[{"data":1,"prerenderedAt":52},["ShallowReactive",2],{"legal:privacy:en":3},{"updated":4,"html":5,"toc":6},"2026-10-30","\u003Ch2 id=\"in-short\">In short\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>You upload two photos to get an AI picture of a possible child. We use them to make that picture and to check that they are safe to use, nothing else.\u003C\u002Fli>\n\u003Cli>Parent photos are deleted 24 hours after your result is made. Your browser keeps a copy on your device for 30 days, so you can use them again. Results are deleted after 30 days, or straight away when you delete your account.\u003C\u002Fli>\n\u003Cli>We do not recognise faces or store face data, and we never use your photos to train AI.\u003C\u002Fli>\n\u003Cli>You can delete your account yourself, at any time, from your \u003Ca href=\"\u002Faccount\">account page\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>We do not sell your data or show ads. Analytics cookies are only used if you accept them, and you can change your mind at any time.\u003C\u002Fli>\n\u003Cli>When you create an account, we note how you found us (for example the page you arrived on), to learn which of our pages bring people in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"who-is-responsible-for-your-data\">Who is responsible for your data\u003C\u002Fh2>\n\u003Cp>Little Us is run by WDLDV, a self-employed sole trader registered in Belgium. We are the controller of your personal data under the General Data Protection Regulation (GDPR).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>For anything about your data: our \u003Ca href=\"\u002Fcontact\">contact form\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We have not appointed a data protection officer. Write to the address above and the person who runs Little Us will answer.\u003C\u002Fp>\n\u003Ch2 id=\"what-we-collect-why-and-on-what-legal-basis\">What we collect, why, and on what legal basis\u003C\u002Fh2>\n\u003Ch3>Your account\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> your email address, your language, the date you signed up and, if you sign in with Google, the identifier of your Google account. We also keep what is needed to sign you in: the sign-in codes and links we email you (valid for 15 minutes) and your session while you are signed in.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to sign you in, keep your credits and results together, and email you sign-in codes and receipts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> the contract with you (Article 6(1)(b) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you sign in with Google, Google shares your email address and your account identifier with us, nothing else. Google is a separate controller for its part, under its own privacy policy.\u003C\u002Fp>\n\u003Ch3>Your photo and the other person's photo\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> one photo of you and one of the other person, the options you choose (boy, girl or twins; baby, child or teen; photo or family portrait) and your confirmation that both of you agreed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>How we use them:\u003C\u002Fstrong> when you upload a photo, we remove hidden information from the file, such as where it was taken. We then check it automatically (see "Automated checks" below), store it privately and send it to our image generation provider to make your result.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to make the result you asked for.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> for your own photo, the contract with you (Article 6(1)(b) GDPR). For the other person's photo, their consent (Article 6(1)(a) GDPR). You must ask for it before you upload their photo, and you confirm it before every generation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We do not use photos to recognise or identify anyone, and we store no face data that could identify a person. For that reason we do not process these photos as biometric data in the sense of Article 9 GDPR.\u003C\u002Fp>\n\u003Ch3>Your results\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> the AI-generated photos, family portraits, previews and videos, with the options used to make them.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to show them in your account and let you download or share them.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> the contract with you (Article 6(1)(b) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Sharing sends the file itself from your device. We never create a public link to your results.\u003C\u002Fp>\n\u003Ch3>Purchases and credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> the pack you bought, its price, the date, the payment status, Stripe's reference for the payment, your request for immediate delivery, and a record of the credits added to and used from your account. We never see your card or bank details: Stripe handles them.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to deliver your credits, show your balance, return credits when something fails, handle refunds and keep the accounts that Belgian law requires.