隐私政策

Bebauno (“we”, “us”) helps mothers through pregnancy, postpartum, and baby’s first 0–18 months. This policy explains what we collect, why, and your rights.

Data controller: Bebauno (Paxa Media). Contact: support@bebauno.app.

1. What we collect

• Account — email, password (stored hashed), or your Sign in with Apple/Google identifier — to create and secure your account.
• Profiles — pregnancy/postpartum/baby type, baby age, and the name you enter — to personalize the app.
• Tracking — feeding (including bottle volumes and feed length), diapers, sleep, symptoms, milestones, growth and appointments — to provide tracking features. These are stored on our own servers so they survive a lost or replaced phone.
• Food diary — what you write down that you or your baby ate, and any calorie range you ask us to estimate for it.
• AI chat messages — to answer your questions. See §2 for when a conversation is kept and when it is not.
• Photos — memories and profile pictures are saved on your device and are never uploaded to our servers. Your operating system may include them in device backups, depending on your backup settings. A photo you attach to an AI question is sent to the model provider to be answered and is not stored by us afterwards.
• Approximate country (from device region or IP) — to set language, pricing and legal terms. We do not store your IP address.
• Voice questions — when you ask the assistant by voice, your phone’s own speech recognition turns your words into text (Apple’s on iPhone; on Android, the phone’s speech service, usually Google’s). We receive only the text, never a recording.
• Video consultations — when you start a private call with your connected pediatrician, live audio and video are transmitted through LiveKit Cloud in an EU region to the other participant. We do not record or store the call media.
• Push token — to send reminders and notifications.
• Subscription status — to provide paid features. Purchases are made through the App Store (Apple) or Google Play (Google), who handle the payment; they send us a confirmation of the subscription and never your card details.
• Bank-transfer orders — where offered, we keep the plan, amount, reference and confirmation record to match a transfer and activate the prepaid term. We do not receive your online-banking credentials.

We do not sell your personal data. Your baby’s data, your tracking, your food diary and your chats are never shared with anyone for advertising or measurement.

1a. Measuring our website and our ads

On bebauno.com we ask before setting any cookie the site does not need to work. If you accept, Google Analytics (Google) counts visits and taps on the App Store and Google Play buttons, and Google Ads (Google) and the Meta Pixel (Meta) tell us which of our ads bring visitors. If you decline, none of them is loaded. The Meta Pixel is not used on a doctor’s or an ambassador’s invitation page, on the unsubscribe page or on the account-deletion page.

They receive the page address without personal details, the button tapped, your browser and device type, an approximate location they derive from your connection, and their own cookie identifiers. Google and Meta handle this under their own privacy policies. You can change your answer at any time with “Cookie settings” at the bottom of every page.

The App Store and Google Play links on this site carry a campaign tag, so Apple and Google can tell us how many downloads each campaign brought. On Android, the tag also carries an invitation code into the app, so you don’t have to type it.

1b. Measurement in the app

The iOS and Android apps ask once whether we may measure installs, sign-ups and purchases. You can change the answer in Settings → App and ad measurement. If you allow it, the app tells Google Analytics for Firebase (Google) that it was installed and opened, that an account was created, that the plans screen was opened, and that a purchase was started or completed (the plan, price and currency), together with a random app-instance identifier and your Bebauno account ID. On Android it also tells Meta about the install, the sign-up and the purchase. If you allow it on iPhone, Apple’s SKAdNetwork may tell Google or Meta, without identifying you, that an install came from one of their ads.

The apps never read your device’s advertising ID (IDFA or Google’s advertising ID) and do not track you across other companies’ apps. Your baby’s data, your tracking, your food diary, your chats, your photos and your calls are never sent. If you decline, nothing is sent to Google or Meta for measurement. Doctors’ and ambassadors’ accounts are never measured.

The web app at app.bebauno.com asks the same cookie question as this website, and one answer covers both. If you accept there, Google Analytics (Google) counts the pages opened (with account and record identifiers removed from their addresses), that an account was created, that the plans page was opened and that a bank-transfer order was started (the plan, price and currency). The Meta Pixel is not used in the web app.

2. AI chat, your data, and model improvement

AI chat is currently processed through DeepSeek (see §8), including on paid plans. Questions, attached chat photos and any context you choose to share are sent to that provider. Processing can take place in China, outside the EU. Do not include identifying information that is not needed for your question. Three separate things are under your control, and each is off unless you turn it on or can be turned off at any time in Settings.

• Whether we keep your conversations. On the free plan nothing is written down: the exchange happens and is gone when you leave the screen. On a paid plan, with conversation memory on, your questions and the answers are stored so you can return to them. They are readable by your account alone — not by doctors, not by other users. You can delete every saved conversation in Settings → Delete saved chats without closing your account.
• Whether the assistant may read your tracking. Off unless you switch it on. With it on, a summary of your last two weeks — averages and your latest measurements, never individual timestamps — is included with your question so the answer is about your baby rather than babies in general. Switching it off takes effect on your very next question.
• Whether anything improves our AI. Your chats are used to develop and improve our AI only if you opt in (“Help improve Bebauno”), which is off by default. When on, snippets are anonymized before storage, are not linked to your account, and you can opt out at any time.

