vmello media LLC, an Indiana limited liability company doing business as "HueU" (publicly styled "Hue U") ("Hue U," "we," "our," or "us"), operates the Hue U website at hueu.ai(the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
By using the Service, you agree to the collection and use of information as described in this policy. This policy should be read alongside our Terms of Service.
1. Information We Collect
Account Information
When you create an account via Google Sign-In, Apple Sign-In, email/password, or magic link, we collect the information provided by your sign-in method, which may include your name and email address. Authentication is managed by Supabase; we do not store your sign-in passwords directly.
Photos You Upload
When you use our Service to create coloring pages, we process the photos you upload. Uploaded images and generated coloring pages are stored in Google Cloud Storage (GCS) and associated with your account. You may delete your content at any time from within the app.
Payment Information
Payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. We do store: transaction IDs, amounts, credit pack purchased, and payment status for order history and support purposes. Stripe may collect your name, billing address, and card details directly.
Order and Shipping Information
When you order a printed book, we collect your shipping name and address. This information is shared with our print fulfillment partner, Lulu, to produce and deliver your order.
Usage Data
With your consent, we use Google Analytics 4 (GA4) to collect anonymized usage data such as pages visited, features used, device type, and browser. This data does not identify you personally. You may opt out at any time (see Cookies & Tracking).
Error and Diagnostic Data
We use Sentry for error monitoring. When an error occurs, Sentry collects technical data including stack traces, request URLs, browser/device info, and request metadata. We actively scrub sensitive data (auth tokens, email addresses, image data) before it is sent to Sentry.
2. Information We Do Not Collect
To be clear about our practices, we do not:
- Store your credit card numbers or full payment details
- Use advertising cookies or retargeting pixels
- Sell, rent, or trade your personal information to third parties
- Sell, rent, or trade your personal information to third parties for marketing purposes
- Collect location data, contacts, or other device data beyond what is described above
3. How We Use Your Information
- Provide the Service — process your photos, generate coloring pages, build and deliver printed books
- Process payments — handle credit purchases and book orders via Stripe
- Fulfill orders — share shipping details with Lulu for print and delivery
- Communicate — send order confirmations, shipping updates, and respond to support requests via Resend
- Monitor errors — detect and fix bugs using Sentry
- Improve the Service — understand usage patterns with your consent via GA4
- Prevent abuse — enforce rate limits and detect fraudulent activity
4. Legal Basis for Processing
We process your information based on the following legal grounds:
- Contract performance — processing your photos, fulfilling orders, and managing your account are necessary to provide the Service you signed up for
- Consent — analytics tracking (GA4) is only enabled when you consent via the cookie banner. You can withdraw consent at any time
- Legitimate interest — error monitoring (Sentry) and fraud prevention help us maintain a secure and reliable Service
- Legal obligation — we retain certain payment records as required by tax and financial regulations
5. Third-Party Services
We share data with the following services only as necessary to operate. We do not sell your data to any third party.
- Supabase— Authentication and database. Stores your account profile, order history, and content metadata. Privacy policy
- Google Cloud Storage— Stores your uploaded photos, generated coloring pages, and book PDFs. Google may process data in accordance with their own terms and privacy policies, which may include using data to improve their services. Privacy notice
- Stripe— Payment processing. Receives payment details you enter at checkout. Privacy policy
- Lulu— Print-on-demand fulfillment. Receives your shipping address and book PDF to produce and ship your order. Privacy policy
- Sentry— Error monitoring. Receives technical error data with sensitive fields scrubbed. Privacy policy
- Google Analytics 4— Anonymized usage analytics, loaded only with your consent. Privacy policy
- Resend— Transactional email delivery (order confirmations, support responses). Receives your email address and message content. Privacy policy
6. Cookies and Tracking
What We Use
- Analytics consent preference — stored in your browser's local storage (key:
analytics-consent) to remember your choice. This is not a cookie and contains no personal data. - Authentication session — Supabase sets secure, httpOnly cookies to keep you signed in. These are essential for the Service to function.
- Google Analytics cookies — set only if you click "Accept" on the cookie consent banner. Used for anonymized usage analytics.
What We Do Not Use
- No advertising cookies or tracking pixels
- No cross-site tracking
- No social media tracking widgets
How to Manage Cookies
You can change your analytics preference at any time by clearing your browser's local storage for hueu.ai, which will re-display the consent banner on your next visit. You can also block cookies entirely in your browser settings, though this may affect authentication functionality.
7. Data Retention
We retain different types of data for different periods:
- Account data (name, email) — retained while your account is active. Deleted within 30 days of account deletion.
- Photos and coloring pages — retained while your account is active. Deleted within 30 days of account deletion or when you delete them individually.
- Payment records (transaction IDs, amounts) — retained for 7 years after the transaction for tax and legal compliance.
- Order and shipping records — retained for 3 years after delivery for support and dispute resolution.
- Error logs (Sentry) — automatically expired after 90 days per Sentry's retention policy.
- Analytics data (GA4) — retained for 14 months per Google Analytics default, then automatically deleted.
8. Data Security
We protect your data through:
- HTTPS encryption for all data in transit
- Secure, token-based authentication via Supabase (no passwords stored by us)
- Access-controlled, encrypted cloud storage (Google Cloud)
- Payment data handled entirely by PCI-compliant Stripe — card details never touch our servers
- Sensitive data scrubbed from error reports before transmission to Sentry
- Rate limiting on API endpoints to prevent abuse
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Our Service is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. Our third-party providers (Supabase, Google Cloud, Stripe, Sentry) may process data in various locations; each maintains appropriate safeguards as described in their respective privacy policies linked above.
10. Your Rights
Regardless of where you live, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your data and account
- Portability — request a copy of your data in a machine-readable format
- Opt out of analytics — decline or withdraw cookie consent at any time
- Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, email us at support@hueu.ai. We will respond within 30 days. We may ask you to verify your identity before processing your request.
11. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to know — you can request the categories and specific pieces of personal information we have collected about you
- Right to delete — you can request deletion of your personal information, subject to certain exceptions
- Right to opt out of sale — we do not sell your personal information to third parties. No opt-out is necessary.
- Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights
To submit a CCPA request, email support@hueu.aiwith the subject line "CCPA Request."
12. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at support@hueu.ai and we will promptly delete it.
13. Do Not Track Signals
Our Service does not respond to "Do Not Track" browser signals. However, we only load analytics tracking with your explicit consent via the cookie banner, which provides stronger privacy protection than DNT compliance alone.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. We encourage you to review this page periodically.
15. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: support@hueu.ai