Privacy Policy
The short version
- Your photos and videos are analyzed and turned into growth videos on your iPhone. They are not uploaded to our server or to any outside AI service.
- Face analysis data (including a numeric face feature vector and five landmark points) is stored only on your device. We never receive it, and we do not sell or share it.
- Our server keeps only what the app needs to run your account: an anonymous account ID, your baby's name and birth date, and your credit history.
- We use Google AdMob for limited ads and Airbridge for app analytics. Neither receives your photos, videos, face data, or your baby's name or birth date.
- You can delete your data at any time in the app: Settings → Delete All Data.
1. Who we are
My So Cute Baby ("the app") is made by Seungheon Lee, an individual developer based in the Republic of Korea ("we", "us"). We decide how the personal data described here is used and are responsible for it.
The app is for parents and caregivers. It helps you turn photos of your own baby, already in your photo library, into growth videos and decorated calendar pages.
Contact: soen234@gmail.com
2. What we collect and where it is kept
The table is grouped by where the data lives: on your device, on our server, or with a third-party service.
| Data | Why | Where | How long |
|---|---|---|---|
| On your device only | |||
| Photos and videos in your photo library | Analyze them and make growth videos, clip videos and canvases | Read on your device with the photo access you grant in iOS. The app does not copy the originals to a server. | The originals stay in your Photos library. The app never deletes them. |
| Photo IDs, capture dates and face analysis data (see Face data) | Group photos of the same baby, line up faces, avoid re-analyzing photos | The app's database on your device | Until you use Delete All Data or remove the app |
| Photo location (GPS coordinates already in your photos) | Show where photos were taken on the calendar map | The app's database on your device; passed to Apple's map component to draw the map | Until you use Delete All Data or remove the app |
| Canvases, stickers, previews and thumbnails (may show your baby's face) | Decorate a page for each day and display it | App storage on your device | Until you delete them, use Delete All Data, or remove the app |
| Growth videos and clip videos you make | Watch, save and share | App storage on your device | Until you delete them. Copies saved to Photos or shared are separate. |
| Age category (adult, teen, child, declined or not applicable) | Meet US state age-check laws (see section 7) | On your device only | Replaced when the app checks again (once per app version); removed with the app |
| Analytics events waiting to be sent | Keep usage events until analytics may start | A queue on your device | Up to 200 events; events older than 7 days are dropped |
| Our server (Supabase, Tokyo, Japan) | |||
| Anonymous account ID | Keep your profile and credits separate from other users | Our server | Until your account is deleted |
| Your baby's name or nickname and birth date | Show age in days and months, set video periods, back up your profile | Your device and our server | Until your account is deleted |
| Apple account identifier and the email address Apple shares (only if you turn on Apple Account backup) | Back up and restore your credits and profile | Our server | Until your account is deleted |
| Credit history: purchase transaction IDs, credits added and used | Verify App Store purchases and keep your balance | Our server. Apple-signed transaction data passes through our server to be verified. | Until your account is deleted |
| App Store notices about refunds and parental consent (notification ID, type, transaction ID, environment, time received) — from version 2.1 | Remove credits from refunded purchases; act on a parent's withdrawal of consent | Our server | As long as needed to handle the refund or consent change and keep accounting records |
| Third-party services | |||
| Device check token (DeviceCheck) | Give the new-user bonus only once per device | Sent through our server to Apple. Apple keeps a small per-device flag. | The flag is managed by Apple and is not reset when you delete your account |
| Usage, account, purchase and ad performance events | App analytics and ad measurement (see App analytics) | Airbridge (AB180 Inc.) | Under Airbridge's retention policy |
| Device and network information, advertising ID (only if you allow tracking), ad views and clicks | Show limited full-screen ads and measure them (see Ads) | Google AdMob | Under Google's retention policy |
| Videos and canvas images you choose to share | Send them where you choose | The app or person you pick | Under that recipient's control |
What we do not collect: your current location (the app does not ask for location permission), contacts, or the content of messages you share. Photos, videos and face data are never uploaded to our server.
3. Face data
This section is our notice and written policy on face data (sometimes called biometric data). We wrote it with the face and biometric data laws of US states such as Illinois, Texas, Colorado and Washington in mind.
What the app creates
When you import photos, the app looks for faces in the photos it can access (and in one representative frame of each video), using Apple's Vision framework and models built into the app. For each face it finds, it stores:
- the position of the face in the photo, and values for quality, head angle, size, brightness and color;
- a face feature vector: a list of 512 numbers that lets the app tell whether two faces look like the same person;
- five landmark points: the positions of the eyes, nose tip and mouth corners, stored as positions relative to the image size, used to line up faces.
Faces that look alike are put into groups. For each group, the app also stores the average of its members' feature vectors, which photo represents the group, and whether you chose that group as your baby.
Stickers, sticker previews, canvas thumbnails and finished videos can also contain images of faces, and are stored in the app on your device.
