Is it safe to upload student photos? Yes.
SchoolMorph is built with student safeguarding as a priority. Every photo is stored in private, encrypted storage in Sydney, Australia, accessed only through time-limited signed URLs, and automatically deleted 30 days after your ceremony. No student photo is ever used for AI training or analytics. Here is exactly how we protect your students' data.
Private storage with enterprise-grade controls
Every photo you upload is stored in a private bucket on infrastructure certified to SOC 2 Type II and ISO 27001. Photos are never publicly accessible. When your browser needs to display a photo, it uses a time-limited signed URL that expires within minutes. Row-level security controls ensure one project can never see another's data, even for an authenticated user.
Automatic deletion 30 days after your ceremony
All uploaded photos and generated video files are automatically deleted 30 days after your ceremony date. You can also request immediate deletion at any time by emailing us. SchoolMorph does not retain student photos beyond what is needed to deliver your video.
Photos used only to make your video
To blend the two photos smoothly, our software locates reference points on each image (such as eye corners) just long enough to align them, then discards those coordinates. Nothing is stored, nothing is matched against any database, and nothing is used to identify anyone. SchoolMorph does not perform facial recognition. The only output is your morph video.
No AI training, no analytics, no advertising
Schools and parents own their photos. We will never sell them, train AI on them, or use them to advertise. Student photos are used for one purpose only: generating your morph video. This is a firm commitment, not a policy that might change.
Student photos never leave Australia
All photos and generated videos are stored on servers located in Sydney, Australia (AWS region ap-southeast-2, provided by Supabase). The service that generates each morph runs in the same Sydney region on Fly.io. For Australian schools, no student photo or student record is ever transferred overseas. Transactional email and (in future) payment processing involve overseas vendors, but those services never receive student photos. See our full sub-processor list for details.
Show this page to parents
If parents have questions about how their child's photos are handled, feel free to share this page with them directly. We wrote it in plain language so that anyone can understand exactly what happens to every photo.
Request data deletion
If you need photos deleted before the 30-day automatic deletion period, email us at schoolmorphing@gmail.com and we will process your request within one business day.
For schools conducting a vendor review: see our full sub-processor list.
Ready to create your leavers ceremony video? See how it works or get in touch.