Privacy Policy

We Take Your Baby's Privacy Seriously

BabyMindAI ("we", "our", or "us") is operated by Baemtech and accessible at baemtech.com/babymindai. This Privacy Policy explains how we collect, use, and protect your personal information — including photos of your child — when you use our service.

By using BabyMindAI, you agree to the practices described in this policy. If you do not agree, please do not use the service.

Information We Collect

We collect the minimum data required to provide our service:

• Account Information: Email address and display name when you create an account.
• Photos you upload: Images of your child submitted for transformation.
• Usage Data: Which themes you select, how often you use the app.
• Device Information: Device type, OS version, and app version.
• Payment Data: Processed securely by Stripe. We never store your card details.

How We Handle Uploaded Photos

Because our service processes photos of children, we apply the strictest standards:

• Photos are uploaded over encrypted HTTPS and stored in encrypted cloud storage.
• Photos are processed by AI to generate your requested transformation — see Section 05 for the third-party AI providers involved.
• Before any photo is sent to a third-party AI provider, the app asks for your explicit, informed consent within the app.
• You can delete your uploaded and generated images from your account at any time.
• Photos are never used to train AI models. Our AI providers contractually agree not to use your inputs for model training.
• Photos are never sold or shared with advertisers or data brokers.

Purpose of Data Processing

We use collected information for:

• Generating AI transformations from your uploaded photos.
• Delivering and improving the BabyMindAI service.
• Sending transactional emails (receipts, transformation ready).
• Preventing fraud and abuse.
• Complying with legal obligations.

Who We Share Data With

We do not sell personal data. We share limited data only with trusted service providers. Each provider is contractually bound to protect your data with the same or equivalent level of protection set out in this policy, in accordance with Apple's App Store guidelines (5.1.2).

• Cloud Infrastructure (AWS): Encrypted file storage and compute. Data is encrypted in transit and at rest. AWS does not access user content for its own purposes.
• Third-Party AI Providers — Replicate (replicate.com) and fal.ai (fal.ai): When you confirm the in-app AI consent prompt, we forward the photo you selected, the template/style you chose, and an anonymous account identifier (for usage limits) to one of these providers solely to generate your requested output. Inputs are not used to train models and are deleted by the provider after processing, in accordance with their published privacy commitments.
• Payment Processing (Stripe / Apple In-App Purchases): Used to process subscriptions and token-pack purchases. We never store your card details.
• Analytics: Anonymized, aggregated usage metrics only — no personal data, no photo content.

Special Protections for Children

BabyMindAI is used by parents and guardians — not directly by children. Our app is intended for users aged 18 and over.

• We do not knowingly collect personal information directly from children under 13.
• Photos of children are processed only at the direction of the parent or guardian.
• We comply with COPPA and applicable international children's privacy laws.

Data Storage & Retention

• Uploaded photos and generated images/videos: Retained while you keep them in your account. You can delete them at any time from within the app.
• Account data: Retained while active. Deleted within 30 days of account deletion request.
• Payment records: Retained for 7 years as required by financial regulations.

Your Rights

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and all associated data.
• Portability: Request your data in a machine-readable format.
• Withdraw Consent: Withdraw any previously given consent at any time.

To exercise any of these rights, email us at privacy@baemtech.com. We respond within 30 days.

How We Protect Your Data

• All data transmitted is encrypted using TLS 1.3.
• Stored files and database records are encrypted at rest using AES-256.
• Access to user data is restricted to essential personnel under strict controls.
• We conduct regular security audits and penetration testing.
• In the event of a breach, we notify you within 72 hours as required by law.

Updates to This Policy

When we make significant changes, we will update the 'Last updated' date, send an email notification to registered users, and display an in-app notice for 30 days.

Questions or Concerns?