Why
Only to group photos of the same baby, line up faces from one frame to the next in growth videos, and cut out stickers for canvases. We do not use face data to verify anyone's identity, to sign anyone in, for advertising, or to build profiles.
Where it stays
- Face data is created and stored only in the app's database on your device. It is not sent to our server, to analytics or advertising services, or to any AI service, and we cannot access it.
- We do not sell, lease, trade or otherwise profit from face data, and we do not disclose it to anyone.
- If you turn on iCloud Backup or back up your iPhone to a computer, the app's data on your device, including this database, can be part of that backup. Those backups are controlled by you and Apple. We cannot access them.
- When you share a video or canvas, the images in it (which may include faces) go to the app or person you choose. Face analysis data is not included.
How long it is kept and how to delete it
- Face data is kept only while the app needs it to avoid re-analyzing your photos. It is deleted when you use Settings → Delete All Data or remove the app.
- Delete All Data removes the photo analysis database (including feature vectors and landmark points) and the saved stickers, previews, thumbnails and videos. It does not touch your Photos library or copies you have already saved or shared.
4. Photo location
Many photos already contain the GPS coordinates of where they were taken. The app reads these through the photo access you grant, stores them on your device, and shows them as pins on the calendar map. It does not ask for location permission and does not look up addresses or place names.
The app does not send photo coordinates to our server or to analytics or advertising services. To draw the map, the app passes the coordinates and the visible map area to Apple's MapKit component, and map data is provided by Apple Maps under Apple's terms. Stored coordinates are deleted with Delete All Data or when you remove the app.
5. Ads and tracking choices
- There are no full-screen ads when you make, save or share videos. Your first save is also ad-free.
- On free accounts, a full-screen ad from Google AdMob may sometimes appear only when you save a canvas to Photos, and only after several successful saves, with limits on how often ads can appear.
- Accounts with any credit purchase on record never see full-screen ads, whatever their balance.
- Where the law requires it, the app asks for your advertising consent through Google's consent message. In those regions you can change your choice later in Settings → Privacy.
- iOS asks whether the app may track you (App Tracking Transparency). If you allow it, the advertising identifier (IDFA) can be used. If you do not, it is not used. The app works the same either way. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
To deliver and measure ads, AdMob may process device and network information (such as IP address and device model) and ad views and clicks. The app does not send photos, videos, face data or your baby's profile to AdMob. See how Google uses information from apps that use its services.
6. App analytics
We use Airbridge, provided by AB180 Inc., to understand how features are used and where installs come from.
- What is sent: onboarding steps; photo access status and import results; video settings and whether making a video succeeded; canvas use and saves; whether sharing completed, was cancelled or failed, and the type of app chosen; purchase steps and results; credit use; your anonymous account ID; purchased product, transaction ID, and the amount and currency confirmed by the actual transaction; ad views and ad revenue; device and app information collected by the SDK (such as device model, OS version, language and IP address); and the link that opened the app after analytics has started.
- Identifiers: the advertising identifier (IDFA) is used only if you allow tracking. Collection of the identifier for vendors (IDFV) is turned off.
- What is never sent: photos, videos, face data, canvas or sticker images, your baby's name or birth date, photo coordinates, who you share with, and the content of what you share.
- Before analytics starts: events are kept in a queue on your device (up to 200 events, none older than 7 days). The queue does not store file paths or the links that opened the app. Analytics starts, and queued events are sent, only after the consent steps above are complete and your ad consent allows it. If you later withdraw that consent, sending stops and new events stay on your device.
- When you delete your account: unsent events for that account are deleted and the SDK's link to your account is cleared. Events already sent to Airbridge cannot be deleted from inside the app; you can ask us to request deletion (see Your rights).
7. Age checks under US state laws — from version 2.1
Some US states, starting with Texas, require apps to check the age range of an Apple Account holder and, for minors, to get a parent's approval in certain cases, such as before a significant update. Where Apple indicates that these rules apply to your account, the app asks Apple's Declared Age Range feature for an age range.
- The app keeps only the resulting category (adult, teen, child, declined or not applicable) on your device, together with the app version, so it checks again once per version.
- It does not store or send your birth date or exact age, and it does not send the category to our server, analytics or advertising services.
- We use it only to meet these legal requirements.
- If a parent withdraws consent, Apple tells our server through an App Store notification, and we record that notice (see the table above).