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> the contract with you (Article 6(1)(b) GDPR) and, for keeping the records, our legal obligations under Belgian accounting and tax law (Article 6(1)(c) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>The free preview\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> a one-way code made from your email address. It cannot be turned back into your address, but it shows us when the same address comes back. For 24 hours after your free preview, we also keep a similar code made from your IP address.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to give one free preview per person and stop the offer from being abused with extra addresses or accounts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> our legitimate interest in offering a free preview without abuse (Article 6(1)(f) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Reminder and offer emails, only if you ask\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> whether you ticked the box to receive them and when, when you unsubscribed, and when we sent you a reminder about your free preview.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to remind you by email that your free preview is still locked (a day after it is ready, and once more a few days before it is deleted), and to send you the occasional offer.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> your consent (Article 6(1)(a) GDPR). The box is unticked until you tick it. You can withdraw your consent at any time with the link in each of these emails or on your account page. Sign-in codes and receipts keep arriving.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Safety and security\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> your IP address and technical information about your browser, used to block bots and abuse; the reason a photo was rejected (for example "no face found", never the photo itself); and any report you send about a result.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to stop bots and abuse, keep photos of minors and unlawful content out, and keep the service secure. When you report a result, we look at that result to decide whether to remove it.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> our legitimate interest in a safe and secure service, and in protecting the people in the photos (Article 6(1)(f) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Analytics and error reports\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> we count page visits without cookies and without following you across other sites. When something breaks, we receive an error report with personal data removed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to know which pages are used and to find and fix errors.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> our legitimate interest in running and improving the site (Article 6(1)(f) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We also note on your account when you first sent a photo and when your free preview was ready, so we can count how many people go from one step to the next.\u003C\u002Fp>\n\u003Ch3>Google Analytics, only if you accept\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> if you accept analytics cookies, Google Analytics records the pages you visit on our site, how you arrived (for example from a search engine), your type of device and browser, your approximate location (country and city) and a random identifier kept in its cookies. It never receives your photos, your results or your email address. Its advertising features are switched off.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to understand which pages and tools are useful, and improve the site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> your consent (Article 6(1)(a) GDPR). If you reject analytics cookies, Google Analytics is not loaded at all. You can withdraw your consent at any time with "Cookie settings" at the bottom of every page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How you found us (Joinsight)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> when you create an account, Joinsight receives your account ID, your email address and how you arrived at the site in that browser tab: the first page you opened, the site you came from and any campaign tags in the link. Joinsight does not keep your email address itself, only a coded version of it (a keyed hash) and a masked form such as j•••@example.com. It never receives your photos or your results. To show which pages bring paying customers, it also reads our payments from Stripe: the amount, the date and your account ID. If you accept analytics cookies, Joinsight also keeps a random identifier in your browser and records, once per visit, the first page, the site you came from and the campaign tags, so a visit from before you signed up can be linked to your account.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to learn which pages, searches and posts bring the people who use Little Us, so we can do more of what works.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> for the record made when you create your account, our legitimate interest in knowing which of our pages and posts bring people in (Article 6(1)(f) GDPR). It is kept to a minimum: it does not follow you across other sites and is never used for ads. For the identifier in your browser and the visit records, your consent (Article 6(1)(a) GDPR). You can object to the record at any time through our \u003Ca href=\"\u002Fcontact\">contact form\u003C\u002Fa>, and we will delete it.