Privacy Policy

BabySize's operator ("we", "us") is responsible for processing personal information in the website service. This policy explains what information we collect, how we use and protect it, and the choices you can make.

The report measurements you enter may reflect pregnancy and health status, so they deserve special protection. We process this information only to provide the image generation, history, and other services you choose; we do not sell it or use it for targeted advertising. Saving to history is a separate, optional feature.

1. Information we process and why

We process the following information only to the extent needed to provide the service:

• Report measurements and image generation data: The measurements and other parameters you enter are sent to our servers to calculate and return a size illustration. The parameters, image data, and generation and export records are used to provide the image service, understand usage, and troubleshoot problems. These records are stored on our servers, accessible only to authorized personnel, and kept separately from any account history you choose to save.
• History: When you choose to save a record, we store the measurements, record name, necessary account association, and save time in your account so you can view it again and generate images from it. Choosing not to save does not affect basic image generation or image export.
• Account information: The name, email address, authentication information, and profile picture or other details you choose to provide, as needed for registration, sign-in, and account management. If you choose third-party sign-in, we receive the necessary identity information you authorize us to receive.
• Access and usage information: IP address, device and browser information, access time, language, referral source, and basic usage data, used to maintain the service, analyze usage, troubleshoot, and prevent abuse.
• Text feedback: The text of messages you submit through "Contact Us" and the submission time are stored on our servers, accessible only to authorized administrators, to address issues and improve the service. You must sign in and verify before submitting; messages are not linked to your account, are limited to 1000 characters, and do not support attachments. Please do not submit unrelated medical reports or identity information.
• Contact information: The contact details and content you provide when you contact us, used to respond to inquiries and handle account or privacy requests. Please do not include medical reports or identity documents unrelated to your request.

Except for required account authentication and security processing, you can choose whether to provide optional information. If you decline to provide information required for a service, that service may not be available, but this will not affect other features that do not depend on that information.

2. Health information and your consent

When report measurements are linked to you or another identifiable individual, they may constitute sensitive health information. We use them only for the calculations you request, image display, the optional history service you choose, and maintenance of related features. We do not create health profiles, make medical diagnoses, or make automated decisions that significantly affect you.

We will obtain explicit consent before processing health information as required by applicable law, and will obtain separate authorization for storage, disclosure, or other specific processing when needed. Accepting the user agreement, registering an account, or continuing to browse does not replace any explicit consent required by law.

You may refuse optional processing, withdraw consent, or request deletion of relevant information. Declining account history saving does not affect basic image generation or image export, but it does not turn off the operation logs described above. If you refuse the parameter processing required for image generation, we cannot provide the corresponding calculation and display. Withdrawing consent does not affect processing already completed lawfully before the withdrawal.

Please use only your own information, or another person's information if you have a lawful basis and necessary authorization. We recommend using record names that do not contain real names, and avoiding submitting identity information unrelated to the service.

3. Legal bases for processing

Where the data protection laws of the European Economic Area or the United Kingdom apply, we process information on the following bases: necessary account and feature information to perform the service you request; necessary technical information based on our legitimate interests in keeping the service secure, troubleshooting, and reasonably improving the service, taking into account the impact on your rights; necessary information to comply with legal obligations or provide information as required by law; and your consent for optional features and processing that requires consent under applicable law. Where special category data such as health information is involved, we will also obtain any explicit consent required by law.

Where U.S. law applies, we comply with applicable consumer privacy and health data protection requirements, and provide additional notice and choices when required. This policy does not interpret your consent as blanket authorization for all future data uses.

4. Service providers and disclosure

We use Cloudflare's services to support website operation and data processing. Service providers process information only to the extent necessary to perform services on our behalf and are required to comply with applicable confidentiality and data protection requirements.

We do not sell or rent your personal information, do not share your health information for cross-site targeted advertising, and do not provide report measurements to advertisers. We will not publicly disclose your account or history because you use the service; any disclosure resulting from images you export or share yourself is your own decision.

