Privacy Notice
Stories by Annaliz is a family photography experience operated by Careryn LLC and presented in connection with Annaliz Photography.
This Privacy Notice explains how we collect, use, disclose, store, retain, and otherwise handle personal information when you:
- Visit StoriesByAnnaliz.com
- Apply for The First Year
- Join or participate in a Stories by Annaliz photography experience
- Use a Stories by Annaliz account or member portal
- View or download private galleries
- Contact support
- Make or receive payments, refunds, or credits
- Submit privacy, accessibility, cancellation, or other service requests
- Choose whether identifiable family photographs or testimonials may be used publicly
1. Who is responsible for your information
Stories by Annaliz is operated by:
Careryn LLC Maryland, United States
For privacy questions or requests, contact:
Privacy / Support Email: [email protected]
No public home address or personal phone number is published for Version 1.0.
2. Information we collect
The information we collect depends on how you interact with Stories by Annaliz.
A. Contact and identity information
We may collect:
- Name
- Email address
- Phone number
- Account identity
- Relationship to a child or household
- Parent or guardian authority where relevant
- Preferred contact information
We do not need a legal name for every child merely to provide photography services if a preferred name is sufficient for the relevant experience.
B. Application information
When you apply for The First Year, we may collect:
- Whether you are expecting or your baby has already arrived
- Expected due date
- Baby's birth date, when already born
- Child's preferred name, if provided
- Whether you are expecting or parenting multiples
- ZIP code
- General location
- Preferred start timing
- Scheduling windows
- Whether weekend availability is essential
- Household-participation information
- Practical accommodation needs
- How you heard about Stories by Annaliz
- Offer acknowledgments
- Application status and review history
We ask customers not to submit unnecessary medical details.
If a medical or family circumstance affects timing, a brief practical explanation is generally enough unless additional information is genuinely necessary to resolve the request.
C. Family and household information
If you become a customer, we may collect information needed to provide the service, such as:
- Service address
- Parking or access instructions
- Authorized household adults
- Children included in the membership
- Family relationships relevant to the photography session
- Preferred names
- Contact preferences
- Session preferences
- Comfort boundaries
- Information about other household participants
- Practical accessibility or accommodation needs
We try to limit photographer and editor access to information they actually need for their work.
D. Appointment and service information
We may collect and create records concerning:
- Planned chapters
- Appointment proposals
- Confirmed appointments
- Rescheduling requests
- Photographer assignments
- Session outcomes
- Pauses
- Completion visits
- Reshoots
- Service-period changes
- Cancellations
- Relocation
- Hardship accommodations
- Final collection preferences
- Support cases and remedies
A payment record, photography appointment, chapter, and gallery are maintained as separate service records rather than being treated as the same event.
E. Photographs, video files, and image-related information
Stories by Annaliz is a photography service.
We may collect, create, store, and process:
- RAW photographs
- Edited photographs
- Preview images
- Gallery images
- Image metadata
- Thumbnails
- Collection-design files
- Digital First Year book files
- Photographic slideshow files
- Download archives
- Captions or image notes
- Quality-review information
- Asset-rights and permission records
Private family photographs are not intended to be publicly indexed as customer galleries.
F. Payment and transaction information
We may collect or receive:
- Payment-provider customer identifiers
- Payment-method status
- Transaction amounts
- Installment number
- Payment status
- Payment attempt status
- Refunds
- Credits
- Approved adjustments
- Dispute information
- Payment timestamps
- Provider transaction references
Stories by Annaliz does not intend to store raw card numbers or card security codes in its own application.
Payment-card information should be collected through the approved payment provider.
G. Account and security information
We may collect:
- Login and account status
- Email-verification status
- Authentication and recovery events
- Authorized-adult invitations
- Session information
- Security events
- Access history
- Role or permission information
- Suspicious-access or abuse indicators
Privileged staff may be required to use stronger authentication.
H. Communications and support information
We may retain:
- Emails
- Support messages
- Scheduling communications
- Complaint or correction requests
- Privacy requests
- Accessibility requests
- Cancellation requests
- Refund communications
- Account-security communications
- Notification delivery status
Important account and service changes should be documented rather than existing only in informal personal messages.
I. Permissions and marketing preferences
We may record separate choices concerning:
- Portfolio or editorial website use
- Organic social-media use
- Paid advertising use
- Testimonial use
- Name or attribution preferences
- Marketing-email preferences
- Future revocations or changes to those choices
A customer's private photography service is separate from public-image permission.
