Privacy

What we keep, and why.

A scan is personal. The original file is never kept: your browser turns it into plain 3D image data with the patient details removed, and that image data and your edits are saved to your account so the piece can be reworked later. You are always told before a finished result goes anywhere else.

The one exception is a file you choose to send us when the studio cannot open it. You are asked first and told it may carry the patient's details. The file is deleted when we are done with it, or within about a day of 90 days after you send it, whichever comes first, and you can delete it sooner from your account. A short record that you sent a file, with what the studio said about it and any reply, stays with your account.

If a file you send is a scan file, we thank you with one print at our cost, and it stays yours even if you delete the file. That offer, and any from a beta tester card or a gift, is kept on your account with when it was used. We may also ask, separately and in writing, whether we may show your baby's keepsake in our own pictures. Nothing is used unless a parent says yes, only what the question lists, and a yes can be taken back any time from your account.

Privacy notice version 13

Because a scan can show a pregnancy, we also have a Consumer Health Data Privacy Policy.

Your original scan file is never kept

The scan file is opened here in your browser, where it is turned into plain 3D image data and the patient details inside it, such as a name, a birth date or a clinic, are removed. Our servers check again and refuse anything that still carries them. We never upload or keep the original scan file, unless you choose to send it to us when the studio cannot open it, and you are asked first.

What we save to your account

The 3D image data made from your scan and every edit you make are saved to your account on our servers, so you can come back and rework the piece later. So are the details you type in the studio: a name, a due date or birth date, the weeks at the scan, and a note. Nothing is printed or published until you choose it. Making a keepsake page public publishes that piece's 3D image data with it, as the next sections say.

This is health information, and we treat it that way

The dates and weeks you type, and the 3D image data itself, can show a pregnancy. That makes them health information, which Washington's My Health My Data Act calls consumer health data. We keep it in your account to make, show and deliver your keepsake, and use it for nothing else unless you say yes to that separately. Our Consumer Health Data Privacy Policy says more.

What your account keeps

Your email address and, once you give it, the name you go by. Your request to join, what you wrote with it, our answer, and the studio you are linked to. Your pieces, each with its saved versions. Any order, with the recipient's name and shipping address. Your family page and keepsake pages, the choices you make and when you made them, any file you send us, any change you ask your studio for, and the invites you send or accept. A log of what happens in the account, such as a piece saved or a page made public, and a record of every request you make about your data. You can sign in from any device.

Who sees what

Your work is private to your account. A partner you invite shares the family account and sees everything in it. A studio you are linked to sees your name and email address, what you wrote if you asked to join through them, the pieces it made for you, how many public pages you have and how often they are viewed, and an email when you add a scan; it does not see the pieces you make yourself. Our staff see your request to join and what you wrote with it, your name and email address, how many pieces you have, the account's log, your requests about your data, any file you send us and any message you send us. If you buy a pro retouch, our retoucher works on that piece only while the retouch is open.

Your family page and keepsake pages

Each is private until you make it public, and you can make it private again at any time from your account. A family page shows your little one's first name, the words you write, one picture you choose and, if you choose, your studio. A keepsake page shows the finished 3D piece, the portrait in 3D, the name, the due date or birth date and the weeks at the scan you typed, a timeline worked out from those dates, your note, the photos you add, and a credit for First Likeness and, if it has a public page, the studio that made it. We count how often a public page is viewed, and the count never says who looked. The portrait in 3D is drawn in the visitor's browser from the piece's 3D image data, with the patient details removed, so while a keepsake page is public that image data is published with it and anyone with the link can download it. Making the page private removes it again.

Ordering a print

Before you order, we check the piece and its price with our print partner. A check sends them the finished model, the 3D shape and nothing else, and the order page tells you so before it checks. When you order, our print partner receives the finished model and the recipient's name and shipping address, never the 3D image data. Our payment processor takes the payment and receives the name and address too; we never see your card number. If we make the print file on our own servers, a computing provider does that work after you pay, from the 3D image data and the piece's saved details.

Who helps us run it

A hosting provider, a database provider, a file storage service, an email delivery service, a payment processor, a print partner, a computing provider and an AI service each get only what their job needs. The AI service helps our staff read and answer messages, review requests to join and look into problems with the site, so it can see what those hold: a message you send us, your request to join, your name and email address, and the details saved in your account. Our hosting provider also keeps a short record of each request to the site, including the internet address it came from and the browser, to keep the site secure and to fix problems.

