UltFace is published by DENOVATE LTD (“we”, “us”, “our”), registered at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
This policy explains what data UltFace processes, why, and how we handle your privacy when you use our web app, progressive web app (PWA), related APIs, and (where offered) companion mobile clients (together, the “Service”).
TL;DR
- You can start as a guest on a device; you may optionally link a Google account to save your studio across devices.
- When you generate a keepsake, we process the photos or ultrasound scans you upload and related form inputs to create an artistic AI preview.
- Credits purchases are processed by Stripe. We do not store full card numbers.
- AI generation may use third-party model providers under contract. Outputs are entertainment keepsakes, not medical advice.
- We do not sell your personal data or use third-party advertising trackers in the Service.
1. Data controller
Your personal data is processed by DENOVATE LTD as the data controller:
- Company: DENOVATE LTD
- Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Email: support@denovate.app
2. Data we process
2.1 Account & device identifiers
Depending on how you use the Service, we may process:
- A device identifier stored on your device to restore a guest session
- Guest account records (internal ID, credit balance, timestamps)
- If you choose Continue with Google: Google subject ID, email, email verification status, display name, and profile picture URL provided by Google
- Authentication tokens needed to keep you signed in
Legal basis (GDPR / UK GDPR): contractual necessity and/or consent for optional Google linking (Article 6(1)(b)/(a)).
2.2 Uploads & generation inputs
When you create a keepsake, you may upload ultrasound images, parent photos, or other media and provide product form fields (for example style preferences). We process this content solely to run the generation flow you requested, deliver the result, and operate credits/job status.
Uploads may include sensitive imagery. Do not upload content you are not entitled to use. Avoid including unnecessary personal identifiers in filenames or notes.
Legal basis: contractual necessity (Article 6(1)(b)).
2.3 Generation outputs & job history
We store job metadata (product, status, progress, timestamps, credit usage) and output media URLs so you can view recent creations in your profile and retrieve results. Failed jobs may retain error diagnostics needed for support and reliability.
2.4 Credits & payment data
Credit balances and ledger entries are stored on our systems. When you buy credits, payment is processed by Stripe. Stripe receives payment details according to its own privacy policy. We typically receive transaction identifiers, pack purchased, amount, and fulfillment status — not your full card number.
Legal basis: contractual necessity (Article 6(1)(b)); legal obligations for accounting where applicable (Article 6(1)(c)).
2.5 Technical & security logs
We may process IP address, user-agent, approximate request timing, and error logs to secure the Service, prevent abuse, and diagnose outages. We do not use third-party advertising SDKs in the core web shell.
Legal basis: legitimate interests in security and service integrity (Article 6(1)(f)).
3. How we use your information
- Provide guest and verified account access
- Generate and deliver AI keepsake previews you request
- Maintain credit balances and fulfill purchases
- Show your recent creations and account status
- Provide customer support and investigate abuse or fraud
- Improve reliability and product quality using aggregated or anonymized signals where feasible
We do not sell your personal data, rent it, or use your ultrasound uploads for third-party advertising.
4. AI processing & third parties
Generation may involve cloud infrastructure and AI model providers (for example image/video generation APIs) acting as processors under contractual terms. Uploads and prompts necessary for a job may be transmitted to those providers to produce your preview. We configure providers for service delivery, not for selling your content as a marketing dataset.
Other processors may include:
- Google — optional sign-in / identity
- Stripe — credit pack checkout
- Hosting / object storage — application hosting and media storage
We may also disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction under appropriate safeguards.
5. Entertainment & medical disclaimer (privacy context)
UltFace produces artistic, entertainment-only previews. Outputs are imaginative visualizations and are not medical imaging, diagnosis, prediction of health outcomes, or clinical advice. Do not use results for medical decisions. Always follow guidance from qualified healthcare professionals regarding pregnancy care.
6. Data retention
We retain account, credit, and job data while your account is active and as needed to provide the Service. If you delete your account in Profile, we deactivate the account and remove or anonymize identifiers we no longer need (for example Google subject ID and email), subject to legal retention for transactions or dispute resolution. Generation media may be removed or become inaccessible after deletion or according to storage lifecycle policies.
7. Your rights (GDPR / UK GDPR / CCPA-style rights)
Depending on your location, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated personal data (subject to legal exceptions)
- Portability of data you provided, where applicable
- Object or restrict certain processing
- Withdraw consent where processing is consent-based (for example unlinking Google by signing out / deleting account)
- Lodge a complaint with your supervisory authority (UK: ICO)
To exercise these rights, email support@denovate.app. You can also use Delete account in the app Profile, or follow our Account deletion and Data deletion pages. We will respond as soon as possible and within thirty (30) days where required.
8. Children
UltFace is intended for adults. It is not directed to children under 13 (or under 16 in the EEA where a higher digital-consent age applies). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.
9. International transfers
Your information may be processed in the United Kingdom, European Economic Area, United States, or other countries where our providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be highlighted by updating the “Last updated” date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
11. Contact
Email: support@denovate.app
Postal: DENOVATE LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Related: Terms of Service