Declining public-image use does not change the membership price or standard service.
J. Website, device, and usage information
When you use the website, we may receive technical information such as:
- IP address
- Browser type
- Device type
- Operating system
- Page requests
- Approximate network or regional information
- Security logs
- Error information
- Referral or campaign information
- Cookie or session identifiers required for website functionality
Optional advertising or behavioral tracking should not be treated as necessary for private member, gallery, payment, or application-answer pages.
3. How we collect information
We may collect information:
- Directly from you
- From another authorized adult in your household
- From a parent or guardian
- From a photographer fulfilling an assigned session
- From an editor or quality reviewer working on your photographs
- From our payment provider
- From website and hosting systems
- From support and email systems
- From security and authentication systems
- From approved analytics or attribution tools, when used
- From information you choose to provide through an application, account, form, or support request
We do not treat information supplied by one adult as automatic authority for every other adult's public-image or account-access decisions.
4. Why we use information
We use personal information to operate Stories by Annaliz.
This includes purposes such as:
Applications and qualification
- Receive applications
- Verify contact information
- Review timing and serviceability
- Determine capacity
- Request additional information
- Manage waitlists
- Invite approved families to continue
Onboarding and customer accounts
- Create and secure accounts
- Verify authorized adults
- Confirm the service address
- Present accepted offers and agreements
- Record acknowledgments
- Set up the family experience
Photography service
- Plan the twelve chapters
- Schedule sessions
- Assign photographers
- Provide necessary family context
- Photograph sessions
- Ingest and back up image files
- Edit and quality-review photographs
- Deliver galleries
- Produce the final First Year Collection
Payments
- Set up the finite twelve-payment plan
- Process payments
- Handle failed payments
- Record refunds and credits
- Reconcile cancellations
- Respond to disputes
- Maintain financial records
Customer support
- Respond to questions
- Process scheduling changes
- Manage pauses and hardship
- Process cancellation requests
- Handle gallery corrections
- Resolve service issues
- Provide accessibility assistance
Privacy and permissions
- Record public-image choices
- Process revocations
- Manage private-gallery access
- Respond to privacy requests
- Maintain asset-use evidence
Security and reliability
- Authenticate accounts
- Prevent unauthorized access
- Detect abuse
- Protect private galleries
- Investigate incidents
- Maintain backups
- Monitor system health
Communications
- Send application updates
- Send appointment notices
- Send payment notices
- Send gallery notifications
- Send support updates
- Send cancellation or refund confirmations
- Send security notices
- Send optional marketing only according to the applicable preference
5. Photographers, editors, and access to family information
Stories by Annaliz is designed so photographers do not need access to the family's entire account.
A photographer may receive information reasonably necessary to perform an assigned session, such as:
- Family name
- Service address
- Appointment time
- Access or parking instructions
- Baby's relevant stage
- Family context needed for the session
- Comfort or photography preferences
- Selected visual references
- Upload requirements
Photographers should not receive routine access to:
- Full payment history
- Payment-card data
- Cancellation settlements
- Unrelated household records
- Unrelated galleries
- Private support disputes that are not necessary for the session
Editors and reviewers should receive only the image files, references, and production information needed for their assigned work.
6. How we disclose information
We may disclose information to service providers and people who help us operate the service.
Depending on the function, these may include:
- Assigned photographers
- Editors
- Quality reviewers
- Payment processors
- Email-delivery providers
- Hosting providers
- Cloud storage providers
- Content-delivery providers
- Authentication or security providers
- Backup providers
- Technical support and monitoring providers
- Approved analytics or attribution providers
- Other vendors needed to provide an active customer feature
We expect service providers to receive only the information reasonably needed for their role.
We may also disclose information when reasonably necessary to:
- Protect the security of an account or system
- Investigate fraud or misuse
- Respond to a valid legal requirement
- Protect the rights, safety, or property of Careryn LLC, a customer, a child, a photographer, or another person
We do not sell private family photographs as a data product.
7. Payment information
Payment-card information should be collected directly through the approved payment provider.
Stories by Annaliz may receive transaction status and identifiers necessary to administer the membership.
The application should not store:
- Full card numbers
- Card security codes
A saved payment method, payment authorization, pending payment, and completed payment are separate states.
