Privacy Policy

Last updated: October 14, 2026

This Privacy Policy explains exactly what happens to your photos and other information when you use the Tiny Us app for iPhone and Android ("Tiny Us", "we", "us"). Tiny Us generates a fictional "future baby" image or clip from two adult photos. Please read this before uploading any photo.

What we collect, and why

When you generate a result, Tiny Us sends the following to our backend:

• The two parent photos you choose, downscaled and cropped to the face on your device before they leave it.
• A small set of non-identifying appearance numbers (coarse skin tone, hair color, and eye color buckets), used only to steer the generation so a mixed-ethnicity couple gets a genuine blend of both parents.
• An anonymous, app-generated identifier (a random ID created by the app on your device). We never collect your name, email, Apple ID, or Google account. It is used only to track your free results and any purchased credit balance. There is no Tiny Us account.

We do not collect your name, contact information, or location data. Tiny Us does not use facial recognition to identify who you are; the on-device face check only confirms a photo contains one clear adult face before upload.

On Android, the app asks for camera permission only if you choose to take a parent photo with the camera, and notification permission only to show the progress of an animated clip.

Third-party AI providers

To generate your result, our backend sends data to the following providers:

• OpenAI (image generation and a vision check). Your two parent photos are sent to OpenAI to produce the baby photo, and to assess skin tone and compare candidate results. This is the only provider that receives your parent photos.
• fal.ai, only if you purchase and use the "Meet them" animated clip feature. fal.ai receives only the generated baby image (never your parent photos) and makes the clip with a video model: PixVerse (first choice) or Kling (used as a backup if the first fails).
• ElevenLabs, for the short, non-verbal giggle or coo sound that plays with a clip. ElevenLabs receives only a fixed text description of the sound, never any photo or any information about you. Each sound is generated once and reused.

Tiny Us shows an in-app consent screen naming these providers before your first photo leaves your device, and asks you to confirm you are an adult and have the other person's agreement to use their photo, before you can upload anything.

How long photos are kept

Your parent photos pass through our backend in memory only for the time it takes to call the providers and return your result. We do not write them to a database or to our logs. Our backend keeps a copy of a finished result for up to 15 minutes only so that an automatic retry of the same request (for example after a dropped connection) does not charge you or generate twice; it is then discarded. We do not use your photos to train any model, and we do not use them for marketing.

Once a photo reaches OpenAI or fal.ai, it is handled under that provider's own API data policy, and those providers may keep inputs and outputs for a limited period (for example for abuse monitoring) that we do not control. Please see their policies for current details. We do not claim that these providers delete data instantly.

To power the "What if...?" feature (generating fun variations of the same result), your parent photo crops stay on your own device, in Tiny Us's app storage, after your first result, so they can be sent again for a later twist without asking you to re-pick them. You can delete every parent photo stored on your device at any time from Settings > Delete my photos, and they are removed when you delete the related result.

Where your results are stored

iPhone: your generated results (the baby image, clip, and any name you give it) are stored on your device in Tiny Us's own gallery, with optional sync through your own private iCloud account if you have iCloud enabled. We never receive or have access to your saved gallery.

Android: your results, clips, parent photo crops, and the local gallery database stay on your device and are excluded from Android Auto Backup and device-to-device transfer. Other small app data is not excluded and may be included in Android backups made by your device or Google, such as the anonymous identifier, your consent setting, and some generated files (such as shareable card images and finished clips with sound). We never receive or have access to your saved gallery.

What we keep on our servers

• Your credit balance, your count of free results used, and a record of each purchase (the order ID or purchase token), all keyed by the anonymous identifier. These records have no expiry. They exist so you keep the credits you paid for and are never credited twice for the same purchase.
• Short-lived bookkeeping markers (for example, whether a clip was charged or delivered) that expire after at most 30 days, plus a refund marker kept for up to a year.
• Basic technical logs such as which feature was called, error reasons, app version, and usage counts. These logs do not contain your photos or results.

Payments

iPhone: credit packs are one-time purchases processed entirely by Apple through StoreKit. Our backend verifies Apple's own signed purchase receipt to credit your balance.

Android: credit packs are one-time purchases processed entirely by Google Play. Our server verifies the purchase token with Google and stores the order ID and token so a purchase cannot be credited twice.

We never see or receive your card number, billing address, Apple ID, or Google account.

Android libraries and diagnostics

The Android app contains no analytics SDK and no advertising SDK. Two Google components are included. The Google Play Billing library handles purchases and sends technical diagnostics to Google. Google ML Kit face detection runs on your device, so your photos are not sent to Google for it, but ML Kit may send Google usage and performance diagnostics tied to a per-installation identifier. These are governed by Google's own policies.

What we do NOT do

• We do not create a Tiny Us account or ask for your name, email, or phone number.
• We do not use your photos for marketing, analytics, advertising, or to train any AI model.
• We do not sell or share your information with data brokers.
• We do not accept photos of children as input, and reject them on your device before any upload is attempted.

Deleting your data

Tiny Us has no self-serve deletion for server records, because there is no account. On your device, you can delete parent photos from Settings > Delete my photos and delete individual results from your gallery, or remove everything by uninstalling the app.

To request deletion of server records (credit balance, free-result count, purchase records), email info@bdsalesinc.ca. Because there is no account, we can delete records only if you can identify them. The app does not display the anonymous identifier anywhere, and the Android Report email includes only a result ID, not that identifier, so we generally cannot find your records from your name or email. For purchases, you can send us your Google Play order ID (from your Google receipt email) or your Apple transaction details, and we can look up and delete the matching purchase record. Uninstalling the app or clearing its data discards the identifier on your device. Photos held by OpenAI or fal.ai are subject to those providers' retention policies.

Reporting AI-generated content

On Android, each result has a Report action that opens an email to info@bdsalesinc.ca, pre-filled with the result ID. On iPhone, or if the action does not work, email us at that address and describe the result.

Children

Tiny Us is not directed at children and is not intended for use by anyone under 18. Only adult photos may be submitted; a photo detected as a child's face is rejected on your device before upload.

Contact

Questions about this policy or your data: info@bdsalesinc.ca.