Privacy Policy
This policy describes how AiBabyMotion (“we”, “us”) handles information when you use our website at aibabymotion.com and our mobile application (together, the “Services”). If you use our mobile app, the Apple App Store (or other platform) may also apply its own terms and privacy practices.
Summary
The table below mirrors the core data categories disclosed in App Store Connect so our policy and store disclosures stay aligned.
| Data | What we use it for |
|---|---|
| Name | Account/session management, support, and limited internal analytics where needed to improve user experience. |
| Account access, verification, security, and account-related notifications. | |
| Photos or video | Content generation features you request, including secure transfer to cloud AI processors only as needed for the selected generation workflow. |
| User ID | Session continuity, subscriptions, API requests, support mapping, and campaign measurement where permitted by ATT consent. |
| Device ID | Security, fraud prevention, app functionality, and advertising attribution where system permissions and policy allow. |
| Purchase history | Premium access control, product analytics, and attribution/conversion measurement (for example, purchase events). |
| Product interaction | Feature quality, personalization, reliability improvements, analytics, and third-party measurement tools where permitted. |
When we refer to analytics or attribution in this policy, it includes first-party server analytics and applicable processors such as Adapty, TikTok App Events, and store-level App Store Connect Analytics when enabled.
Information we collect
- Content and prompts. Face-containing photos/images, optional prompts, and support messages you submit.
- Account and technical data. Profile/account fields, device and app data, identifiers, and diagnostics required for security and operation.
- Generation metadata. Selected template/feature, session references, and job metadata needed to produce requested outputs.
- Usage and measurement data. Product interactions and purchase signals used for service quality, attribution, and campaign measurement where allowed.
How we use information
We use information to provide, secure, and improve the Services; process your content to generate outputs you request; communicate with you; comply with law; and enforce our terms; and, where permitted, measure advertising effectiveness and attribute app installs.
AI and automated processing
For generation features, inputs may include photo/video pixels (after client-side encoding), prompts, template identifiers, and job metadata. These are processed by our backend and, depending on the selected generation flow, routed to relevant cloud AI processors such as Replicate, Google Gemini API, Kling, Seed Dance, and Dream Actor.
We use this data only to deliver the requested output, monitor reliability, and enforce safety/security controls. AI processing consent can be reviewed or withdrawn in the app (Profile → Account or Profile → Help). After withdrawal, new uploads/generation may require renewed consent before processing resumes.
Tracking and App Tracking Transparency (ATT)
On iOS, advertising attribution and related tracking are subject to Apple’s App Tracking Transparency (ATT). If you do not grant permission, cross-app/device measurement is limited by platform rules and processor capabilities.
Where permitted, third-party attribution or ad-performance measurement may involve Adapty and TikTok for Business. Purchase events may be used as conversion signals to measure campaign performance and improve acquisition quality in a policy-compliant way.
Push notifications
We use OneSignal to deliver push notifications and notification tap routing. You can disable push permissions in iOS settings at any time.
Sharing
We may share information with service providers who process data on our behalf, under our instructions, and with contractual and technical safeguards designed to provide equal or equivalent protection for your data. We may also disclose information when required by law or to protect rights and safety. We do not sell your personal information.
Processors / sub-processors
This table is the canonical processor list used to keep website privacy text aligned with App Store disclosures.
