Privacy Policy | Thank You Baby AI

Last updated: October 31, 2026

Introduction

Thank You Baby AI ("we", "us", "our") operates the website thankyoubabyai.com (the "Service"). The Service turns a photo you upload into a short AI-generated video of the person in the photo dancing the "Thank You Baby" routine.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the choices you have. Because the Service is built around photos of people, often children, we have tried to be specific rather than generic.

If you have questions, email us at support@thankyoubabyai.com.

Summary

We collect your account details, the photos you upload, the videos generated from them, and your purchase history.
Your photo is sent to our AI video provider only to generate your video. We do not sell your photos or videos, use them to train AI models, or use them for facial recognition.
Uploaded photos are stored privately and kept for up to 30 days; generated videos are kept for up to 90 days, then deleted. Download anything you want to keep.
Payments are handled by Stripe. We never see or store your full card number.
You can delete your account at any time from Settings → Security.

Information We Collect

Information you give us

Account information: your name, email address and password (stored only as a secure hash) if you register with email, or your name, email address and profile picture from Google if you sign in with Google.
Photos you upload: the image file (JPG, PNG or WebP, up to 8 MB) you choose for a video, together with its file name, type and size. A photo may show you, your child, or another person who has agreed to appear.
Your consent confirmation: that you ticked the box confirming you have permission to use the photo.
Messages you send us: the content of emails or contact-form messages, and your email address.

Information created when you use the Service

Generated videos: the AI-generated video produced from your photo, and the status of each generation task (queued, generating, succeeded, failed).
Purchases and credits: the video package you bought, the amount, currency and payment status, and a record of credits added, used and restored. Stripe gives us a customer ID and payment reference; it does not give us your card details.

Information collected automatically

Session and security data: when you sign in, we record your IP address and browser user agent with your login session to keep your account secure.
Usage data: we use Google Analytics to understand how visitors use the site (pages viewed, approximate location derived from IP address, device and browser type, referring site). See our Cookie Policy.
Server logs: our hosting provider, Cloudflare, processes technical request data such as IP address and request time to deliver the site and protect it from abuse.

We do not ask for, and ask you not to upload, photos containing sensitive information such as identity documents, nudity or medical details.

How We Use Your Information

We use your information to:

Provide the Service: create and secure your account, store your photo, send it to our AI video provider, save and show you the resulting video, and let you download it.
Process payments and credits: take payment through Stripe, add credits to your account, deduct one credit per generation, and automatically restore the credit if a generation fails.
Communicate with you: send verification and password-reset emails, respond to support requests, and send product updates (see "Email updates" below).
Keep the Service safe: prevent fraud and abuse, enforce our Terms of Service, and investigate reports of misuse.
Improve the Service: understand aggregated usage patterns and fix problems.
Meet legal obligations: keep transaction records as required by tax and accounting law, and respond to lawful requests.

We do not:

sell or rent your personal data;
use your photos or generated videos to train or fine-tune AI models;
use your photos to create facial-recognition templates or identify people;
publish your photos or videos, or use them in marketing, without your separate, explicit permission.

Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the account, generations and purchases you request); consent (processing the photo you choose to upload, and sending product update emails if you subscribe); legitimate interests (security, fraud prevention, measuring site traffic and improving the Service); and legal obligation (keeping financial records).

How Your Photo Is Processed

You upload a photo after signing in. Before you sign in, the photo you picked stays only in your own browser (in IndexedDB storage) for up to 24 hours so it survives the login step; it is not sent to us until you are signed in.
The photo is stored privately in our cloud storage (Cloudflare R2). It is not public and is only accessible to your account.
When you start a generation, our AI video provider receives a temporary, signed link to your photo that expires after 24 hours. The provider uses the photo and our fixed reference dance to render the video.
When the video is ready, we copy it into our private storage and show it in My Videos.

We share personal data only with service providers that help us run the Service, and only as needed for the purposes above:

Provider	Purpose	Data involved
Cloudflare, Inc.	Hosting, database, file storage, caching, security, transactional email	All Service data, including photos, videos, account data and request logs
Kie.ai (AI model API provider) and the underlying video model provider (ByteDance Seedance)	Generating your video	Your uploaded photo (via temporary link) and the generated video
Stripe, Inc.	Payment processing	Your email, payment details (entered directly with Stripe), purchase amount
Google LLC	Google sign-in (if you choose it); Google Analytics	Google account name, email and picture; usage and device data
Resend	Product update emails (only if you subscribe)	Your email address and name
Internal team tools (e.g. Discord)	Notifying our team of new sign-ups and purchases	Name or email and event type

We may also disclose information if required by law, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of assets, in which case we will require the recipient to honor this policy.

International Transfers

Our providers operate globally, and your data may be processed in the United States and other countries outside your own. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.

How Long We Keep Data

Uploaded photos: up to 30 days after upload, then deleted.
Generated videos: up to 90 days after generation, then deleted. Please download any video you want to keep.
Account information: for as long as your account exists. When you delete your account, we delete your profile, photos, videos and generation history.
Purchase and credit records: kept for as long as required by tax and accounting law (generally up to 7 years), even after account deletion.
Login sessions: sessions expire after 7 days of inactivity.
Copies held by providers: our AI video provider may keep the files it processed for a limited period under its own retention policy before deleting them.
Backups and logs: may persist for a short period after deletion before being overwritten.

Email Updates

We only send product update emails if you choose to subscribe, for example in Settings → Notifications. Creating an account does not subscribe you. Every update email includes an unsubscribe link, and you can also email us to be removed. Account emails such as verification and password reset are not marketing and will still be sent while you have an account.

Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; to withdraw consent at any time; and to complain to your local data protection authority.

You can:

Delete videos and your account in Settings. Deleting your account permanently removes your account data and cannot be undone.
Unsubscribe from update emails using the link in any email or in Settings → Notifications.
Control cookies as described in our Cookie Policy.
Make any other request by emailing support@thankyoubabyai.com. We may need to verify your identity and will respond within 30 days.

California residents: we do not sell or "share" personal information for cross-context behavioral advertising, as those terms are defined in the CCPA/CPRA, and we do not use sensitive personal information to infer characteristics about you.

Children's Privacy

The Service is intended for adults. You must be at least 18 years old to create an account. We do not knowingly collect personal data directly from children.

The Service does let parents and legal guardians upload photos of their own children. If you upload a photo of a child, you confirm that you are that child's parent or legal guardian, or have their permission. We use such photos only to generate the video you request and handle them under the retention limits above. If you believe a child's photo has been uploaded without proper permission, contact us and we will delete it promptly.

Security

We use HTTPS encryption, private storage, signed expiring links for file access, hashed passwords, and access controls limited to your account. No system is completely secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access to your account.

Changes to This Policy

We may update this Privacy Policy from time to time. We will change the "Last updated" date above and, for material changes, notify you by email or a notice on the Service before they take effect.

Contact Us

Email: support@thankyoubabyai.com Website: thankyoubabyai.com/contact