What we collect, what we don't, and how to make us delete it.

We collect three categories of information:

• Photos you upload. Two facial photographs you submit so the Service can compose a generated portrait.
• Account and contact data. The email address you provide so we can save your reveal and send a small number of transactional and follow-up messages.
• Technical data. Standard server logs (IP address truncated and hashed, user-agent string, referrer, timestamps) used solely for abuse prevention and uptime monitoring. Payment information is collected and stored exclusively by our payment processor — we never see or store full card numbers.

Photos you upload are used exclusively to generate the reveal you requested. They are transmitted over TLS, stored encrypted at rest, processed by automated face-merge and age-progression models running on third-party infrastructure (Replicate, Inc.), and then retained for thirty (30) days from the date of generation to permit you to revisit and download your reveal.

After thirty days, your source photos are automatically and irreversibly deleted from our active database. Generated baby images are also deleted unless you explicitly save them by purchasing the Pro Pack, in which case the link remains valid for as long as your account exists.

We do not use any of your photos to train, tune, fine-tune, or evaluate any machine-learning model, ours or anyone else's. We do not sell or share your photos with third parties for marketing or research purposes. We do not provide your photos to any party other than the technical providers strictly necessary to render the output you asked us to render.

When you submit your email at the gate, we use it to (a) send a transactional welcome with your reveal link, (b) send a limited sequence of follow-up messages reminding you of the unlocked four ages and the photo-deletion deadline, and (c) deliver receipts and account-related notices after purchase. The complete sequence is at most six (6) messages over fourteen (14) days, and you can opt out of further marketing at any time using the unsubscribe link in every non-transactional message.

Transactional emails (receipts, deletion notices, security notices) are sent regardless of marketing preferences, as required to provide the Service.

We share the minimum data necessary with the following providers:

• Vercel, Inc. — hosting and edge delivery.
• Neon, Inc. — managed PostgreSQL database.
• Replicate, Inc. — ML inference for face-merge and age progression.
• Resend, Inc. — transactional and follow-up email delivery.
• Stripe, Inc. — payment processing.

Each processor is bound by its own privacy and security commitments. We do not authorize them to use your data for any purpose beyond providing services to us.

Depending on where you reside, you may have the right to access, correct, port, restrict, or erase the data we hold about you, and to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, write to privacy@ourbaby.app. We will respond within thirty (30) days. If your request would prevent us from providing the Service (for example, deleting your photos before generation completes), we will explain that constraint when we acknowledge your request.

Residents of California: we do not sell your personal information, as the term is defined under the California Consumer Privacy Act (CCPA), and we have not done so in the preceding twelve (12) months.

The Service is not directed to, and we do not knowingly collect information from, individuals under the age of eighteen (18). You may only upload photographs of yourself and other adults who have given you permission to do so. If you believe a minor has submitted information through the Service, contact us at privacy@ourbaby.app and we will delete the data promptly.

We use TLS in transit, encryption at rest, password hashing, principle-of-least-privilege access controls, and routine third-party security review. No system is perfectly secure; we make no warranty that unauthorized access will never occur. We commit to notifying affected users without undue delay if we become aware of a breach materially affecting their data.

Our servers are located in the United States and the European Union, depending on the edge region serving your request. By using the Service from outside these regions, you consent to your data being transferred to and processed in them. We rely on standard contractual clauses (SCCs) and equivalent safeguards with providers that transfer data internationally.

We may update this Privacy Policy from time to time. The “Effective” date at the top reflects the most recent revision. We will notify registered users by email when a change materially alters how we handle their data.

Questions, requests, or complaints about this Privacy Policy:

OurBaby LLC
Attn: Privacy Officer
30 N Gould St, Ste R, Sheridan, WY 82801, United States
privacy@ourbaby.app