Last Updated: March 3, 2026
This Privacy Policy explains how Good Humans Inc. (doing business as BabyMilu, "we," "us," or "our") collects, uses, processes, stores, and shares personal information when you use BabyMilu products and services, including the BabyMilu plush device, mobile applications, websites, voice services, and related features (collectively, the "Services").
Use of the Services requires AI processing as described below. By creating an account or using the Services, you consent to this processing.
We collect information you choose to provide, including:
We may automatically collect:
We use personal information to:
We do not sell personal information.
BabyMilu relies on third-party AI and infrastructure providers to operate core functionality.
When you use AI-powered features, we transmit the following categories of data to OpenAI via secure API:
This data is transmitted to our servers and then forwarded to OpenAI solely for the purpose of generating AI responses and related functionality.
Payment information is not transmitted to OpenAI.
OpenAI processes this data as a service provider on our behalf. Data sent through the OpenAI API is not used by OpenAI to train its models and is retained by OpenAI for a limited period (currently up to 30 days) for abuse monitoring purposes only.
We use ElevenLabs to generate voice output.
Only AI-generated text is transmitted to ElevenLabs for text-to-speech processing. We do not transmit user voice recordings to ElevenLabs.
We use cloud infrastructure providers, including Google Cloud Platform (GCP), to host and store application data. These providers process personal information on our behalf and are contractually required to implement appropriate confidentiality and security safeguards.
We may use user content, including conversations, journal entries, and related data, to improve, train, and develop our own AI systems and product features.
Such processing is conducted internally and subject to appropriate access controls and security safeguards.
OpenAI does not use data submitted through our API for model training.
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information.
Data is encrypted in transit using industry-standard encryption protocols.
Authorized personnel may access stored data solely for debugging, safety review, or customer support purposes. Access is limited to individuals with a legitimate business need.
No system can guarantee absolute security.
We retain personal information for as long as necessary to:
Retention periods vary depending on data type and operational needs.
Users may request deletion of their account and associated personal data through our support channels.
We may share personal information with:
All service providers are required to use personal information only for authorized purposes and to provide data protection safeguards consistent with industry standards.
We do not sell personal information.
Personal information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.
Depending on your location, you may have rights to:
Requests may be submitted through official support channels.
The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. Continued use of the Services after updates take effect constitutes acceptance of the revised policy.