Privacy & safety
A surprise is personal. It should stay that way.
Here is exactly what happens to your link, your photos and your voice.
Your surprise link is unlisted
A surprise is reachable only by the link you share. Links are not indexed by search engines, never appear in a public sitemap, and are not listed anywhere on the site. Nobody can find one by guessing.
Photos and voice stay private
Your media is stored in private storage, never in a public folder. It is delivered to the recipient through short-lived access that expires — not through a permanent public URL.
Camera and location data is removed
Before a photo is stored, embedded EXIF metadata — including GPS coordinates, device details and timestamps — is stripped. Photos are also resized for fast loading on mobile data.
Optional PIN on Premium
If a surprise is only for one person's eyes, Premium lets you set a PIN. Even someone holding the link cannot open it without the PIN you shared separately.
Links expire on purpose
Standard links stay active about 7 days and Premium about 30 days. Expiry is calculated on our servers and cannot be extended from a browser.
Deletion is real
When you delete a surprise, the viewer link is blocked first, then the stored photos, voice note and generated versions are removed, then the database records are cleaned up and the removal is verified. You are not shown a success message before the work has actually finished.
The recipient has a way out
Every surprise carries a discreet option for the recipient to report it or request its removal. Unwanted contact is not something we make people negotiate over WhatsApp.
What we never do
We do not sell your data, do not use your photos or voice for advertising, and do not show your media to anyone who was not given your link.
Read the full privacy policy, terms and removal & complaints process, written for India, the US and the UK. See how it works.