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Messages you send us\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>What:\u003C\u002Fstrong> your email address, your message, the language of the page and, if you are signed in, your account. The bot check described under "Safety and security" also runs when you send the form.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why:\u003C\u002Fstrong> to read your message and answer you by email.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Legal basis:\u003C\u002Fstrong> the contract with you when your message is about your account or a purchase (Article 6(1)(b) GDPR), otherwise our legitimate interest in answering the people who write to us (Article 6(1)(f) GDPR).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>The free tools\u003C\u002Fh3>\n\u003Cp>The pregnancy and baby tools (due date, ovulation, blood type and the others) work in your browser. What you type into them is not sent to us. Favourite names you save in the baby name tool stay on your device.\u003C\u002Fp>\n\u003Ch3>On your device\u003C\u002Fh3>\n\u003Cp>So you do not lose your photos and choices when you sign in or go to payment, the generator saves your form in your browser, on your device only, for at most 2 hours. Nothing is sent to us until you press the button to make your photo.\u003C\u002Fp>\n\u003Cp>After your photos have been uploaded, your browser also keeps a copy of them, linked to your account, so they are filled in the next time you make a photo. Someone else signing in on the same device does not see them. They are removed 30 days after their first upload, or sooner when you remove them, choose different photos, sign out or delete your account. The \u003Ca href=\"\u002Fcookies\">cookie policy\u003C\u002Fa> lists everything the site stores on your device.\u003C\u002Fp>\n\u003Ch2 id=\"automated-checks\">Automated checks\u003C\u002Fh2>\n\u003Cp>When you add a photo, your browser first checks it on your device, so you get instant tips. Nothing is sent to us for this.\u003C\u002Fp>\n\u003Cp>After upload, our server checks the photo again automatically. A photo is rejected if it shows no face, more than one face, a face that is too small, someone who looks under 18, nudity or violence. Rejected photos are not stored; we only keep the reason. Our image generation provider also applies its own safety filters.\u003C\u002Fp>\n\u003Cp>These checks do not recognise who anyone is. They decide automatically whether a photo can be used, but this decision has no legal effect on you and does not affect you in a similarly significant way (Article 22 GDPR). If you think a photo was rejected by mistake, try another photo or write to us.\u003C\u002Fp>\n\u003Ch2 id=\"ai-generated-content\">AI-generated content\u003C\u002Fh2>\n\u003Cp>Every photo we make carries a small visible "AI-generated" mark, and information inside the file that says it was made by AI. The free preview carries the mark too, and videos are made from that marked photo. We do this to meet the transparency rules of the EU AI Act.\u003C\u002Fp>\n\u003Cp>Results are entertainment. They are not a genetic prediction of what a real child would look like.\u003C\u002Fp>\n\u003Ch2 id=\"we-never-use-your-photos-to-train-ai\">We never use your photos to train AI\u003C\u002Fh2>\n\u003Cp>We do not use your photos or your results to train or improve AI models. We send photos to our generation provider only to make the result you asked for, and its terms do not allow it to use them to train its own models.\u003C\u002Fp>\n\u003Ch2 id=\"who-receives-your-data\">Who receives your data\u003C\u002Fh2>\n\u003Cp>We use the providers below. Each one processes data only on our instructions, under a data processing agreement.\u003C\u002Fp>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Provider\u003C\u002Fth>\n\u003Cth>What they do for us\u003C\u002Fth>\n\u003Cth>Data involved\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\u003Ctr>\n\u003Ctd>Cloudflare\u003C\u002Ftd>\n\u003Ctd>Hosting of the site, database and file storage (in the EU), the automatic photo check, the bot check and cookie-free analytics\u003C\u002Ftd>\n\u003Ctd>All data described in this policy, including photos and results\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>fal.ai\u003C\u002Ftd>\n\u003Ctd>Runs the AI models that make photos and videos\u003C\u002Ftd>\n\u003Ctd>Your two photos (photos and family portraits); your unlocked photo (videos)\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Google and Kling AI, via fal.ai\u003C\u002Ftd>\n\u003Ctd>Make the images (Google) and the videos (Kling AI)\u003C\u002Ftd>\n\u003Ctd>The same data as fal.ai\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Stripe\u003C\u002Ftd>\n\u003Ctd>Payments\u003C\u002Ftd>\n\u003Ctd>Your email address, the order and your payment details\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Brevo\u003C\u002Ftd>\n\u003Ctd>Sending sign-in emails, receipts and the reminders you asked for\u003C\u002Ftd>\n\u003Ctd>Your email address and the content of the email\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Sentry\u003C\u002Ftd>\n\u003Ctd>Error reports\u003C\u002Ftd>\n\u003Ctd>Technical error data, with personal data removed\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Google (Google Analytics)\u003C\u002Ftd>\n\u003Ctd>Measuring visits to the site, only if you accept analytics cookies\u003C\u002Ftd>\n\u003Ctd>Pages visited, device and browser type, approximate location, the cookie identifier\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Joinsight\u003C\u002Ftd>\n\u003Ctd>Measuring which pages and posts bring the people who sign up and pay (hosted in the EU)\u003C\u002Ftd>\n\u003Ctd>Account ID, a coded version of your email address, how you arrived, payments\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\u003C\u002Ftable>\n\u003Cp>Stripe may also process some data as a separate controller to meet its own legal obligations, under its own privacy policy. If you choose to sign in with Google, Google is a separate controller too (see "Your account" above).