Privacy Policy

vmello media LLC, an Indiana limited liability company doing business as "HueU" (publicly styled "Hue U") ("Hue U," "we," "our," or "us"), operates the Hue U website at hueu.ai(the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using the Service, you agree to the collection and use of information as described in this policy. This policy should be read alongside our Terms of Service.

1. Information We Collect

Account Information

When you create an account via Google Sign-In, Apple Sign-In, email/password, or magic link, we collect the information provided by your sign-in method, which may include your name and email address. Authentication is managed by Supabase; we do not store your sign-in passwords directly.

Photos You Upload

When you use our Service to create coloring pages, we process the photos you upload. Uploaded images and generated coloring pages are stored in Google Cloud Storage (GCS) and associated with your account. You may delete your content at any time from within the app.

Turning your photo into a coloring page requires AI image generation. To do this, the photo you upload is sent to third-party AI providers — currently Google (Vertex AI / Gemini) and WaveSpeed(an AI inference provider that runs Google's Gemini image model) — solely to generate and quality-check your line-art pages. We send only the image needed for generation; we never attach your name, email, or payment details, and we do not sell your photos. Each provider processes the image under its own terms (see Third-Party Services).

Payment Information

Payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. We do store: transaction IDs, amounts, credit pack purchased, and payment status for order history and support purposes. Stripe may collect your name, billing address, and card details directly.

Order and Shipping Information

When you order a printed book, we collect your shipping name and address. This information is shared with our print fulfillment partner, Lulu, to produce and deliver your order.

Usage Data

With your consent, we use Google Analytics 4 (GA4) to collect anonymized usage data such as pages visited, features used, device type, browser, and approximate location (country and region, derived from your IP address — not a precise or GPS location). We do not use this data to identify you personally. You may opt out at any time (see Cookies & Tracking).

Error and Diagnostic Data

We use Sentry for error monitoring. When an error occurs, Sentry collects technical data including stack traces, request URLs, browser/device info, and request metadata. We actively scrub sensitive data (auth tokens, email addresses, image data) before it is sent to Sentry.

2. Information We Do Not Collect

To be clear about our practices, we do not:

• Store your credit card numbers or full payment details
• Use advertising cookies or retargeting pixels
• Sell, rent, or trade your personal information to third parties (for marketing or any other purpose)
• Collect precise or GPS-based location, your contacts, or other device data beyond what is described above (analytics may infer approximate country/region from your IP address — see Usage Data)

3. How We Use Your Information

• Provide the Service — process your photos, generate coloring pages, build and deliver printed books
• Process payments — handle credit purchases and book orders via Stripe
• Fulfill orders — share shipping details with Lulu for print and delivery
• Communicate — send order confirmations, shipping updates, and respond to support requests via Resend
• Monitor errors — detect and fix bugs using Sentry
• Improve the Service — understand usage patterns with your consent via GA4
• Prevent abuse — enforce rate limits and detect fraudulent activity

4. Legal Basis for Processing

We process your information based on the following legal grounds:

• Contract performance — processing your photos, fulfilling orders, and managing your account are necessary to provide the Service you signed up for
• Consent — analytics tracking (GA4) is only enabled when you consent via the cookie banner. You can withdraw consent at any time
• Legitimate interest — error monitoring (Sentry) and fraud prevention help us maintain a secure and reliable Service
• Legal obligation — we retain certain payment records as required by tax and financial regulations

5. Third-Party Services

We share data with the following services only as necessary to operate. We do not sell your data to any third party.

• Supabase— Authentication and database. Stores your account profile, order history, and content metadata. Privacy policy
• Google Cloud Storage— Stores your uploaded photos, generated coloring pages, and book PDFs. Google may process data in accordance with their own terms and privacy policies, which may include using data to improve their services. Privacy notice
• Google Vertex AI / Gemini— AI image generation and image analysis. Receives the photos you upload in order to generate and quality-check your coloring pages. Privacy notice
• WaveSpeed— AI image-generation provider (runs Google's Gemini image model). Receives the photos you upload to generate your coloring pages. Privacy policy
• Stripe— Payment processing. Receives payment details you enter at checkout. Privacy policy
• Lulu— Print-on-demand fulfillment. Receives your shipping address and book PDF to produce and ship your order. Privacy policy
• Sentry— Error monitoring. Receives technical error data with sensitive fields scrubbed. Privacy policy
• Google Analytics 4— Anonymized usage analytics, loaded only with your consent. Privacy policy
• Resend— Transactional email delivery (order confirmations, support responses). Receives your email address and message content. Privacy policy

6. Cookies and Tracking

What We Use

• Analytics consent preference — stored in your browser's local storage (key: analytics-consent) to remember your choice. This is not a cookie and contains no personal data.
• Authentication session — Supabase sets secure, httpOnly cookies to keep you signed in. These are essential for the Service to function.
• Google Analytics cookies — set only if you click "Accept" on the cookie consent banner. Used for anonymized usage analytics.

What We Do Not Use

• No advertising cookies or tracking pixels
• No cross-site tracking
• No social media tracking widgets

How to Manage Cookies

You can change your analytics preference at any time by clearing your browser's local storage for hueu.ai, which will re-display the consent banner on your next visit. You can also block cookies entirely in your browser settings, though this may affect authentication functionality.

7. Data Retention

We retain different types of data for different periods:

• Account data (name, email) — retained while your account is active. Deleted within 30 days of account deletion.
• Photos and coloring pages — retained while your account is active. Deleted within 30 days of account deletion or when you delete them individually.
• Payment records (transaction IDs, amounts) — retained for 7 years after the transaction for tax and legal compliance.
• Order and shipping records — retained for 3 years after delivery for support and dispute resolution.
• Error logs (Sentry) — automatically expired after 90 days per Sentry's retention policy.
• Analytics data (GA4) — retained for 14 months per Google Analytics default, then automatically deleted.

8. Data Security

We protect your data through:

• HTTPS encryption for all data in transit
• Secure, token-based authentication via Supabase (no passwords stored by us)
• Access-controlled, encrypted cloud storage (Google Cloud)
• Payment data handled entirely by PCI-compliant Stripe — card details never touch our servers
• Sensitive data scrubbed from error reports before transmission to Sentry
• Rate limiting on API endpoints to prevent abuse

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Our Service is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. Our third-party providers (Supabase, Google Cloud, Stripe, Sentry) may process data in various locations; each maintains appropriate safeguards as described in their respective privacy policies linked above.

10. Your Rights

Regardless of where you live, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your data and account
• Portability — request a copy of your data in a machine-readable format
• Opt out of analytics — decline or withdraw cookie consent at any time
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email us at support@mail.hueu.ai. We will respond within 30 days. We may ask you to verify your identity before processing your request.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data lawfully. We'd appreciate the chance to address your concerns first, so please reach out to us before you do.

11. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know — you can request the categories and specific pieces of personal information we have collected about you
• Right to delete — you can request deletion of your personal information, subject to certain exceptions
• Right to opt out of sale — we do not sell your personal information to third parties. No opt-out is necessary.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, email support@mail.hueu.ai with the subject line "CCPA Request."

12. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at support@mail.hueu.ai and we will promptly delete it.

13. Do Not Track Signals

Our Service does not respond to "Do Not Track" browser signals. However, we only load analytics tracking with your explicit consent via the cookie banner, which provides stronger privacy protection than DNT compliance alone.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. We encourage you to review this page periodically.

15. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Email: support@mail.hueu.ai