"Future Baby Look-Alike Studio" (referred to below as "this App" or "we") is an entertainment application built on AI image generation: you upload two photos of people (or pick a celebrity photo) and we generate a predicted "future baby" portrait for your personal viewing and sharing.
We understand that photos and facial information are highly sensitive to you. This Policy therefore explains how we collect, use, store, share and protect your personal information, and what rights you have over it.
This Policy applies to all features of this App, including photo upload, AI generation, generation history, friend invitations and the purchase of generation credits. Please read it in full before use, in particular the clauses shown in bold. If you do not agree with this Policy, please stop using this App.
We follow the principle of "minimum necessity" and collect only what a specific feature requires. The table below lists every type of information we actually collect.
This App requests the following permissions or invokes the following WeChat capabilities. For each one, the trigger, the purpose and what happens if you decline are set out below — please read them before authorising.
Purpose: to obtain your WeChat user identifier, used to create and identify your account so that generation history and purchased credits belong to you.
When triggered: automatically when you first enter the App and tap Log in; no additional authorisation dialog is shown.
Purpose: to bind your account to your phone number as the unique identity basis, used to restore generation history across devices and to handle payment delivery and after-sales issues. This phone number is never used for marketing and is never provided to third parties for solicitation.
When triggered: only when you actively tap "Log in with WeChat / Bind phone number". Once your account has a bound phone number, we will not invoke this component again.
If declined: login cannot be completed, so photo upload and generation are unavailable.
Purpose: to select a photo from your album or take one with the camera, as the source material for generating the baby portrait.
When triggered: when you tap "Choose from album" or "Take photo" on the upload page. We read only the single photo you explicitly select; we never scan or upload your album.
If declined: photos cannot be uploaded, so no portrait can be generated.
Purpose: to save the generated portrait to your phone's album so you can keep or share it.
When triggered: only when you actively tap "Save to album" on the result page.
If declined: only the save feature is affected; generation and viewing history are unaffected. You can re-enable it at any time under "… (top right) → Settings".
Purpose: to copy your invitation code to the clipboard when you tap "Copy invitation code" on the invitation page, so you can share it with friends.
When triggered: only when you actively tap the copy button. This App never reads the contents of your clipboard.
Purpose: to read basic parameters such as screen size and status bar height for page layout and notch adaptation. This information is used on your device only and is not uploaded to our servers.
When triggered: provided by the WeChat base library at render time; it does not involve any privacy authorisation by you.
Purpose: to store your login credential, device identifier and pending invitation code on your phone so you do not have to log in every time.
When triggered: after a successful login, or when an invitation code needs to be buffered. You can clear this data under "Me → Clear cache".
Purpose: to communicate with our servers to perform photo upload, AI generation, and credit and order lookups.
When triggered: whenever you use any online feature. All data transmitted by this App is encrypted with HTTPS.
All of the above follow the WeChat Mini Program authorisation rules: they require a deliberate tap by you to be triggered, and you can revoke any granted permission at any time under "… (top right) → Settings".
Your information is used only for the following purposes:
If we ever need to use your information for a purpose not described in this Policy, we will notify you prominently in advance and obtain your consent.
Separate consent before the first photo upload. The first time you pick a photo on the "Upload photos" page, we first show a "Face Data Processing Notice" stating which provider and which model the photo goes to, how long it is kept on our servers, and that we perform no face recognition. Only after you tap "Agree and continue" is the photo read and uploaded. Tapping "Disagree" uploads nothing and does not affect browsing the app. You can withdraw that consent under "Profile → Withdraw AI photo processing consent"; the next upload will ask you again.
Your information is stored on cloud servers we lease within the People's Republic of China; there is no cross-border data transfer. The storage media are an encrypted database (accounts, orders, invitation relationships) and the server file system (photos and generation results).
Although we apply industry-standard security measures, please understand that the internet is not absolutely safe. If a personal information security incident occurs, we will notify you in a timely manner, by push notification or announcement, of the situation and the recommended response.
We do not sell your personal information. To deliver essential functionality, your information is shared with the following partners to the minimum extent necessary:
Provides login (user identifier retrieval), quick phone number verification, image content moderation, virtual payment and order lookup. Your authorisations and payments on the WeChat side are also governed by Tencent's own privacy policies.