\u003C\u002Fp>\n\u003Cp>Messages you send with the contact form reach us through Discord (Discord Inc.), in a private channel that only we can read. We do not keep them on our own servers. Discord stores them under its own privacy policy.\u003C\u002Fp>\n\u003Cp>We do not sell your data and we do not share it with advertisers. We only give data to authorities when the law requires us to.\u003C\u002Fp>\n\u003Ch2 id=\"transfers-outside-the-eu\">Transfers outside the EU\u003C\u002Fh2>\n\u003Cp>Our database and stored files are kept in the EU. Some providers are based outside the EU or may process data there: fal.ai, Google, Cloudflare, Stripe, Sentry and Discord in the United States, and Kling AI in Singapore.\u003C\u002Fp>\n\u003Cp>These transfers are protected by the European Commission's standard contractual clauses or, where the provider is certified, by the EU-US Data Privacy Framework. You can ask us for a copy of these safeguards.\u003C\u002Fp>\n\u003Ch2 id=\"how-long-we-keep-your-data\">How long we keep your data\u003C\u002Fh2>\n\u003Ctable>\n\u003Cthead>\n\u003Ctr>\n\u003Cth>Data\u003C\u002Fth>\n\u003Cth>How long\u003C\u002Fth>\n\u003C\u002Ftr>\n\u003C\u002Fthead>\n\u003Ctbody>\u003Ctr>\n\u003Ctd>Parent photos\u003C\u002Ftd>\n\u003Ctd>24 hours after your result is made (24 hours after upload if no result is made). Rejected photos are not stored.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Results (photos, previews, family portraits, videos)\u003C\u002Ftd>\n\u003Ctd>30 days, or until you delete your account if that comes first\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Account\u003C\u002Ftd>\n\u003Ctd>Until you delete your account\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Sign-in codes and links\u003C\u002Ftd>\n\u003Ctd>Valid for 15 minutes, deleted a day later\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Sessions\u003C\u002Ftd>\n\u003Ctd>30 days, or until you sign out or delete your account\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Orders and credit history\u003C\u002Ftd>\n\u003Ctd>7 years, as Belgian accounting law requires. After you delete your account they no longer name you.\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Free preview code made from your email address\u003C\u002Ftd>\n\u003Ctd>As long as we offer the free preview, also after you delete your account\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Free preview code made from your IP address\u003C\u002Ftd>\n\u003Ctd>24 hours\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Your choice about reminder and offer emails\u003C\u002Ftd>\n\u003Ctd>Until you delete your account\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Reports about a result\u003C\u002Ftd>\n\u003Ctd>Until you delete your account\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Messages sent with the contact form\u003C\u002Ftd>\n\u003Ctd>Until your question is settled, and at most 12 months\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Record of support and moderation actions\u003C\u002Ftd>\n\u003Ctd>2 years\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Technical logs\u003C\u002Ftd>\n\u003Ctd>At most 30 days, never containing photos\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Error reports\u003C\u002Ftd>\n\u003Ctd>90 days, with personal data removed\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Google Analytics data\u003C\u002Ftd>\n\u003Ctd>2 months\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Analytics cookies on your device\u003C\u002Ftd>\n\u003Ctd>13 months after your last visit; removed when you withdraw your consent\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>How you found us (Joinsight)\u003C\u002Ftd>\n\u003Ctd>As long as we use Joinsight, or until you object\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Joinsight identifier on your device\u003C\u002Ftd>\n\u003Ctd>Removed when you withdraw your consent, or when we ask for it again after 6 months\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003Ctr>\n\u003Ctd>Form and photos saved on your device\u003C\u002Ftd>\n\u003Ctd>The form for at most 2 hours, the photos for 30 days (see "On your device" above)\u003C\u002Ftd>\n\u003C\u002Ftr>\n\u003C\u002Ftbody>\u003C\u002Ftable>\n\u003Cp>Deletion happens automatically. Our database provider keeps backups for up to 30 days; deleted data disappears from them when they expire.