand are only reachable through short-lived links created for your account. A photo uploads as soon as you add it, so it's ready when you press anonymise.
  • Content checks.Before anything is anonymised, each photo is checked automatically for explicit or graphic content by OpenAI's moderation service. Photos that fail are refused.
  • Anonymising.The parts of the photo around the faces you chose are sent to an AI image model (Google's Gemini model, run by Replicate), which draws new faces. Only the faces you chose are put back into your photo.
  • No training.We never use your photos to train AI. Our AI providers process them under API terms that don't allow them to use your photos to train their models.
  • Deletion. Every file we store for you — originals, anonymised photos and everything in between — is deleted automatically 48 hours after it was stored, or after 7 days if you choose that in History. The clean-up runs every hour, so a file can last up to an hour longer. If your account is deleted, its photos are deleted at the next clean-up. Our AI and moderation providers may keep what they receive for a limited period for security and abuse monitoring under their own terms (OpenAI: up to 30 days).

5. Why we use your data (legal bases)

  • To provide the service you asked for — your account, purchases, and anonymising your photos (contract).
  • To keep the service safe — content checks, usage limits, preventing abuse of the free photos and keeping records of what was done (legitimate interests, and legal obligations where they apply).
  • Accounts and tax — keeping records of purchases (legal obligation).
  • Product emails and analytics cookies — only with your consent, which you can withdraw at any time.

6. Who helps us (sub-processors)

We use these providers, each under written terms that protect your data. We don't sell personal data, and we'll update this list before adding a provider that handles your photos.

  • Supabase — Database, sign-in and photo storage. (Ireland (EU))
  • Vercel — Hosts the website and app (functions run in London). (UK, with global edge network)
  • Replicate (running Google's Gemini 2.5 Flash Image model, “nano-banana”) — Anonymises the faces you choose, and finds faces when your browser can’t. (USA)
  • OpenAI — Automatic content checks on uploads. (USA)
  • Stripe — Payments and receipts. (UK/EU and USA)
  • Resend — Sign-in and account emails. (USA)
  • Google Analytics — Website usage statistics, only if you accept analytics cookies. (USA)
  • LinkedIn — Measuring our LinkedIn adverts, only if you accept analytics cookies. (Ireland and USA)

7. International transfers

Some providers above process data in the USA. Where they do, we rely on the UK's adequacy arrangements (the UK–US data bridge) for providers certified under it, or on the UK International Data Transfer Addendum to the EU standard contractual clauses.

8. How long we keep it

  • Photos: 48 hours after each file is stored, or 7 days if you choose — then deleted automatically.
  • Job records and checklist agreements (no images): while your account is open. They're deleted with your account.
  • Purchase records: 6 years, as UK tax law requires.
  • A log of sign-in emails we've sent (the address and time), used to stop abuse: 1 day, then deleted automatically.
  • Your account: until you ask us to delete it. Email hello@safeguard-vision.com from the address on the account.
  • A record that an email address has used its free photos is kept as a one-way fingerprint (not the email itself) so the free photos can only be claimed once.

9. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to how we use it, to take a copy of it, and to withdraw consent at any time. Email hello@safeguard-vision.com. You can also complain to the Information Commission (ico.org.uk), which replaced the Information Commissioner's Office on 30 September 2026. For photos you uploaded for an organisation, requests from the people pictured go to that organisation, and we'll help it respond.

10. Cookies

We use cookies that are essential for signing in and keeping you signed in. With your consent, we also use Google Analytics and the LinkedIn Insight tag to understand how the website is used and how our adverts perform. Nothing optional loads until you choose “Accept”, and you can change your mind any time with “Cookie settings” at the bottom of every page.

11. Children

Safeguard Vision is for adults and organisations; we don't provide accounts to children. Photos of children are uploaded by the organisations responsible for them, which act as controller for those photos (see section 2).

12. Changes

We'll post any changes here and update the date above. If a change affects how we handle your photos, we'll tell you before it takes effect.