8. Purposes and legal bases
We follow widely used international standards and name the legal basis for each use. Not every law uses these terms, and where your local law requires something stricter, we follow it.
| Purpose | Data | Legal basis |
|---|---|---|
| Run the app: make videos and canvases, keep your account, profile and credits | Profile, account ID, credit history; on-device photo and face analysis | Providing the service you asked for (contract) |
| Process and verify purchases, handle refunds | Transaction data, credit history, App Store notices | Contract; legal obligations (accounting) |
| Back up and restore with your Apple Account | Apple account identifier, email from Apple | Your choice to turn it on (contract / consent) |
| Give the new-user bonus once per device and prevent abuse | DeviceCheck token | Legitimate interests (preventing fraud) |
| App analytics and ad measurement | Events and identifiers listed in section 6 | Consent where the law requires it; otherwise legitimate interests (improving the app) |
| Show limited ads | Data processed by AdMob (section 5) | Consent where the law requires it; otherwise legitimate interests (keeping a free tier) |
| Age checks and parental consent | Age category (on device), App Store notices | Legal obligation |
| Answer your questions and requests | Your email and what you tell us | Legitimate interests; legal obligation for privacy requests |
9. Service providers and international transfers
We use the services below. Because they operate in different countries, your data may be processed outside the country where you live.
| Provider | Role | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Hosts our server and database | Account ID, baby profile, credit history, Apple sign-in details, App Store notices | Japan (Tokyo region) |
| Google LLC (AdMob) | Ads | Device and network information, IDFA if allowed, ad interactions | United States and other countries where Google operates |
| AB180 Inc. (Airbridge) | App analytics and ad measurement | Section 6 | Republic of Korea |
| Apple Inc. | Sign in with Apple, App Store payments and notices, DeviceCheck, Maps, Declared Age Range | As described above | United States and other countries where Apple operates |
We are based in the Republic of Korea and may access data on our server from there to run the service and answer your requests. When data moves between countries, we rely on the providers' data protection terms (including standard contractual clauses where they apply), and data is encrypted in transit.
We give these providers only the data they need for the purposes in this policy, and we use them under data protection terms that require them to protect your data at least as well as this policy does.
We do not sell your personal data, and we do not share it with anyone else except as described here or where the law requires it.
10. How long we keep data
- Data on your device (photo and face analysis, coordinates, canvases, stickers, videos): until you delete it, use Delete All Data, or remove the app.
- Account, profile and credit history on our server: until you delete your account with Delete All Data. Removing the app alone does not delete your server account.
- App Store notices about refunds and consent: as long as needed to handle them and keep accounting records.
- Analytics queue on your device: up to 200 events, none older than 7 days.
- Data held by Airbridge, Google and Apple: under each provider's retention policy.
- Emails to us: as long as needed to answer you, then deleted.
When data is deleted from our server, it is removed from the live database. Deleted data may remain in the hosting provider's backups for a limited time before it is overwritten.
11. Your rights and how to use them
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict some uses, and to withdraw consent at any time. You can use most of these rights directly in the app:
- Correct your baby's name or birth date: Settings → edit baby info.
- Delete everything: Settings → Delete All Data. This deletes your account, profile and credit history on our server, then the profile, photo analysis data, videos, canvases and stickers on your device. Remaining credits are lost and cannot be restored. If the server cannot be reached, you can delete only the data on this device.
- Withdraw ad consent (in regions where it is asked): Settings → Privacy. Stop tracking: iOS Settings → Privacy & Security → Tracking.
- Stop Apple Account backup data from being kept: use Delete All Data.
For anything else, for example a copy of your server data or deletion of analytics data already sent, email soen234@gmail.com. Because accounts are anonymous by default, we may need information to find your account. If you used Apple Account backup, tell us the email address Apple shared with us (it may be an Apple private relay address). We will reply within 30 days, or sooner if your local law requires it. You will not be treated differently for using your rights.
You may also complain to your data protection authority, for example the Personal Information Protection Commission in Korea or Japan, or your state attorney general in the United States.
12. Notice for US residents
- The categories of personal data we collect, where they come from, why we use them and who receives them are listed in sections 2, 5, 6 and 9.
- We do not sell personal data for money. Using Google AdMob for ads and Airbridge for ad measurement may count as "sharing" or "targeted advertising" under some state laws. You can limit this by not allowing tracking in iOS, and you can contact us to opt out or to make any other request.
- We do not use face data or the age category for advertising, and we do not sell or share them.
13. Children
The app is made for parents and caregivers (adults) to organize photos of their own children. It is not directed to children, and it is not in the App Store Kids category. A parent or caregiver enters the baby's name and birth date and chooses which photos to use. We do not knowingly collect personal data from children who use the app themselves. If you believe a child has given us personal data, contact us and we will delete it.
14. Security
Data between the app and our server is encrypted in transit (HTTPS). On the server, database rules limit each account to its own data, and only the developer can access the administration tools. Data on your device is protected by iOS. No system is perfectly secure, but we limit what we collect so that your photos and face data never leave your device.
15. Changes to this policy
When we change this policy, we post the new version on this page and update the effective date. We keep previous versions available from the link at the top. For significant changes, we will also mention them in the App Store release notes.
Changes in this version: full English and Japanese versions; corrected the face data section (the app now stores five landmark points on your device); added age checks under US state laws, App Store refund and consent notices, legal bases, international transfers, retention, and your rights.
This policy is available in English, Korean and Japanese. If the versions differ, the English version applies unless your local law requires otherwise.
Contact
Seungheon Lee (developer and privacy contact)
Republic of Korea
Email: soen234@gmail.com