Privacy Policy

Who we are

BabyMeetsYou is the brand. The configured hostname is babymeetsyou.com. Mail for privacy requests goes to the owner address in the site configuration. Canonical links follow that configuration's origin.

This policy is written for visitors in the United States and for people in the European Economic Area and the United Kingdom. It is not a promise that a lawyer has reviewed a live company, because no company account is created from this repository.

Photos and face data

A run needs two photos. We store those files only so the job can finish. The bytes sit in object storage, and the database keeps a key. When the run succeeds or fails, we delete the upload. We do not keep a copy for training.

We do not create or store biometric identifiers or biometric information. In particular, we do not build a faceprint, a geometry template, or any other identifier that Illinois BIPA treats as biometric. We do not sell photos and we do not use them to recognize people later.

If a generation key is configured, the photos are sent to the model host (fal.ai, using a Google image model, with a fallback model) for the single purpose of making the portraits. We ask that host for a direct response and we do not add our own face-recognition step. We do not control that host’s short-lived operational logs.

Other data

An account stores an email address and a credit balance. Payments are handled by Stripe. We store the pack id, the amount, and the event id so a webhook can be applied once. We do not store card numbers.

If analytics is enabled, we record six funnel events and a device label (mobile or desktop). The hosted script loads only when its domain is set. Until then, local debug logs stay on the server you run.

Retention

Uploads are deleted at the end of the run. Generated portraits stay in object storage for 30 days, then the account's next visit or next run clears them. Download anything you want to keep.

Account rows and the payment ledger stay while the account exists so balances and refunds remain correct. You can email the owner address to ask for deletion of the account.

GDPR and your requests

Where GDPR applies, we process account and payment data to perform the contract, and we process security logs as a legitimate interest. Photos are processed to provide the portrait you asked for and are then deleted.

You can ask for access, correction, deletion, restriction, or a copy of account data. You can object to a use based on legitimate interest. You can also complain to your local authority. Email the owner address. We will not ask you to upload a face photo to prove who you are.

Children

The tool is for adults. Do not upload photos of minors. We do not knowingly create accounts for children, and we do not want photos of children on the server even for a moment.

FAQ

Do you store face data?

We do not extract or store face templates, face geometry, or other biometric identifiers. The photo files are deleted when the run succeeds or fails.

How long are photos kept?

Uploaded photos are deleted when the run finishes, including when it fails. Portraits you generated stay until the retention window ends, then they are cleared.