Privacy Policy
Last updated: 20 October 2026
1. Who we are
OneTakeKid (onetakekid.com) makes school-interview portraits of children from a photo their parent uploads. OneTakeKid ("we") is the data user of your personal data under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. Questions or requests: hello@onetakekid.com
2. What we collect
Your account: your email address. If you sign in with Google, also the name and profile picture Google shares with us. Your child's photos: the photos you upload and the portraits we make from them. Your choices: your child's age group and the backgrounds, outfits, expressions and poses you pick. Orders: what you bought, the amount and the payment status. Card details are handled by our payment provider, Airwallex. We never see or store your full card number. Messages you send us. Error reports: the page, browser type and time when something goes wrong, so we can fix it. How you use the site: the pages you open, the site or poster that brought you here, your device and browser type, and your rough location (city or country). On our public pages, also clicks, taps and scrolling. We do not link this to your name or email.
3. Why we use it
To make the photos you order and show you previews. To run your account and sign you in. To take payment and send order emails, such as "your photos are ready" and reminders before photos are deleted. To answer your questions. To prevent misuse, for example to check that two uploaded photos show the same child. To see how visitors use the site, so we can make it easier to use. To meet our legal duties. We only send you marketing emails if you agree to them, and you can stop them at any time.
4. Your child's photos
Only a parent or legal guardian may upload a child's photo, and you confirm this before you start. We use the photos only to make the portraits you ordered. To check that two photos show the same child, and how closely a finished portrait looks like your child, our system compares facial features automatically. The features are worked out in memory and not stored; we keep only one similarity number per portrait. We never use your photos to train any AI model, never sell them, and never use them in our marketing without your separate written permission.
5. Who processes your data for us
We use these service providers. Some are outside Hong Kong, so your data may be transferred abroad. They may use the data only to provide their service to us. Vercel: runs our website (Singapore). Supabase: database and sign-in (Singapore). Cloudflare R2: private storage for photos. fal.ai: makes the portraits with AI (United States). We switch off its storage of your photo, and its copy of each result is deleted after one hour. Airwallex: takes payments. Resend: sends our emails (United States). Purelymail: our mailbox. It receives and stores the emails you send us. Google: only if you choose to sign in with Google. Google Analytics: counts visits and the pages used (United States). It does not receive your name, email or photos. Microsoft Clarity: records clicks, taps and scrolling on our public pages only (home, styles, pricing and help pages), never on your account, upload or gallery pages, so we can see where the site is hard to use (United States). It does not receive your name, email or photos.
6. How long we keep it
Photos not bought: your uploaded photos and previews are deleted 14 days after they are made. Photos bought: your child's photo and the finished portraits are kept for 90 days after the order, so you can download them again, then deleted permanently. We email you before they are deleted. Account details: kept while your account is open. Order and payment records: kept as long as Hong Kong law requires for business records (generally 7 years). They do not include photos. Error reports: deleted after 30 days. Visit statistics: kept by Google Analytics and Microsoft Clarity for up to 14 months, then deleted.
7. How we protect it
Data travels over encrypted connections (HTTPS). The photos we store are kept in private storage, and your gallery is shown only after you sign in. Only the few people who run the service can reach the data, and only when needed.
8. Your rights
You can ask to see the personal data we hold about you and to correct it. We will reply within 40 days, as the Ordinance requires. You can ask us to delete your account, photos and portraits at any time. You can stop marketing emails at any time. Write to hello@onetakekid.com.
9. Cookies and browser storage
What the site needs to work: a cookie that keeps you signed in, one that remembers your language, and browser storage that remembers a referral code you opened. Statistics cookies: Google Analytics (every page except our staff pages) and Microsoft Clarity (public pages only) use cookies to count visits and to tell a new visit from a return visit. We do not use advertising cookies, and we do not sell your data. To stop the statistics cookies, block them in your browser settings or use Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
10. Changes
If we change this policy, we update this page and its date. If the change is important, we also tell you by email.