Privacy Policy
Effective date: October 23, 2026The short version: we save uploaded and generated pictures privately in Firebase Storage for your account history. Admins can view them for support and activity review. Payments are handled by PayPal, so we never see your card details.
This policy explains how BabyMash AI ("we", "us"), available at babymashai.com and operated by Huang Horizon Studio, handles information when you use the service.
1. Photos you upload
Photos are resized in your browser and passed securely through our server to our AI provider (OpenAI) only to create your image. BabyMash AI stores uploaded photos and generated images in private Firebase Storage, organized by date and user ID. They are visible only to authorized administrators through the admin dashboard. OpenAI processes them under its privacy policy and may keep API data for a limited time for safety monitoring; it does not use API data to train its models by default.
2. Information we collect
- Lifetime Pro purchase: the email address you enter at checkout and your PayPal order and transaction IDs.
- Account: Firebase Authentication handles email/password sign-in and anonymous visitor identities. We do not receive or store your plain-text password.
- Usage limits: your IP address, used to count free generations and prevent abuse. These counters expire automatically within about 48 hours.
- Activity and analytics: Firestore records page visits, button clicks, registrations, image generations and confirmed purchases, along with device type and approximate country, region and city from the internet connection. We also use Google Analytics and the TikTok Pixel, which use cookies or similar technologies to measure visits and ad performance.
- On your device: your login session is saved in your browser's local storage so you stay logged in.
3. How we use it
- To create your images and provide Lifetime Pro features
- To process payments, refunds and support requests
- To enforce daily limits and protect the service from abuse
- To understand how people use the site and improve it
4. Service providers
We share data only with providers that help us run BabyMash AI: OpenAI (image generation), PayPal (payments), Netlify (hosting), Firebase (authentication, Firestore activity and usage limits, private photo storage), Upstash (purchase entitlements and API rate limits), Google Analytics and TikTok (analytics and advertising measurement). We don't sell your personal data.
5. Payments
All payments are processed by PayPal. We never receive or store your card or bank details. PayPal's privacy statement applies to payment data.
6. How long we keep data
Uploaded and generated photos and activity history: retained until you ask us to delete them or the service removes them under a future retention policy. Account and purchase records: kept while your access is active and as needed for accounting and refunds. Free usage windows reset 24 hours after the first generation in that window.
7. Your choices and rights
You can ask us to access, correct or delete your personal data at any time by emailing us. You can block analytics cookies in your browser settings. Depending on where you live (for example the EU, UK or California), you may have additional rights, which we will honor.
8. Children
BabyMash AI is not intended for children under 13, and you should only upload photos of adults who have agreed to take part.
9. Changes
We may update this policy. The effective date above shows when it last changed.
10. Contact
Questions or requests: jmacaling001@gmail.com