From the first upload to the moment a photo is deleted on schedule, every step exists to keep families in control and schools accountable.
Drag a whole event's worth of photos in at once. Tag the pupils in each one from a live search of your roster, and every tagged family is notified automatically — no separate step, no forgetting who to tell.
Parents get a plain-language explanation before they decide, and can approve or decline right from the email link. A single decline removes the photo for every family in it — not just theirs — instantly and permanently.
Before consent, every family sees a small, clearly watermarked version only — never the real file.
A forensic mark unique to each viewer is embedded in every copy — if a photo turns up somewhere it shouldn't, we can trace exactly whose copy it was.
Staff can download a whole album at once; parents can download an album once every photo in it is fully consented — split automatically into manageable zip files by email.
Set how long photos are kept — school-wide or per album — and they're permanently deleted on schedule, with reminders sent before anything not yet downloaded disappears.
We're a Wonde partner, so your pupil roster and parent links stay up to date automatically, keeping tagging in sync with who's actually on the register.
Your own school logo on the sign-in screen, and shareable login links for staff, parents, and pupils.
Parents can raise access, correction, or right-to-be-forgotten requests right from their own portal, and every account starts with a clear Privacy Policy and Terms of Service they actively accept.
Not on Wonde? Import and keep your pupil roster up to date with a simple CSV upload instead — no MIS connection required.
Start a free trial and have your first album live in minutes.