Privacy policy

Updated November 3, 2026

BumpBeam creates AI baby portraits from an ultrasound image and optional parent-reference photos. This page explains the information used to provide that service.

Your photos

Selecting a photo previews it in your browser. When you choose Generate, the selected photos are uploaded to our server and sent through sub2api.meshvcs.com to the image-generation provider. We remove embedded image metadata during processing, but visible names or text within an image are not automatically removed. Upload only photos you have permission to use, including permission from the people shown.

We hold source photos temporarily in memory while processing a generation and do not persist them as server-side source files. Generated portraits are stored privately for up to 24 hours, are available only to the account that created them, and can be deleted earlier using the result controls. Refreshing or closing the page does not delete a portrait already generated on the server.

Google sign-in

We request only the openid, email and profile scopes. We use your Google account identifier, verified email address and account name to identify your account and restore your purchases. We also store your Google profile-picture URL to display your avatar; your browser loads that picture from Google without sending a page referrer. If no picture is available, we show your initial. We do not request access to Gmail messages, contacts or Google Drive. Google access and refresh tokens are not retained in our database.

Purchases and service records

Dodo Payments hosts checkout and processes payment details. We keep order identifiers, purchase status and credit usage to deliver photo packs and reconcile payments. Our server does not receive your full card details. Account and order records are kept separately from expiring photos. The current checkout integration uses Dodo test mode.

We also store task identifiers, timestamps, processing status, short error codes, account ownership and a hashed IP rate-limit identifier to operate the service and prevent abuse. Session tokens are stored as hashes. These records do not contain source filenames or source photos.

Cookies and your browser

Essential cookies support Google sign-in, your account session and language preference. Browser storage can remember a result identifier and language preference. Source photo selections stay in the current browser page; they are not saved as a persistent server-side draft.

Processing providers

Google, Dodo Payments and the image-generation gateway process information needed for their respective services. Image-provider routing and retention have not been independently verified. Providers may retain information under their own policies; deleting a BumpBeam result cannot recall a request already sent to a provider.

Questions and deletion requests

Use Delete in the result controls to remove a portrait immediately. For questions about account or order information, or to request its deletion, contact [email protected].