Privacy Policy
Effective date: 25 October 2026
This Privacy Policy explains what information the App collects, why we use it, who we share it with, how long we keep it and what choices and rights you have. We have tried to keep it short and plain.
1. Who is responsible for your data
The data controller is Sunmare Digital Teknoloji Yazılım Sanayi ve Ticaret Limited Şirketi (“Sunmare Digital”), Turkey. For any privacy question or request, write to info@sunmaredijital.net.
2. Summary
- You choose photos of your baby (and, if you like, of the mother and father). We use them only to create the images and videos you ask for.
- Photos are processed on our own server and by our AI provider fal.ai. We do not use your photos to train AI models and we do not sell them.
- Profile photos are kept until you delete the profile. Other uploaded photos are deleted within 24 hours after the generation finishes. Your results stay in Creations until you delete them.
- “Clear All Data” in Settings deletes your profiles, photos and results in one tap.
- We use analytics, crash reporting, advertising (for non-subscribers) and a subscription service, described below.
3. Photos you upload
Before your first upload the App asks for your consent and explains how your photos are handled. You can only use the photo features after you tap “I agree”.
- What we receive: only the photos you pick from your camera or gallery. The App does not read or upload the rest of your photo library.
- How they are processed: the photos are uploaded to our server and sent to fal.ai, which runs the AI models that create your results. fal.ai may route a request to model providers such as OpenAI (image models), Alibaba (Qwen), MiniMax, Kling or similar image and video model providers, depending on the template.
- Purpose limitation: photos are used only to create your results. We do not use them to train or improve AI models, for advertising, or to identify anyone.
- No biometric identification: we do not run facial recognition and do not create or store face templates or other biometric identifiers. The AI models use the photo itself to draw a new image that resembles the person.
- fal.ai copies: the copies of your photos that we upload to fal.ai are set to expire after about one day.
- Not shown to others: your photos and results are stored under random, unlisted addresses and are not shown to other users. They are only shared when you choose to save or share a result yourself.
4. Information we collect
Information you provide
- Photos of your baby, and optionally of the mother and father, and the profile names you enter.
- Your choices in the App, such as the templates you use and options like boy / girl / surprise.
- Messages you send us by email (your email address and what you write).
Information created when you use the App
- The images and videos generated for you (your “Creations”).
- A random app user identifier and access token, your coin balance, and records of your generations and purchases.
- Device and app information: device model, operating system and version, language, app version, IP address (used for security and approximate country), and a push notification token.
- Usage events (for example: screen opened, template chosen, generation started, paywall shown, purchase completed).
- Crash and performance reports.
- Advertising identifiers (IDFA on iOS only if you allow tracking; Android advertising ID), subject to your choices described in section 7.
We do not ask for your name, address, phone number or contacts, and we do not collect precise location.
5. How we use information and our legal bases
| Purpose | Data used | Legal basis (GDPR / KVKK) |
|---|---|---|
| Create your images and videos, keep your profiles and Creations | Photos, profile names, results, user identifier | Performance of our contract with you; your explicit consent for photos (including faces and photos of your child) |
| Coins, subscriptions, restoring purchases | User identifier, purchase history, store transaction ids | Performance of contract |
| Notify you when a result is ready and send occasional offers | Push token | Your permission in the device notification settings; legitimate interests |
| Understand how the App is used, fix crashes, improve features | Usage events, device information, crash reports | Legitimate interests; consent where required by law |
| Show and measure ads (non-subscribers) and measure our ad campaigns | Advertising identifiers, usage and purchase events | Consent (Google consent form in the EEA/UK, Apple ATT on iOS) where required; otherwise legitimate interests |
| Security, preventing abuse, complying with law | IP address, identifiers, request logs | Legitimate interests; legal obligation |
6. Service providers we share data with
We share data only with providers that help us run the App, and only what they need. We do not sell your photos or results.
| Provider | What it does | Data involved |
|---|---|---|
| fal.ai (and the model providers it uses, e.g. OpenAI, Alibaba Qwen, MiniMax, Kling) | AI image and video generation | Uploaded photos, prompts from our templates, generated results |
| Our hosting provider | Runs our server and stores profiles and results | All App data held on our server |
| Google Firebase (Analytics, Crashlytics, Cloud Messaging, Remote Config) | Analytics, crash reports, push notifications, app configuration | App instance id, usage events, device info, crash logs, push token |
| Mixpanel | Product analytics | User/app identifier, usage events, device info |
| Meta (Facebook SDK app events) | Measuring our ad campaigns | Anonymous app id, app events (such as install, purchase), advertising id where permitted |
| Google AdMob and Google User Messaging Platform | Showing ads to non-subscribers, collecting ad consent | Advertising id, device info, IP address, consent choices |
| Adapty | Subscriptions and in-app purchases | Customer/profile id, purchase history, device info, the analytics ids above (to connect purchases with analytics) |
| Apple App Store and Google Play | Payments, subscriptions, app distribution | Handled by the store under its own privacy policy; we never see your card details |
We may also disclose information if required by law, to protect our rights or users’ safety, or as part of a merger or sale of the business (in which case this policy will continue to apply to your data).