8. Private galleries and downloads
Membership galleries are private by default.
We use access controls intended to limit gallery access to authorized users.
Gallery or download links may expire or require authentication.
Revoking access can stop future authorized access, but it cannot technically recall a photograph that an authorized person has already downloaded or copied.
Customers are encouraged to maintain their own copies of delivered high-resolution photographs.
9. Copyright, personal-use rights, and public image use
Careryn LLC owns or obtains the copyright rights required for Stories by Annaliz photography through its photographer agreements.
Customers receive the personal-use and print rights described in the applicable customer agreement.
Copyright ownership is separate from the public use of an identifiable person's likeness.
Private gallery delivery does not automatically make an image a public marketing asset.
Stories by Annaliz maintains separate permissions for public uses such as:
- Portfolio/editorial website use
- Organic social-media use
- Paid advertising use
- Testimonial use
The applicable Permissions and Model Release describes those choices in more detail.
10. Children's information
The First Year necessarily involves information about babies and children.
We collect child information primarily from a parent, guardian, or authorized adult for the purpose of providing the photography service.
Version 1.0 does not provide child login accounts or public child-profile pages.
We do not need children to interact directly with the website as independent account holders.
Information concerning a child may include:
- Preferred name
- Due date or birth date
- Membership relationship
- Photographs
- Session information
- Family context needed for the service
- Permission records
We try to limit public identifying details concerning children.
11. Sensitive family circumstances
Stories by Annaliz may sometimes learn about sensitive circumstances because they affect scheduling or service.
Examples may include:
- Premature birth
- Extended hospitalization
- Pregnancy loss
- Infant loss
- Serious family hardship
We aim to collect only the information reasonably necessary to provide an accommodation or resolve the service issue.
A family should not be required to disclose detailed medical information merely to request compassionate treatment.
When a serious hardship is recorded, ordinary milestone or promotional communications may be suppressed where appropriate.
12. Public photographs and testimonials
A family may choose whether certain identifiable photographs, testimonials, names, or approved details may be used publicly.
Those choices are recorded separately.
Permission may be limited by:
- Person
- Photograph
- Session
- Membership
- Use category
- Attribution
- Duration
- Revocation
A general service agreement should not be treated as blanket public-advertising permission.
13. Artificial intelligence and image processing
Family photographs are not authorized for AI-model training without a separate, explicit permission specifically covering that purpose.
Stories by Annaliz may use approved software or services to assist with ordinary photography production, such as:
- Culling
- Editing
- Color correction
- Cropping
- Export
- File organization
Before client files are supplied to an external image-processing or AI-assisted service, the business should review the provider's actual data-use practices and configuration.
The core photography service should remain usable even if an optional AI feature is not enabled.
14. Cookies and similar technologies
The website may use cookies or similar technologies necessary for:
- Login
- Security
- Session continuity
- Application progress
- User preferences
- Fraud prevention
- Website functionality
Optional analytics or advertising technologies may be used only when enabled under the applicable Stories by Annaliz configuration and consent approach.
Private galleries, member pages, payment pages, and application-answer pages should not be treated as advertising-data sources by default.
15. Analytics and campaign attribution
Stories by Annaliz may measure business events such as:
- Application started
- Application submitted
- Application approved
- Membership activated
- Payment settled
- Chapter delivered
- Collection delivered
- Cancellation received
- Refund completed
Analytics events should avoid sending unnecessary family information.
Names, emails, phone numbers, child birth dates, due dates, addresses, private images, private captions, signed gallery links, and application free-text answers should not be placed in ordinary advertising analytics payloads.
16. Marketing communications
Optional marketing communications are separate from service communications.
If you opt out of marketing, we may still send messages reasonably necessary to administer:
- Your application
- Account security
- Appointments
- Membership
- Payments
- Galleries
- Support requests
- Privacy requests
- Cancellations
- Refunds
- Final collection
Public-image permission does not create marketing-email consent.
Marketing consent does not create public-image permission.
17. Retention
Different information is retained for different periods.
Delivered galleries
Delivered galleries are intended to remain available throughout the membership and for at least 12 months after completion or cancellation.
Continued access may be offered longer, but Version 1.0 does not promise lifetime hosting.
Final edited files
Final edited files are retained for at least the promised gallery-access period.
