Privacy Policy

Effective: July 27, 2026

This policy explains what Hush (operated by Ember Ventures Ltd) collects, why, and your choices. We built Hush to be private by default: core features work without an account, and your data lives on your device unless you choose to sync it.

1. What we collect

• Baby profile you enter (name, birth date, feeding/sleep answers): stored on your device; synced to our servers only if you create an account.
• Scan video and audio (~6-second clips): sent securely to our servers and AI processing partners to generate your analysis, then not retained by us as media — we keep only the resulting text analysis in your history.
• Account data (email) if you sign up, via our infrastructure provider Supabase.
• Purchase state via Apple/Google and our subscription processor RevenueCat (we never see your payment details).
• Basic usage analytics (e.g., screens used, anonymous device identifier) to improve the app. No ad tracking, no data sales.

2. How AI processing works

To produce a reading, Hush sends the following to third-party AI providers: the 6-second video you record, the audio from it, your baby's profile answers (age, feeding, sleep, any health notes you entered), and anything you type to Dr. Hush.

Those providers are:

• Google (Gemini) — reads the video and audio to identify the cry acoustics and body-language cues.
• Anthropic (Claude) — turns those findings into your reading, and answers Dr. Hush questions.

Both operate under API agreements that prohibit them from using your content to train their models. Clips are processed transiently to produce the analysis and are not retained on our servers afterwards.

We ask for your explicit consent inside the app before any of this is sent. The first time you start a scan or message Dr. Hush, Hush shows a disclosure naming what is sent, who receives it and why, and nothing leaves your device unless you agree. You can withdraw consent at any time by deleting your account.

3. Children's data

Hush is a tool for parents and guardians and is not directed at children. Videos necessarily feature your child; by using the Service you confirm you are the child's parent/guardian (or have their permission) and consent to this processing. We collect no data from children directly.

4. Sharing

We share data only with the processors needed to run the Service (hosting: Vercel; database/auth: Supabase; AI analysis: Google, Anthropic; subscriptions: RevenueCat, Apple, Google). We do not sell personal data and do not share it for advertising.

5. Retention and deletion

Local data stays on your device until you delete the app or clear it in-app. If you have an account, you can delete it in the app (Settings → Delete account) — this permanently deletes your account and all associated cloud data. You can also email us to request deletion.

6. Security

Data in transit is encrypted (HTTPS). Cloud data is stored with access controls limiting each account to its own rows. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Your rights

Depending on your region (e.g., GDPR/CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to processing. Contact us to exercise them.

8. Changes and contact

We'll post any material changes here with a new effective date. Questions or requests: support@hushbabyapp.com