Helping us make faces better is only if you say yes

If we ask whether your pieces may help us improve how we find and show faces, the answer is no until you say yes, and that yes is separate from accepting this notice. It covers the 3D image data and edits of your pieces, never an original file, a name or an email address. You can take it back at any time from your account; then nothing new is used, and the copies made for it are deleted.

Nothing we collect is for sale

We never sell anything you give us, and we never use it for advertising. There are no ad trackers on this site.

Counting visits to our public pages

On our own pages that anyone can read, such as the home page, the studios list and the guide for sonographers, our hosting provider counts visits for us, without cookies and without identifying you. It sees which page was opened and a few things done on it, such as pressing Request access, but never anything you type or any file. It also sees the site that linked to the page, the general area, the kind of device and browser, and how quickly the page loaded. This counting never covers the pages behind sign-in, a family page or a keepsake page (how often a public page of yours is viewed is a separate count of ours, described below, that never says who looked, and the page timings in the next section are another), and it is off in a browser that sends a Do Not Track or Global Privacy Control signal.

How quickly pages start and how smoothly the 3D moves

To learn how long our pages take to start and how smoothly the 3D moves on different devices, your browser sends a few timings from the pages that show 3D: when the first picture showed, when the 3D view was first drawn and when it finished coming in, how long a scan took to open in the studio, and how many frames per second the 3D drew while it was moving. Each goes with the kind of page (never its link), our site's version, and the general class of device: its processor cores, memory, type of graphics chip, whether it is a phone, the speed class of its connection and whether it asks to save data. We add these into totals and keep nothing about a single visit, a person, an account or a link, and we keep the totals for 180 days. This includes keepsake pages and the studio, where speed matters most, and it is off when your browser sends Do Not Track or Global Privacy Control.

When a page breaks

If a page stops working, your browser sends us a short error report so we can fix it: what failed and where in our code, which kind of page it was on but never its link, the browser, the kind of device and its graphics chip, the screen size, and the last few steps taken on the page. It never carries your scan, your pieces, anything you type, your name, your email address or a link to a page, and it is not tied to you or your account. It is sent even when your browser asks not to be tracked, because it says what broke, never who you are. We keep these reports for 90 days.

When you write to us

If you write to us from the form on our contact page, or by email, we keep your email address, the name you give, what you wrote and our replies, so we can answer you and see the whole conversation. If you choose to tell us about a pregnancy or a scan, that is health information and we treat it that way. We delete a conversation a year after it closes, or sooner if you ask. Downloading your data includes the conversations you had with us from your sign-in address, and deleting your account deletes them. When you send the form, our hosting provider checks that it came from a person's browser and not a program, to keep automated spam out; that check looks at technical details of the browser and device, and we get back only its answer.

Only necessary cookies, and a copy in this browser

We use one cookie to keep you signed in, two short-lived cookies that keep signing in secure, and one to remember which version of this notice you accepted. They are not used for advertising, tracking or selling information. The studio also keeps a copy of your work in this browser, the 3D image data, your edits and pictures, so you can pick up where you left off. It never holds the original file or its name, and it is cleared when you sign out, when you delete your account, or when somebody else signs in here.

Deleting

You can delete a piece, or your whole account and everything kept with it, from your library and your account page, and download a copy of what we keep from the same page. A piece with an order is kept with that order. If your account has an order, we finish deleting it by hand within 45 days and keep only the record of the sale, and a studio's account is closed by us, by hand. A piece a studio made for you is the studio's, so it stays with the studio. If another parent shares your account, deleting yours takes out only you. Our database provider keeps backups for a short time to recover from a fault. A backup cannot be edited, so a deleted account stays in them until they age out on the provider's schedule, and if one is ever restored we delete your account again before it is used.

For people in the United States

First Likeness is offered to people in the United States. Keepsakes ship only to addresses in the 50 states and Washington, D.C.

Please use a scan you have permission to use

If you are working with someone else's scan, make sure they have agreed to its use and to any family page or keepsake you choose to make from it.

A keepsake is not medical

A keepsake is a piece of art, not a medical device, and we are not medical professionals. We cannot and will not say whether anything in a scan looks remarkable or unremarkable, or point out anything about the pregnancy. Questions about the pregnancy or the scan belong with your sonographer or care team.

If this changes, you will be told

This notice is versioned. If a future version says something different, you will see it with a short list of what changed, on your home page, your account page and in the studio, rather than finding out later.