Legal

Privacy Policy

Last updated: May 24, 2026

FirstPrint (“FirstPrint”, “we”, “us”) is a service provided by Metaieb LLC, a Delaware limited liability company. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using FirstPrint you agree to the practices described below.

What we collect

When you create an account and request a reading, we collect:

  • Your email address, used to sign you in via magic link or Google OAuth and to deliver your reading.
  • A photo of the sole of your baby's foot that you upload yourself.
  • Your baby's first name and date of birth (required), and optionally their time of birth, place of birth, and gender, used solely to personalize the reading.
  • Payment metadata handled by our payment processor Stripe. We never see or store full card details.
  • Basic usage analytics (page views, anonymized events) via PostHog and Vercel Analytics, and error logs via Sentry.

How we use your information

We use the data you provide exclusively to:

  • write the personalized reading you purchased;
  • deliver it to you on the web, by email, and as a PDF;
  • process your one time payment;
  • provide customer support if you contact us.

Photos and reading content are kept private to your account and never shared publicly. We do not sell your data, ever.

How your reading is composed

To produce the reading, we send your uploaded photo and the birth details you provided to the Anthropic Claude API. Anthropic processes this data only to return a response to FirstPrint and does not use customer API data to train their models (per Anthropic's commercial terms). The data is transmitted over TLS and is not retained by Anthropic beyond the immediate processing of the request.

Storage and security

Photos and readings are stored in private, access-controlled buckets on Supabase (Postgres + Storage), hosted in the United States. Row-level security ensures that only your authenticated account can access your own data. Photos are served through short-lived signed URLs and never made public.

Retention

We retain your photos, readings, and account data for as long as you have an active account, and for up to one year after your last activity to allow you to revisit your readings. You can request deletion at any time by emailing privacy@firstprint.app. Once we receive your request, we delete your data within 30 days.

Children and COPPA

FirstPrint is a service used by parents and legal guardians to create a personalized keepsake about their own child. We do not knowingly market to or collect data directly from children under 13. The data about a child that is collected via FirstPrint is provided exclusively by their parent or legal guardian. If you believe a child has provided us with information without parental consent, please contact privacy@firstprint.app and we will delete it promptly.

Your rights

Depending on where you live (e.g. EU/UK under GDPR, California under CCPA), you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. To exercise any of these rights, email privacy@firstprint.app.

Cookies

We use strictly necessary cookies to keep you signed in (Supabase Auth) and to remember your preferences. Analytics events are anonymized and aggregated.

Third-party processors

The services we rely on to operate FirstPrint:

  • Supabase (authentication, database, file storage)
  • Anthropic (reading composition)
  • Stripe (payment processing)
  • Resend (transactional email)
  • Vercel (hosting and analytics)
  • PostHog (product analytics)
  • Sentry (error monitoring)

Changes to this policy

We may update this Privacy Policy as the service evolves. Material changes will be communicated by email to active accounts. The “Last updated” date above always reflects the current version.

Contact

Questions or requests about this policy? privacy@firstprint.app