A photo you attach is sent to the model provider to be answered and is not kept by us, so it does not appear in a saved conversation. The assistant is instructed never to name a condition or give a diagnosis from a photograph; it is not a medical examination and must not be used as one.

3. Baby Mode & children’s data

Baby Mode plays curated, soothing audio on your device behind a parental gate. In its current form it uses no microphone, makes no recordings, and collects no data from your child. We design for COPPA (US, under-13) and GDPR children’s-data protections: no behavioral advertising and no third-party tracking of children.

4. Doctors, referrals and messaging

Some doctors invite families to Bebauno with a referral code or an email invitation, and receive a commission if you subscribe to a paid plan. It costs you nothing extra. If you arrive through a referral, we record the link between your account and that doctor so the commission can be calculated. You can remove that link at any time in Settings → Referred by; we stop future commission but keep the historical accounting record.

What a doctor can see about you is off by default. A doctor connected to you sees your name and nothing else. In Settings → Your doctors you can choose, for each doctor separately, to share a summary of your last two weeks of tracking — feeding, sleep, diapers, growth, and logged symptoms or check-ins. That is a summary only: never your chats, photos or diary notes. You can withdraw it at any moment, and blocking a doctor withdraws it automatically.

Messages between you and a doctor are stored so both of you can read the conversation. They are readable only by the two of you, are never used to train or improve any AI model regardless of your “Help improve Bebauno” setting, and are deleted with your account. Messaging is not an emergency service and replies are not guaranteed. You can report a conversation or block a doctor from inside the chat; reports are reviewed by our team.

5. Your rights

An ambassador whose code you use can see a version of your email with at least 60% of its characters hidden, your join date and whether you have started paying. They cannot see your name, health records, chats or photos. Removing the referral in Settings removes you from their family list.

Doctors and ambassadors whom Bebauno pays can enter payout details in their portal: full name, address, bank and account number (IBAN or domestic) and the bank's SWIFT/BIC. Only Bebauno's administrators can read them, every such read is logged, and they are used only to pay that person. Each person can view and change their own details at any time.

• Access / export your data and correct it (edit profiles);
• Delete your account and personal app data, subject to the limited billing retention described below (see our account deletion page);
• Withdraw consent (e.g. AI improvement, notifications);
• Object to / restrict processing and request portability.

To exercise your rights, use the in-app controls or email support@bebauno.app.

6. Regional notes

• EU / Serbia (GDPR, Serbian LPDP): lawful bases of contract, consent and legitimate interest; you may lodge a complaint with your data-protection authority.
• United States (CCPA/CPRA + COPPA): you may opt out of “sale/share” (we do neither); COPPA protections apply to Baby Mode.
• Israel (Privacy Protection Law): rights of access and correction; consent-based processing.
• Saudi Arabia (PDPL): consent, data-subject rights and cross-border transfer safeguards.

7. Retention and where things are kept

Account, profile, tracking and food-diary data are kept on servers we operate ourselves in Europe, for as long as your account is active, and are deleted when you delete your account. Saved conversations support the memory feature for subscribers, are deleted with your account, and can be deleted on their own at any time.

Memories and profile pictures are stored locally by Bebauno. Deleting your account removes their local app copies, and we hold no server copy to restore. Copies in device backups are managed by your operating system and its backup settings and retention rules.

Limited billing, subscription-verification, bank-order and referral-commission records may be retained after account deletion for accounting, purchase disputes and fraud prevention. These records do not contain your health diary or chat content. Contact us for the retention period that applies to your records.

8. Sub-processors

We send AI questions and the context you enable to DeepSeek to generate replies. LiveKit Cloud carries live consultation audio/video, with recording disabled. Hosting and push providers run the backend and deliver notifications.

Subscriptions bought in the app are sold and billed by Apple (App Store) or Google (Google Play) under their own privacy policies. We receive from them only what confirms the subscription: the plan, its status and renewal date, and — so a referring doctor’s commission can be calculated — the price paid.

On the website, and only after you accept cookies, Google (Google Analytics, Google Ads) and Meta Platforms (Meta Pixel) receive the measurement data described in §1a, each under its own privacy policy. In the apps, and only after you allow it, Google (Google Analytics for Firebase) and, on Android, Meta Platforms (app events) receive the measurement data described in §1b; in the web app, after you accept cookies, Google (Google Analytics) does.

9. International transfers

DeepSeek processing can take place in China. This means using AI chat can transfer the content you send outside the EU and your country. Other providers may also operate outside your country. Contact us at support@bebauno.app for information about applicable transfer arrangements.

10. Security

Passwords are hashed, traffic is encrypted in transit (TLS), and access is role-based.

11. Changes

We will update the version and effective date above when this policy changes, and re-request consent in-app where required.