\u003C\u002Fp>\n\u003Ch2 id=\"deleting-your-account\">Deleting your account\u003C\u002Fh2>\n\u003Cp>You can delete your account yourself on your \u003Ca href=\"\u002Faccount\">account page\u003C\u002Fa>. It takes effect immediately:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>your uploaded photos, results, sessions, reports and pending sign-in codes are deleted, and so are the photos saved on the device you delete it from;\u003C\u002Fli>\n\u003Cli>your email address and Google link are removed from your account;\u003C\u002Fli>\n\u003Cli>orders and the credit history are kept for 7 years for Belgian accounting, but no longer name you;\u003C\u002Fli>\n\u003Cli>the free preview code made from your email address is kept, so a new account with the same address does not get a second free preview;\u003C\u002Fli>\n\u003Cli>unused credits are lost.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Stripe keeps its own payment records under its own rules, and emails we already sent stay in your inbox.\u003C\u002Fp>\n\u003Ch2 id=\"your-rights\">Your rights\u003C\u002Fh2>\n\u003Cp>You have the right to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>access\u003C\u002Fstrong> the data we hold about you and get a copy;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>correct\u003C\u002Fstrong> data that is wrong;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>erase\u003C\u002Fstrong> your data (most of it you can delete yourself, see above);\u003C\u002Fli>\n\u003Cli>\u003Cstrong>restrict\u003C\u002Fstrong> how we use your data while a question is being sorted out;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>object\u003C\u002Fstrong> to uses based on our legitimate interest;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>port\u003C\u002Fstrong> the data you gave us, in a common machine-readable format;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>withdraw your consent\u003C\u002Fstrong> at any time, where we rely on consent. This does not affect what was done before you withdrew it.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To exercise these rights, use our \u003Ca href=\"\u002Fcontact\">contact form\u003C\u002Fa>, ideally with the email address of your account. We may ask you to confirm it is you. We answer within one month; if a request is complex, we may extend this by two more months and will tell you why. It is free.\u003C\u002Fp>\n\u003Ch3>If your photo was uploaded by someone else\u003C\u002Fh3>\n\u003Cp>You have the same rights, even without an account. Parent photos are deleted 24 hours after the result is made in any case. Because we store no face data, we cannot search for you by your face: tell us the email address of the person who uploaded your photo, if you know it, and we will delete the results made from it. You can also report misuse to us through our \u003Ca href=\"\u002Fcontact\">contact form\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch2 id=\"complaints\">Complaints\u003C\u002Fh2>\n\u003Cp>If you are unhappy with how we handle your data, please write to us first. You can also complain to the Belgian Data Protection Authority:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Data Protection Authority (Gegevensbeschermingsautoriteit \u002F Autorité de protection des données)\u003C\u002Fli>\n\u003Cli>Drukpersstraat 35 \u002F Rue de la Presse 35, 1000 Brussels, Belgium\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.dataprotectionauthority.be\">www.dataprotectionauthority.be\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you live or work in another EU country, you can also complain to the data protection authority there.\u003C\u002Fp>\n\u003Ch2 id=\"age\">Age\u003C\u002Fh2>\n\u003Cp>Little Us is for adults. You must be 18 or older to use the generator, and both people in the photos must be adults. Photos that appear to show someone under 18 are rejected.\u003C\u002Fp>\n\u003Ch2 id=\"security\">Security\u003C\u002Fh2>\n\u003Cp>The site only works over an encrypted connection. Your files are stored privately and are only shown to the account they belong to. Sign-in codes and links work only once, and sign-in and the free preview are protected against bots and abuse. If a data breach puts your rights at risk, we will tell the Data Protection Authority and, where the law requires, you.\u003C\u002Fp>\n\u003Ch2 id=\"changes-to-this-policy\">Changes to this policy\u003C\u002Fh2>\n\u003Cp>When we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you by email before it applies.\u003C\u002Fp>\n",[7,10,13,16,19,22,25,28,31,34,37,40,43,46,49],{"id":8,"text":9},"in-short","In short",{"id":11,"text":12},"who-is-responsible-for-your-data","Who is responsible for your data",{"id":14,"text":15},"what-we-collect-why-and-on-what-legal-basis","What we collect, why, and on what legal basis",{"id":17,"text":18},"automated-checks","Automated checks",{"id":20,"text":21},"ai-generated-content","AI-generated content",{"id":23,"text":24},"we-never-use-your-photos-to-train-ai","We never use your photos to train AI",{"id":26,"text":27},"who-receives-your-data","Who receives your data",{"id":29,"text":30},"transfers-outside-the-eu","Transfers outside the EU",{"id":32,"text":33},"how-long-we-keep-your-data","How long we keep your data",{"id":35,"text":36},"deleting-your-account","Deleting your account",{"id":38,"text":39},"your-rights","Your rights",{"id":41,"text":42},"complaints","Complaints",{"id":44,"text":45},"age","Age",{"id":47,"text":48},"security","Security",{"id":50,"text":51},"changes-to-this-policy","Changes to this policy",1793362217901]