To produce the "future baby" portrait we must submit the photos you uploaded and the generation parameters to ToAPIs (toapis.cn), which runs the gpt-image-2 model to produce the image. Photos are received through its upload endpoint and may, under its routing rules, be forwarded to upstream AI providers — its public subprocessors and data regions page does not identify a fixed upstream provider or processing region for this model.
We require this provider to process the photos only on our instructions and only to complete the generation you requested. Please note, however: its published retention policy currently states only a 90-day default for API call logs and does not itemise the retention of uploaded photos, generated media, backups or upstream copies, so we cannot promise on its behalf that third-party copies are deleted within 24 hours. The 24-hour deletion described in Section 5.2 refers to the source photos and intermediate files on our own servers, which is a separate matter from retention on the third party's side.
Provides server hosting, network and security protection. As a technical infrastructure provider it only carries data storage and transmission and does not participate in business data processing.
Outside the cases above, we may share your information only:
In the event of a merger, split, acquisition or similar change of entity, we will require the successor to remain bound by this Policy; otherwise we will seek your consent again.
Photos and face data are the most sensitive information we handle, so they get a section of their own: what we process, what for, who receives it, where it is stored, how long it is kept, and how to delete it.
The photo you select or take on the "Upload photos" page may show a recognisable face, yours or someone else's; the generated portrait may also retain facial features resembling the photo. The app and our servers perform no face recognition, no face matching and no identity verification, and build no face templates or user profiles — we extract nothing structured from facial features and use the photo purely as input to the image-generation model.
Please do not upload photos of other people that you have no right to use, and in particular do not upload photos of minors.
Two things only: completing the single generation you requested, and showing and letting you save the result on the "Records" page. Photos are not used for advertising, marketing, case studies or training our own models, and are never used to identify who is in the photo.
Apart from the cases listed in Section 6, photos are provided only, and only to the extent necessary to complete the generation, to:
We never sell or rent photos to anyone, and never provide them to data brokers or advertising platforms.
Source photos you upload are stored on cloud servers we lease within the People's Republic of China, reachable through links containing random identifiers and not indexed publicly. ToAPIs and its possible upstream providers process photos on their own infrastructure; their public pages give no fixed processing or storage region for this model — see Sections 6 and 12.
Source photos and the intermediate files of a generation run are removed by an automated cleanup task on our servers once 24 hours have passed since upload; the task runs every 5 minutes, so deletion may occur slightly after the 24-hour mark. Generated result images are kept until you delete the record or your account. Retention on the third party's side (ToAPIs and its upstream providers) is outside our control — see Section 6.
To the extent permitted by law, you have the following rights over your personal information:
For your safety, we may need to verify your identity first, and will respond within 15 business days of verification. For repetitive requests or requests beyond a reasonable scope, we may charge a reasonable cost or decline.
This App is intended for adults. If you are under 18, please read this Policy together with a parent or guardian and use this App only with their consent, and do not upload photos containing the likeness of others — especially minors.
If you are the guardian of a minor and have questions about that minor's personal information, or discover that a minor has used this App without your consent, please contact us using the details in Section 12; we will handle it promptly and delete the relevant information.
This App uses no advertising tracking identifiers and shares no data with third-party advertising platforms. We store the following data locally on your phone, solely to keep features working:
You can clear this data under "Me → Clear cache" (your login state is retained).
We may update this Policy in response to feature changes, laws and regulations, or platform rules. When we do, we will change the "Last updated" date at the top of this page and notify you prominently inside the App.
If an update involves a material change in how your personal information is processed (for example a new category of information collected, an expanded purpose of use, or a new recipient), we will obtain your consent again. If you do not accept the updated Policy, please stop using this App and contact us to delete your account.
If you have any question, comment or complaint about this Policy, or wish to exercise your rights of access, deletion or account closure, please contact us as follows:
We will reply within 15 business days after receiving your request and verifying your identity. If you are not satisfied with our reply, you may also complain to the competent authorities (cyberspace administration, market regulation, etc.) or bring an action before a court with jurisdiction.
Related document: Terms of Service (Chinese)