Privacy Policy

Information We Collect

• Personal identification information (Name, email address)
• Ultrasound scan images you upload for analysis
• For AI keepsakes: the photos, scan images and voice recordings you add in your private studio, and the details you type in (such as names)
• For Reveal Night: the first names and guesses that party guests enter on their phones
• Payment information (processed securely via Stripe)
• Usage data and analytics
• Referral codes and marketing preferences

How We Protect Your Data

• All scan images are encrypted at rest and in transit
• We use industry-standard SSL/TLS encryption
• Access to customer data is restricted to authorized personnel only
• Payment card details never touch our servers — Stripe handles them
• UK GDPR-compliant data handling procedures

Who Processes Your Data For Us

• Google (Gemini AI) — analyses your scan image to produce the AI reading, and creates AI keepsakes (artwork, portraits, music, lyrics and voice) from what you add
• ElevenLabs — for Lullaby in Your Voice only: makes a temporary copy of your voice from your consented recording to sing your lullaby, which we delete straight after
• Telegram — delivers your scan image to our reviewer for the human double-check
• Stripe — takes payments and stores payment details
• Cloudflare (R2) — stores scan images; Neon — stores order records
• Resend — sends our emails; Vercel — hosts the website
• Google Analytics — anonymous site usage statistics
• Meta and TikTok — ad measurement pixels (only if we run ads; emails are sent hashed)
• RevenueCat and Expo — in-app purchases and notifications in the NubHub app
• We never sell your data or show your scan publicly without your permission

AI Keepsakes

• Your photos, scans and recordings are used only to make the keepsake you ordered — we never use them to train AI models and never show them publicly
• Photos of other people: you confirm everyone pictured is an adult who agreed to their photo being used
• Voice recordings: you record a consent sentence with a personal code before any voice is copied; the copy of your voice is deleted as soon as your lullaby is made, and it can only ever sing the lullaby we wrote
• Uploaded photos and scans are re-saved without their hidden location and device data (EXIF)
• Your uploads are permanently deleted within 30 days (pressing delete in your studio removes them from it straight away); finished keepsakes are kept for up to 13 months so you can download them and make your “AI vs reality” card
• Reveal Night guests’ names and guesses appear on the host’s TV and are kept with the host’s order — email us to have them removed
• Your studio is reached by a private link: anyone you share it with can open it

Your Privacy Rights

• Right to access your personal data
• Right to request data deletion
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

Data Retention & Deletion

• Scan images are kept only while we need them for your prediction and any refund claim
• Personal data retained for 7 years for legal compliance
• You can request immediate deletion of your data
• Anonymized data may be retained for analytics

Contact Us About Privacy

If you have any questions about our privacy practices or would like to exercise your data rights:

support@nubhub.baby
Response within 24 hours