Privacy Policy
Effective date: June 1, 2026 · Bebauno (Paxa Media)
Bebauno (“we”, “us”) helps mothers through pregnancy, postpartum, and baby’s first 0–18 months. This policy explains what we collect, why, and your rights.
Data controller: Bebauno (Paxa Media). Contact: privacy@bebauno.app.
1. What we collect
- Account — email, password (stored hashed), or your Sign in with Apple/Google identifier — to create and secure your account.
- Profiles — pregnancy/postpartum/baby type, baby age, and the name you enter — to personalize the app.
- Tracking — feeding, diapers, sleep, symptoms, milestones, growth and appointments — to provide tracking features.
- AI chat messages — to answer your questions.
- Photos you add to memories — stored to provide that feature.
- Approximate country (from device region or IP) — to set language, pricing and legal terms. We do not store your IP address.
- Push token — to send reminders and notifications.
- Subscription status — to provide paid features.
We do not sell your personal data, and we do not use it for cross-app tracking or third-party advertising.
2. AI chat & model improvement
AI chat is processed by third-party model providers (see §7). We use the data you provide to deliver and personalize answers. Your chats are used to develop and improve our AI only if you opt in (“Help improve Bebauno” in Settings), which is off by default. When on, snippets are anonymized (emails, phone numbers, URLs, long numbers, dates and handles removed) before storage, are not linked to your account, and you can opt out at any time. We record the version, date and jurisdiction of your consent.
3. Baby Mode & children’s data
Baby Mode plays curated, soothing audio on your device behind a parental gate. In its current form it uses no microphone, makes no recordings, and collects no data from your child.
A future interactive mode would require verifiable parental consent before any microphone use; a child’s audio would be processed in memory only, never stored, and never used for training. We design for COPPA (US, under-13) and GDPR children’s-data protections: no behavioral advertising and no third-party tracking of children.
4. Your rights
At any time you can:
- Access / export your data and correct it (edit profiles);
- Delete your account and all associated data (Settings → Delete account — see our account deletion page);
- Withdraw consent (e.g. AI improvement, notifications);
- Object to / restrict processing and request portability.
Anonymized improvement snippets are not linked to you and are not personal data, so they may be retained after account deletion. To exercise your rights, use the in-app controls or email privacy@bebauno.app.
5. Regional notes
- EU / Serbia (GDPR, Serbian LPDP): lawful bases of contract, consent and legitimate interest; the rights in §4; you may lodge a complaint with your data-protection authority.
- United States (CCPA/CPRA + COPPA): you may opt out of “sale/share” (we do neither); COPPA protections apply to Baby Mode.
- Israel (Privacy Protection Law): rights of access and correction; consent-based processing.
- Saudi Arabia (PDPL): consent, data-subject rights and cross-border transfer safeguards (see §8).
6. Retention
We keep account, profile and tracking data while your account is active and delete it on account deletion. Chat history supports the conversation memory feature for subscribers and is deleted with your account.
7. Sub-processors
We share the minimum data necessary with:
- AI model providers — to generate chat replies.
- Cloud hosting & push delivery — to run the backend and deliver notifications.
We put data-processing agreements in place with our processors and require them to act only on our instructions.
8. International transfers
Some providers may operate outside your country. Where required, we rely on appropriate transfer safeguards (such as Standard Contractual Clauses).
9. Security
Passwords are hashed, traffic is encrypted in transit (TLS), and access is role-based.
10. Changes
We will update the version and effective date above when this policy changes, and re-request consent in-app where required.