| Processor | Role | Data touching this processor |
|---|---|---|
| Supabase | Authentication, profile data, database/realtime, and storage URL flows. | JWT/session, profile rows, uploaded media blobs and storage/public URL metadata. |
| Adapty | Subscriptions, paywalls, and attribution coupling where ATT permits. | Pseudonymous IDs, purchase state, device/attribution signals, product interaction. |
| TikTok for Business (TikTok App Events SDK) | Install attribution and ad performance measurement under ATT policy. | Permitted identifiers and event data, including purchase conversion signals. |
| OneSignal | Push notification delivery and tap deep-link routing. | Push token/device messaging identifiers and notification payload data. |
| AiBabyMotion API (VPS) | Backend orchestration, request authorization, and generation job routing. | Template/prompt/session metadata, job identifiers, and server-side telemetry. |
| Replicate | Cloud model inference for selected generation pipelines. | Photo/video-derived pixels, prompts, template IDs, and required job metadata. |
| Google Gemini API | Cloud multimodal/image inference for backend-selected generation paths. | Prompt text, image/video references, and route metadata needed for generation. |
| Kling | Motion/video generation model path when selected by backend orchestration. | Generation inputs and metadata required for requested output. |
| Seed Dance | Dance/motion generation model path when selected by backend orchestration. | Generation inputs and metadata required for requested output. |
| Dream Actor | Actor/motion generation model path when selected by backend orchestration. | Generation inputs and metadata required for requested output. |
The mobile client does not call all generation processors directly. Supabase, Adapty, OneSignal, and TikTok integrations can run at SDK/client level (subject to ATT for attribution), while Replicate, Google Gemini API, Kling, Seed Dance, and Dream Actor are selected by our backend per generation workflow.
Runtime processors (identified in iOS client)
- AiBabyMotion API — hosted backend (from app `BackendBaseURL`) for job orchestration, generation authorization, and metadata routing.
- Supabase — auth, profile and storage flows before generation jobs.
- Cloud AI inference providers (called via AiBabyMotion API) — Replicate, Google Gemini API, Kling, Seed Dance, and Dream Actor depending on the chosen workflow.
- Adapty — subscriptions, paywalls, and purchase attribution signals.
- OneSignal — push delivery and notification interaction handling.
Optional / attribution processors
- Apple — Sign in with Apple, App Store IAP, and ATT dialog.
- App Store Connect Analytics — if enabled at store level; not wired in-app beyond standard OS behavior.
- TikTok for Business (TikTok App Events SDK) — install attribution and purchase/event measurement under ATT-controlled permissions.
Privacy manifest
`PrivacyInfo.xcprivacy` is the canonical source for `NSPrivacyTracking` and tracking domains. Tracking-domain details are maintained in iOS privacy documentation (for example `APP_STORE_CONNECT_PRIVACY.md`) and in the app manifest configuration.
`Info.plist` should not duplicate `NSPrivacyTracking`; Xcode merges privacy manifests and duplication can create reviewer confusion.
Consent versioning
We version in-app Cloud & AI processing consent. The accepted legal version is stored on device (`AIProcessingConsent.acceptedLegalVersion`). When processor lists or material data flows change, we may require a new acknowledgment before new uploads or generation jobs start. Users can review or withdraw consent from Profile → Account or Profile → Help.
Retention
Face data retention. Photos and images containing face data that you upload are retained for a maximum of 24 hours from the date of upload (or from the completion of the generation job using that image, whichever is earlier), after which they are permanently deleted from our systems and those of our sub-processors. We retain face data for this limited period solely to complete and deliver the requested generation output; we do not retain face data indefinitely. If you delete your account or submit a deletion request to support@aibabymotion.com, face data is deleted within 24 hours of the request.
All other account and usage data is retained only for as long as needed to provide requested features, maintain security and reliability, and comply with legal obligations. When no longer needed, we delete or anonymize data where appropriate.
Your privacy choices
- Tracking and attribution controls: Tracking and ATT section.
- Push controls: Push notifications section and iOS notification settings.
- AI processing consent controls: AI and automated processing section (Profile → Account / Help).
For App Store “User Privacy Choices URL”, you can use https://aibabymotion.com/privacy/#privacy-choices.
Depending on your region, you may have rights to access, correct, delete, or restrict processing. Contact support@aibabymotion.com for requests.
Name and analytics alignment note
If “Name” is disclosed for analytics in App Store Connect, we limit that use to internal product-quality analysis. If your implementation uses name only for account/support operations, update the Connect declaration accordingly to keep policy and Connect perfectly aligned.
Children
Our Services are not directed to children under 13 (or the minimum age required in your jurisdiction). If you believe we have collected data from a child, please contact us.
International transfers
We may process information in countries other than where you live. Where required, we use appropriate safeguards.
Changes
We may update this policy from time to time. We will post the new version on this page and adjust the “Last updated” date.