Apart from providing the service you request, we provide necessary information only when we have the necessary authorization, to comply with legal obligations, to respond to lawful requests, or to protect safety and legitimate rights and interests as permitted by law. If personal information is transferred as part of a business transfer, we will notify you as required by law and require the recipient to continue providing appropriate protection.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, maintain security, and remember interface preferences and settings such as screen calibration. On first generation, we set a first-party browser identifier cookie that lasts up to one year, used to associate the generation and export operations of guest and signed-in users. If you clear cookies, a new browser identifier will be created on your next action, and existing server logs will not be automatically deleted. We may also use basic access statistics to understand how the service is used.

Non-essential cookies or similar processing that require consent under applicable law are used only after consent is obtained. You can manage your choices through the settings provided on the website or through your browser. Refusing non-essential processing does not affect basic services that do not depend on it; clearing essential cookies may sign you out.

6. Retention, deletion, and security

We retain personal information only for as long as needed for the purposes above: account information to maintain your account and the service; history for viewing and regenerating images for as long as you choose to keep it; generation and export operation logs only for the period needed to review usage and troubleshoot, accessible only to authorized administrators; and necessary security and contact records to address risks, requests, or legal obligations. When the processing purpose is fulfilled or there is no longer a lawful basis for retention, we will delete or anonymize the relevant information.

You can delete history records in your account, or contact us to request deletion of information and closure of your account, including generation and export operation logs. Deleting an individual history record in your account does not automatically delete the separate operation logs; requests to delete those logs must be handled together. After you delete a history record, its name and report measurements are removed from the online records. Necessary deletion status records and backups may be retained for a limited period solely for necessary security, recovery management, or legal obligations, and are cleaned up as required by applicable law. Deleting website data does not automatically delete images you have already exported or shared.

We take technical and organizational measures appropriate to the risk to limit unauthorized access, disclosure, alteration, and loss. No internet service can guarantee absolute security; if a security incident occurs, we will take timely remedial measures and meet our notification obligations as required by law.

7. International data processing

Because we use international service providers, your information may be processed in countries or regions outside your place of residence, where data protection rules may differ.

For information from the European Economic Area, the United Kingdom, or other regions protected by cross-border rules, we will use lawful transfer mechanisms and appropriate safeguards under applicable law, such as applicable adequacy decisions or standard contractual clauses, and supplementary measures where necessary. You can contact us to learn about the safeguards relating to your information or to request a copy as permitted by law. Accepting this policy does not by itself mean waiving the protections that apply to cross-border processing.

8. Your privacy rights

Depending on your region and applicable law, you may have the right to: know about and access your personal information; obtain a copy; correct or delete information; restrict or object to certain processing; obtain information in a portable format; withdraw consent; opt out of sale, certain sharing, or targeted advertising; and limit the use of sensitive information as permitted by law.

You can use the existing profile management and history deletion features in your account, or submit other requests, including account closure, through the contact details published on this website. We may perform necessary identity verification and will respond within the timeframes required by law; if we cannot fulfill a request, we will explain why and describe the applicable appeal process. You will not receive discriminatory treatment solely for exercising your privacy rights as permitted by law.

Users in the European Economic Area and the United Kingdom may lodge a complaint with their local data protection authority. U.S. users may submit requests through an authorized agent as permitted by law and, where required by applicable law, appeal the outcome of a request or seek relief from the relevant authority.

9. Minors

The service is intended for adults, is not directed to minors, and does not knowingly collect personal information from children. If you discover that a minor has provided personal information without appropriate authorization, please contact us, and we will verify the matter and take steps such as deletion as required by law.

10. Policy updates and contact

We will update this policy as laws or the service change and will note the update date. If there are material changes to data uses or your main rights, we will notify you through a prominent notice or other appropriate means; where the law requires new consent, we will obtain it separately.

If you have any questions about information processing, health information protection, or privacy rights, please contact us through the contact details published on this website.