Privacy Policy

What we collect

• The Doppler printout image, ultrasound video, or heartbeat audio you choose to upload
• A heart location you select in a video, or a BPM value you enter, when automated analysis needs your help
• Your baby's name and due or birth date, if you provide them
• Your email, order, delivery, and payment-reference details. Stripe processes your card details; TinyBeats does not receive or store the full card number

Why and how we use heartbeat media

We process heartbeat media with your explicit consent to assess whether it can produce a keepsake, estimate rhythm where possible, and create the product you request. A Doppler printout image is sent to Anthropic's Claude AI after you have had the opportunity to redact visible personal details. Ultrasound video and heartbeat audio are not sent to Anthropic; they are analysed by TinyBeats' own server-side tools. These analyses are for keepsake creation and are not medical advice or a diagnostic service.

We use the resulting heartbeat curve, rhythm-based visualization, or BPM-based visualization to create your keepsake. Original media is kept in private storage while it is needed for processing or an available retry, then deleted automatically after successful processing or a terminal rejection. Unfinished unpaid uploads are scheduled for deletion after 24 hours.

Redacting Doppler printouts

Before uploading a Doppler printout, we provide a redaction tool so you can black out names, dates, clinic details, and similar information. Review the image carefully and redact anything that is not needed for the keepsake. Video and audio follow the separate server-side analysis path described above.

Our reasons for processing

We rely on your explicit consent to process the heartbeat media you upload. We process order and delivery information because it is necessary to provide your requested product, and retain limited transaction records where required by tax or accounting law. You may withdraw consent for future processing, but this does not undo processing already lawfully completed and may prevent us from completing a pending keepsake.

Who receives data

• Anthropic (Claude AI) � redacted Doppler printout images only
• Supabase � private application data and media storage
• Stripe � payment processing
• Prodigi � the information needed to print and ship physical orders

We do not sell your personal data. We share only what is needed for the stated service purpose.

Your rights

Depending on applicable law, you may ask to access, correct, delete, restrict, or receive a copy of your personal data, object to some processing, withdraw consent, or complain to your data protection authority. You can delete supported data from your dashboard or contact diana@tinybeats.com. Some order and payment records may need to be retained for legal obligations.

Legal review status

This notice is designed to describe the current product behaviour accurately, but it still requires review for the business's actual controller identity, contact details, international-transfer safeguards, processor agreements, detailed retention schedule, and supervisory-authority information before public launch.