Privacy policy
Last updated: 26 September 2026
We know you are trusting us with very personal images: your baby's ultrasound and, later on, your child's first photo. This policy explains what we do with them, in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Controller
[Nombre o razón social] ([NIF/CIF]), [Domicilio]. Contact: [email de contacto].
What data we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Ultrasounds you upload for the free preview and the photo we generate from them | Analysing features, generating the preview and, if you buy, delivering that same photo | Your explicit consent when uploading (art. 9.2.a GDPR), as they may reveal health data | The ultrasound is not stored. The generated photo is kept for up to 48 hours so you can unlock it; it is then deleted automatically |
| Images generated with a paid pack and the ultrasound they come from | Letting you download them, compare them after birth and build your album | Performance of the contract and, for the ultrasound, your explicit consent | 12 months, or until you delete them from «My photos» |
| Comparisons with the baby's real photo | Saving them in your album and, if you choose, sharing them with a link | Your consent when saving them | 12 months, or until you delete them. The real photo never leaves your phone unless you save the comparison |
| Email and purchase details (payment is handled by Stripe; we never see your card) | Managing the purchase, sending your access link and meeting tax obligations | Performance of the contract and legal obligation | As long as tax and commercial law requires (up to 6 years) |
| Due date and email for the reminder | Reminding you once to check the result after the birth | Your explicit consent (optional) | Until the reminder is sent or you turn it off |
We do not use your images to train AI models, for advertising or for any other purpose. We do not sell them or share them with third parties, except with the providers listed below and when required by law.
Health data and consent
An ultrasound can reveal a pregnancy, which is health data. That is why we only process it with your explicit consent, which you give by ticking the box before uploading it, and we store with each purchased image the version of the text you accepted and the date. You can withdraw your consent at any time by deleting your images from «My photos» or by writing to us; withdrawing it does not affect earlier processing.
Minors and age
The service is for adults. Ultrasounds and baby photos may only be uploaded by the baby's parents or legal guardians, or by people with their permission.
Artificial intelligence
We use AI to analyse the ultrasound and generate the images. We do not use it to make decisions with legal effects on you, nor to build profiles. Every generated image states in its metadata that it was made with AI.
Providers (processors)
| Provider | Service | Location |
|---|---|---|
| Vercel Inc. | Website hosting | USA/EU |
| Anthropic PBC | Ultrasound feature analysis (AI) | USA |
| Features and Labels Inc. (fal.ai) | Image generation (AI) | USA |
| Stripe Payments Europe Ltd. | Payments | Ireland/USA |
| Supabase Inc. | Database and storage of purchased images | EU |
| Resend Inc. | Sending emails | USA |
| Plausible Insights OÜ | Cookie-free usage statistics | EU |
Transfers to the USA rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
Cookies and statistics
We only use one technical cookie (crb_acceso) that remembers your purchase in this browser, and one (lang) that remembers your language; both are necessary for the service and do not require consent. Usage statistics are measured without cookies and without personal data, in aggregate.
Security
Everything is encrypted in transit, we remove metadata and location from the images you upload, purchased photos are stored in private storage in the European Union that only the holder of the purchase link can access, and we never see your card details.
Your rights
You can access, rectify, erase and port your data, object to or restrict its processing and withdraw your consent at any time by writing to [email de contacto]. From «My photos» you can delete all your images yourself instantly. We will reply within one month at most. If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority of your country.