Privacy Policy
This page describes how TinyBeats actually handles your data today. It is a working placeholder, not a final legal document — full legal review is still pending.
What we collect
- The heartbeat printout photo you upload
- Your baby's name and due/birth date, if you provide them
- Your email, for order confirmations and support
- Order and payment details — handled entirely by Stripe; we never see or store your card details
How your uploaded photo is used
Your photo is sent to Anthropic's Claude AI to check it's readable and to extract the heartbeat waveform. We only ever use the heartbeat curve itself — not any text, names, or dates on the printout — to build your poster or audio keepsake. Your original photo is deleted from our storage automatically once processing is complete, usually within minutes of your order being placed.
Redacting personal details is your responsibility
Before uploading, we provide a redaction tool so you can black out any personal information visible on your printout — name, date of birth, clinic details, and similar. Using it is a manual step you control. Because your photo is processed by a third-party AI system, we cannot take responsibility for personal information left visible in an image you upload without redacting it.
Who we share data with
- Anthropic (Claude AI) — to process your uploaded image
- Stripe — to process payment
- Prodigi — to print and ship physical orders
We do not sell your data, and we don't share it beyond what's needed to fulfil your order.
Your rights
You can delete your own data directly from your dashboard at any time, or contact us at diana@tinybeats.com and we'll do it for you. We only keep what tax authorities require us to retain, such as order and payment records — everything else is removed.
Compliance
We aim to handle your data in line with EU data protection principles. This page is a placeholder pending full legal review and does not by itself constitute a complete GDPR-compliant privacy policy.