7. Ads, tracking and your choices
- Subscribers do not see ads. For other users the App shows ads through Google AdMob.
- EEA, UK and Switzerland:Google’s consent form asks whether ads may be personalised. You can change your choice at any time in Settings → Privacy options.
- iOS:the App asks for permission to track through Apple’s App Tracking Transparency prompt. If you decline, the advertising identifier is not shared and ads are not personalised. You can change this in iOS Settings → Privacy & Security → Tracking.
- Android:you can reset or delete your advertising ID in your device’s Google settings.
- Notifications: you can turn push notifications off in your device settings.
8. How long we keep data
| Data | How long |
|---|---|
| Profile photos (My baby, Mother, Father) | Until you delete the profile or use Clear All Data |
| Other uploaded photos (inputs for a single generation) | Deleted within 24 hours after the generation finishes; abandoned uploads are also removed after 24 hours |
| Copies of photos uploaded to fal.ai | Set to expire after about 1 day |
| Generated images and videos (Creations) | Until you delete them or use Clear All Data |
| User identifier, coin balance, purchase records | While you use the App; deleted on request (see section 9) |
| Analytics, crash and advertising data | According to the retention settings of each provider listed in section 6 |
| Emails with our support | As long as needed to answer you and keep a record of the request |
9. Deleting your data
- Delete a creation: open it in Creations and tap Delete.
- Delete a profile: in Profiles, delete the profile; its photos are deleted from our server.
- Clear All Data:in Settings, one tap deletes all your profiles, profile photos, generations and result files from our server and clears the App’s data on your device. Your coin balance and purchase records held by us are reset; active store subscriptions are not cancelled and can be restored.
- Delete everything by email: write to info@sunmaredijital.net (include your in-app user id if you can) and we will delete your account record and all associated data without undue delay, and at the latest within one month. Uninstalling the App alone does not delete data on our server.
10. Children
The App is intended for adults (18+), typically parents, and is not directed at children. Children should not use the App themselves.
Parents and legal guardians use the App to process photos of their own children. By uploading a child’s photo you confirm that you are the child’s parent or legal guardian, or have their permission, and you consent to the processing described here on the child’s behalf. We use these photos only to create your results and you can delete them at any time (section 9). If you believe a child’s photo was uploaded without proper consent, contact info@sunmaredijital.net and we will delete it.
11. International transfers
Sunmare Digital is based in Turkey. fal.ai and the model providers it uses, as well as Google, Meta, Mixpanel and Adapty, may process data in the United States and other countries. Where the GDPR, UK GDPR or Turkish data protection law (KVKK) requires it, we rely on appropriate safeguards such as standard contractual clauses or, where applicable, your explicit consent.
12. Security
Data is encrypted in transit between the App, our server and our providers. Photos and results are stored under random, non-public file names, access to our systems is restricted, and uploaded inputs are deleted automatically as described above. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
13. Your rights
Depending on where you live, you have rights over your personal data. To use any of them, email info@sunmaredijital.net. We will answer within one month (or sooner where the law requires) and may need to verify that the request comes from you.
- EEA / UK (GDPR): access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time (this does not affect processing before withdrawal). You may complain to your local data protection authority.
- Turkey (KVKK, Law No. 6698, Article 11): to learn whether your data is processed, request information about it, learn the purpose and the third parties it is transferred to in Turkey or abroad, request correction or deletion, object to results of automated analysis that are against you, and claim compensation for damage caused by unlawful processing. You may also complain to the Personal Data Protection Authority (KVKK Kurumu).
- California and other US states (CCPA/CPRA and similar): to know what personal information we collect, use and disclose; to delete and correct it; and to opt out of “sale” or “sharing” for cross-context behavioural advertising. We do not sell personal information for money. Some ad and measurement SDKs may count as “sharing”; you can opt out with the tracking and ad settings in section 7 or by emailing us. We will not discriminate against you for using your rights. We do not use sensitive personal information for purposes other than providing the App.
14. Changes to this policy
We may update this policy when the App or the law changes. We will post the new version on this page with a new effective date and, for significant changes, tell you in the App.
15. Contact
Sunmare Digital Teknoloji Yazılım Sanayi ve Ticaret Limited Şirketi
Email: info@sunmaredijital.net
Contact Sunmare Digital
For any questions about Baby AI or the documents on this page, please reach out to us.
info@sunmaredijital.net