1. Introduction

Glimpse Baby ("Glimpse", "we", "us", or "our") operates the website glimpse.baby. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered baby photo generation service.

By using our Service, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:
• Email address (via Google or email sign-in)
• Display name and profile picture (if provided by your auth provider)
• Account creation date

2.2 Uploaded Images

When you use our Service, we process:
• Ultrasound images you upload
• Photos you upload for art style transfer
• AI-generated images created from your uploads

2.3 Payment Information

Payments are processed by Lemon Squeezy. We do not store your credit card numbers, bank details, or other financial information. Lemon Squeezy handles all payment data securely under their own Privacy Policy. We only receive confirmation of your purchase and credit amount.

2.4 Usage Data

We automatically collect:
• Pages visited and features used
• Device type, browser type, and operating system
• IP address (anonymized for analytics)
• Generation history (number of credits used, timestamps)

3. How We Use Your Information

We use your information to:
• Provide and maintain the Service (generate AI baby photos)
• Process your credit purchases
• Send important service notifications (e.g., purchase confirmations)
• Improve and optimize our AI models and user experience
• Prevent fraud and abuse
• Comply with legal obligations

We do not use your images for advertising, sell your data to third parties, or share your images publicly without your explicit consent.

4. Third-Party Services

We use the following third-party services to operate Glimpse:

• Supabase — Authentication and database hosting (stores your account and generation data)
• AI technology providers — Image generation and processing (your uploaded images are sent to our AI providers to create baby photos; images are processed in real-time and not stored by the provider)
• Lemon Squeezy — Payment processing (handles all financial transactions)
• Vercel — Website hosting and analytics
• Supabase Storage — Secure image storage

Each third-party provider has their own privacy policy governing how they handle your data. We only share the minimum data necessary for each service to function.

5. Image Storage and Retention

• Uploaded and generated images are stored securely on encrypted servers
• Images are associated with your account and only accessible to you
• Images may be automatically deleted after 90 days of inactivity
• You can manually delete your images at any time from your gallery
• When you delete an image, it is permanently removed from our servers within 30 days

6. Cookies and Tracking

We use essential cookies to:
• Keep you signed in to your account
• Remember your preferences
• Maintain session security

We may use analytics tools (such as Vercel Analytics) to understand how users interact with our Service. These tools collect anonymized usage data and do not track you across other websites.

7. Data Security

We implement industry-standard security measures to protect your data:
• All data is transmitted over HTTPS (TLS encryption)
• Images are stored on encrypted servers
• Access to user data is restricted to authorized personnel only
• We use Row Level Security (RLS) to ensure users can only access their own data
• Regular security audits of our infrastructure

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access — Request a copy of all personal data we hold about you
• Right to Rectification — Request correction of inaccurate data
• Right to Erasure — Request deletion of your account and all associated data
• Right to Portability — Request your data in a portable format
• Right to Object — Object to processing of your data for certain purposes
• Right to Withdraw Consent — Withdraw your consent at any time

To exercise any of these rights, please contact us through our Support page. We will respond to your request within 30 days.

9. Children's Privacy

Our Service is intended for users who are at least 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has provided us with personal data, we will delete it promptly. If you believe a child has provided us with their data, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our servers and third-party providers operate in the United States and European Union. We ensure appropriate safeguards are in place for any international transfers of personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us through our Support page.