RAW files
RAW files are retained for at least 90 days after the applicable gallery is delivered.
They may be kept longer when:
- A correction is pending
- A dispute is open
- A quality issue is unresolved
- A reshoot or remedy is being reviewed
- Another documented hold applies
Account, agreement, support, and financial records
These may be retained for periods reasonably necessary to:
- Administer the service
- Preserve the agreement and offer actually accepted
- Maintain payment and refund records
- Resolve disputes or support cases
- Protect account security
- Maintain required business records
- Comply with applicable obligations
Deletion of an account does not necessarily require immediate deletion of every financial, agreement, security, or dispute record.
18. Backups and deletion
Some information may exist in operational backups for a period after it is removed from active systems.
Stories by Annaliz should use reviewable deletion and retention processes rather than promise that every backup copy can be erased instantly.
A deletion request may result in information being:
- Deleted
- De-identified
- Restricted
- Retained temporarily because of an active issue
- Retained where another legitimate record obligation remains
19. Your choices and requests
You may contact us to request assistance concerning personal information associated with your Stories by Annaliz relationship.
Depending on the request and the information involved, this may include:
- Access
- Correction
- Updating contact details
- Updating household access
- Updating marketing preferences
- Changing public-image permissions
- Requesting deletion
- Requesting an export
- Revoking a permission
- Reporting unauthorized access
We may need to verify your identity and authority before acting on a request.
A request concerning a child's information may require verification of parent or guardian authority.
Some information may need to be retained because of:
- Payment records
- Refunds
- Disputes
- Security
- Agreement history
- Another authorized adult's legitimate access
- An unresolved service issue
- Applicable recordkeeping requirements
20. Public-image revocation
If you revoke a public-image permission, Stories by Annaliz will process the request prospectively under the active Permissions and Model Release.
That may include:
- Blocking new public use
- Removing controlled website placements
- Stopping future scheduled posts
- Stopping future advertising uses
- Recording the revocation in the asset-rights record
We cannot promise universal deletion from:
- Copies already downloaded by others
- Screenshots
- Previously distributed printed materials
- Third-party resharing
- Search-engine caches
- Platform caches outside our immediate control
21. Security
Stories by Annaliz uses administrative and technical measures intended to protect private customer information and photographs.
Version 1.0 security practices are intended to include:
- Secure transport
- Account authentication
- Restricted staff access
- Role-based access
- Private image storage
- Time-limited or authenticated downloads where appropriate
- Backup and integrity checks
- Security logging
- Staff access revocation
- Redaction of sensitive information from routine logs where practical
No online system can guarantee absolute security.
If we identify a material security issue, we will work to contain it, investigate it, and take appropriate follow-up action.
22. Third-party services
Stories by Annaliz relies on third-party systems to operate some parts of the service.
These may include services for:
- Payments
- Hosting
- Cloud storage
- Authentication
- Monitoring
- Image processing
- Gallery delivery
- Maps or directions
- Analytics
A third-party provider may process information under its own privacy and security practices as well as its agreement with Careryn LLC.
We should choose providers appropriate for the information and function involved.
23. International processing
Some service providers may process or store information in locations outside the state where a customer lives.
When a provider is used, Stories by Annaliz should configure and use that provider in a manner appropriate to the information being processed and the service being delivered.
24. Accessibility and privacy
You do not need to disclose a disability or medical diagnosis to request accessibility assistance.
If you need help making a privacy request, accessing your account, downloading your photographs, or using another customer feature because of an accessibility barrier, you may contact the same monitored support channel.
25. Changes to this Privacy Notice
Stories by Annaliz may update this Privacy Notice as the service, technology, vendors, or information practices evolve.
Each material version should include:
- Version
- Effective date
- Last-updated date
- Approval ID
Material changes should be published as a new version rather than silently rewriting historical records associated with earlier customer activity.
Where a new practice requires separate permission or affirmative acceptance, updating this notice alone should not be treated as that permission.
26. Contact
For privacy questions or requests:
Stories by Annaliz A family photography experience by Annaliz Photography Operated by Careryn LLC Maryland
Privacy / Support Email: [email protected]
We aim to acknowledge ordinary customer and privacy-support messages within one business day.
27. Versioning
This is Version 1.0 of the Stories by Annaliz Privacy Notice.
The notice should evolve through versioned updates as the business learns and the platform develops.
