隐私政策

Bebauno (“we”, “us”) helps mothers through pregnancy, postpartum, and baby’s first 0–18 months. This policy explains what we collect, why, and your rights.

Data controller: Bebauno (Paxa Media). Contact: privacy@bebauno.com.

1. What we collect

• Account — email, password (stored hashed), or your Sign in with Apple/Google identifier — to create and secure your account.
• Profiles — pregnancy/postpartum/baby type, baby age, and the name you enter — to personalize the app.
• Tracking — feeding (including bottle volumes and feed length), diapers, sleep, symptoms, milestones, growth and appointments — to provide tracking features. These are stored on our own servers so they survive a lost or replaced phone.
• Food diary — what you write down that you or your baby ate, and any calorie range you ask us to estimate for it.
• AI chat messages — to answer your questions. See §2 for when a conversation is kept and when it is not.
• Photos — memories and profile pictures are saved only on your device and are never uploaded to us. A photo you attach to an AI question is sent to the model provider to be answered and is not stored by us afterwards.
• Approximate country (from device region or IP) — to set language, pricing and legal terms. We do not store your IP address.
• Push token — to send reminders and notifications.
• Subscription status — to provide paid features.

We do not sell your personal data, and we do not use it for cross-app tracking or third-party advertising.

2. AI chat, your data, and model improvement

AI chat is processed by third-party model providers (see §8). Three separate things are under your control, and each is off unless you turn it on or can be turned off at any time in Settings.

• Whether we keep your conversations. On the free plan nothing is written down: the exchange happens and is gone when you leave the screen. On a paid plan, with conversation memory on, your questions and the answers are stored so you can return to them. They are readable by your account alone — not by doctors, not by other users. You can delete every saved conversation in Settings → Delete saved chats without closing your account.
• Whether the assistant may read your tracking. Off unless you switch it on. With it on, a summary of your last two weeks — averages and your latest measurements, never individual timestamps — is included with your question so the answer is about your baby rather than babies in general. Switching it off takes effect on your very next question.
• Whether anything improves our AI. Your chats are used to develop and improve our AI only if you opt in (“Help improve Bebauno”), which is off by default. When on, snippets are anonymized before storage, are not linked to your account, and you can opt out at any time.

A photo you attach is sent to the model provider to be answered and is not kept by us, so it does not appear in a saved conversation. The assistant is instructed never to name a condition or give a diagnosis from a photograph; it is not a medical examination and must not be used as one.

3. Baby Mode & children’s data

Baby Mode plays curated, soothing audio on your device behind a parental gate. In its current form it uses no microphone, makes no recordings, and collects no data from your child. We design for COPPA (US, under-13) and GDPR children’s-data protections: no behavioral advertising and no third-party tracking of children.

4. Doctors, referrals and messaging

Some doctors invite families to Bebauno with a referral code or an email invitation, and receive a commission if you subscribe to a paid plan. It costs you nothing extra. If you arrive through a referral, we record the link between your account and that doctor so the commission can be calculated. You can remove that link at any time in Settings → Referred by; we stop future commission but keep the historical accounting record.

What a doctor can see about you is off by default. A doctor connected to you sees your name and nothing else. In Settings → Your doctors you can choose, for each doctor separately, to share a summary of your last two weeks of tracking — feeding, sleep, nappies, growth, and logged symptoms or check-ins. That is a summary only: never your chats, photos or diary notes. You can withdraw it at any moment, and blocking a doctor withdraws it automatically.

Messages between you and a doctor are stored so both of you can read the conversation. They are readable only by the two of you, are never used to train or improve any AI model regardless of your “Help improve Bebauno” setting, and are deleted with your account. Messaging is not an emergency service and replies are not guaranteed. You can report a conversation or block a doctor from inside the chat; reports are reviewed by our team.

5. Your rights

• Access / export your data and correct it (edit profiles);
• Delete your account and all associated data (see our account deletion page);
• Withdraw consent (e.g. AI improvement, notifications);
• Object to / restrict processing and request portability.

To exercise your rights, use the in-app controls or email privacy@bebauno.com.

6. Regional notes

• EU / Serbia (GDPR, Serbian LPDP): lawful bases of contract, consent and legitimate interest; you may lodge a complaint with your data-protection authority.
• United States (CCPA/CPRA + COPPA): you may opt out of “sale/share” (we do neither); COPPA protections apply to Baby Mode.
• Israel (Privacy Protection Law): rights of access and correction; consent-based processing.
• Saudi Arabia (PDPL): consent, data-subject rights and cross-border transfer safeguards.

7. Retention and where things are kept

Account, profile, tracking and food-diary data are kept on servers we operate ourselves in Europe, for as long as your account is active, and are deleted when you delete your account. Saved conversations support the memory feature for subscribers, are deleted with your account, and can be deleted on their own at any time.

Photos are the exception: memories and profile pictures never leave your device. Because we hold no copy, deleting your account deletes them from the phone as well — that is the only place they exist, and we cannot restore them for you afterwards.

8. Sub-processors

We share the minimum data necessary with AI model providers (to generate chat replies) and cloud hosting/push providers (to run the backend and deliver notifications). We put data-processing agreements in place and require them to act only on our instructions.

9. International transfers

Some providers may operate outside your country. Where required, we rely on appropriate transfer safeguards (such as Standard Contractual Clauses).

10. Security

Passwords are hashed, traffic is encrypted in transit (TLS), and access is role-based.

11. Changes

We will update the version and effective date above when this policy changes, and re-request consent in-app where required.