This Privacy Policy explains what information the BabyCry AI: Vision Translator mobile application ("BabyCry AI", "the app", "we") collects, how we use it, and the choices you have.
1. Who the app is for
BabyCry AI: Vision Translator is an app for parents and caregivers of babies and young children. It is not directed to children under 13. It is designed to be used by adults who photograph their own baby and view AI-generated suggestions about the baby's likely state.
2. Information we collect
2.1 Photos you take with the app
When you tap the scan button, the app captures up to 4 photos with your device camera. These photos are transmitted to our backend server (Cloudflare Workers) and from there to Anthropic's Claude AI for analysis.
Purpose: the only purpose is to run the AI analysis and return a text result to you.
Retention on our servers: the photos are processed in-memory during the request and are not stored or logged on our servers after the response is returned. No database, no file storage.
Retention on Anthropic's servers: photos are sent to Anthropic's API. Per Anthropic's policy, API inputs may be retained for up to 30 days for abuse monitoring and are not used to train their models. See https://www.anthropic.com/legal/privacy
On-device storage: AI text results that you save to History, along with a short text summary (no photo), are stored locally on your device only (AsyncStorage). Photos themselves are not saved on your device by the app.
2.2 Account information (required after 5 free scans)
After 5 free scans on a device, you must create an account to continue. The account stores:
Email address — used to log in, send verification links, password resets, prize emails, and (if enabled) referral notifications.
Password — stored only as a one-way bcrypt-style hash. We never see your plaintext password.
Display name — a public handle you choose; appears on the leaderboard if you opt in to referrals. Display names are also publicly verifiable at signup (exact-match only, rate-limited) so a new user can credit a referrer by name without needing a code.
Email verification status, account creation date, last login.
Authentication tokens (access + refresh) issued to your device after login. These live in your device's AsyncStorage and on our server's session table.
2.3 Baby profile information (optional)
If you fill in a Baby Profile (name, age in months, gender, weight, development notes, care notes, care logs — feedings, sleep, diapers, etc.), this information is:
Stored locally on your device only (AsyncStorage).
Sent to our backend with each analysis request so the AI can personalize its answer. It is discarded after the response in the same way as photos.
Never retained or logged on our servers.
2.4 Subscription and payment data
If you subscribe ($13.99/month, or $2.99 / free with referral discounts), payments are handled entirely by Google Play Billing (Android) or Apple App Store (iOS). We never see your credit card, address, or full payment details.
We do receive and store:
Your subscription status (active / cancelled / grace period / on hold), plan tier, current period end, billing dates, payment count, and store-issued purchase token.
This is required to grant in-app access, count payments toward referral qualifying, and apply discounts.
2.5 Referral system data
If you participate in the referral program, we store:
Your referral code (a short alphanumeric string).
The list of users who signed up using your code, their display name, signup date, and current qualifying status (which we derive from their subscription payment history).
Your discount-track and gift-card-track totals, redemption history, and earned milestones.
Reverse pointer on each user record indicating who referred them, if any.
2.6 Anti-fraud / technical data
To prevent referral abuse and protect the prize pool, we store:
Device UUID — a random identifier created locally on your device on first launch and included with signups, logins, and scans. We use it to enforce the 5-free-scans limit per device and to detect re-installs that try to claim free scans repeatedly.
IP address — visible to Cloudflare on every request, used for rate limiting and abuse prevention. We do not retain it in long-term application logs.
Failed login attempts — counted per email and per IP for brute-force protection.
2.7 Notification preferences
You can toggle three classes of email notifications (referral progress, referral qualified, gift-card milestones) from the Notification preferences screen. Your choices are saved on the server with your account.
2.8 What we do not collect
We do not use third-party analytics SDKs, advertising SDKs, crash reporters, or any cross-app tracking.
We do not collect precise location, contacts, microphone audio, or device fingerprints beyond the random UUID above.
3. How we use the information
To run AI analysis on the photos you submit and return a result.
To tailor the AI result to the baby profile you have set.
To create and authenticate your account.
To send you transactional email: verification, password reset, subscription receipts, referral status, gift-card delivery.
To operate the subscription and apply referral discounts you have earned.
To detect and prevent fraud, abuse, and rate-limit violations.
To deliver Amazon gift cards by email when you reach a milestone.
We do not sell or rent your data. We do not share your data with advertisers. We do not use your photos or baby information to train any AI model.
Email delivery provider — used to send verification, transactional, and prize emails. Email content includes your address, display name, and the message body only.
Amazon.com, Inc. — gift cards are delivered via Amazon's electronic gift card system. We provide Amazon with the recipient email and amount only.
5. Children's privacy
BabyCry AI is intended for use by parents and adult caregivers. While the content processed includes photos of babies, the user of the app is an adult. We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has created an account, contact us and we will delete the account and all associated data.
6. Your rights and choices
Delete History and Baby Profiles: use the controls in History and My Babies. These live only on your device.
Notification preferences: turn off any class of email under About → Notification preferences.
Cancel subscription: in Google Play / Apple App Store account settings. Access continues until end of current period.
Delete your account and all server-side data: email support@babycryai.app from the email on the account, or open About → Delete all my data which removes local data and signs you out. Server-side account deletion is processed within 14 business days; pending gift-card payouts will be honored unless you also opt out of payout.
Access / export: email support@babycryai.app and we will provide your account record within 30 days.
Uninstall: removes all local data; account and server-side data remain until you request deletion as above.
7. Security
All network traffic between your device, our backend, and AI providers uses HTTPS/TLS.
Passwords are stored only as one-way salted hashes; we cannot recover or read them.
Authentication uses short-lived access tokens (15 minutes) and rotating refresh tokens stored on the server. Logging out invalidates the refresh token immediately.
Sensitive endpoints are rate-limited per IP and per account.
8. Data retention
Photos: never retained on our servers (see §2.1).
Account record: kept while your account is active and for up to 30 days after you request deletion, then permanently removed except where law requires otherwise (e.g., tax records on prize payouts).
Subscription and payment events: retained for the period required by accounting/tax obligations (typically 7 years).
Referral records: retained for as long as the referring or referred account exists, since they affect prize calculations.
Refresh tokens: expire after 30 days of inactivity, or immediately on logout.
Failed-login records: retained for 90 days for abuse analysis, then deleted.
9. International users
The app may be used globally. By using the app you understand that your requests are processed on servers operated by Cloudflare and Anthropic, which may be located outside your country of residence.
10. Changes to this policy
We may update this policy. The "Effective date" at the top will change. Material changes will be communicated via an in-app notice or email before taking effect when reasonably possible.
11. Contact
Questions or requests: support@babycryai.app (preferred) or yosefchaimdayan@gmail.com