BebelinoPrivacy Policy
This policy explains what personal data the Bebelino mobile app (“Bebelino”, “the app”) collects, why, who it is shared with, and the choices you have. Bebelino is provided by DESPA MIHAI-LIVIU PFA (“we”, “us”), who is the data controller. Contact: despamihai66@gmail.com.
The short version
- We collect only what the app needs to work: your account, your family, your baby’s profile and the logs you add.
- No advertising, no analytics or tracking SDKs, and we never sell your data.
- Your logs are visible only to the caregivers in your family.
- Data is stored with Google Firebase. The app’s database is located in the EU.
- You can delete your account and data from the app at any time.
Data we collect
| Category | What | Why |
|---|---|---|
| Account | Email address, password (stored only as a secure hash by Firebase Authentication), display name, account ID, sign-up date | To create and secure your account and show your name to your family |
| Family | Family name, the members of your family and their display names, the current invite code and its expiry date | To let caregivers share one baby’s records |
| Baby profile | Name, birth date, sex, whether born early, and due date (if born early) | To show the right week of the guide, adjusted age, and the correct WHO growth chart |
| Care logs | Feeds (breast: duration per side; bottle: amount and milk type), sleep (start and end), diapers (wet/dirty), growth measurements (weight, length, head circumference), the time of each entry and which caregiver added it; running nap and nursing timers | The core purpose of the app: recording, syncing and summarizing your baby’s care |
| Stored on your device only | Preferences (theme, units, adjusted-age setting) and an offline copy of your family’s data | So the app works offline and remembers your settings |
| Technical data | IP address and basic device information processed by Firebase when the app connects | To deliver the service and protect it against abuse |
Feeding, sleep and growth information about your baby can be considered health-related data. We process it only to provide the features you use, on the basis of your explicit consent, which you can withdraw at any time by deleting the data or your account.
We do not collect your location, contacts, photos, advertising identifiers or browsing activity.
How we use data
- To provide the app: sign-in, syncing between caregivers, timers, summaries and charts.
- To keep the service secure and prevent misuse.
- To respond to your support requests.
We do not use your data for advertising, profiling, or training AI models, and we do not make automated decisions that affect you.
Legal bases (EU/UK users)
- Contract: to provide the account and features you sign up for.
- Explicit consent: for health-related information about your baby (Art. 9(2)(a) GDPR).
- Legitimate interests: to keep the service secure.
Who can see your data
- Your family: everyone you invite with your family’s invite code can see and edit the baby’s profile and logs, and sees your display name. Only share the code with people you trust; you can create a new code at any time in Settings.
- Our service provider: Google (Firebase Authentication and Cloud Firestore) stores and processes data on our behalf under its data processing terms. The Firestore database is in Google’s EU multi-region (eur3). Firebase Authentication may process account data outside the EU; such transfers are covered by Google’s Standard Contractual Clauses and EU–US Data Privacy Framework certification.
- Legal requirements: we may disclose data if required by law.
We do not sell or rent personal data to anyone.
Security
Data is encrypted in transit (TLS) and at rest by Google. Database access rules ensure that only members of a family can read or change that family’s data. No system is perfectly secure, so please use a strong, unique password.
Retention and deletion
- We keep your data for as long as your account exists.
- You can delete individual logs in the app at any time.
- Deleting your account (Settings → Delete account) removes your account and profile immediately. If you are the last member of your family, the family, your baby’s profile and all logs are deleted too. If other caregivers remain, the family’s shared records stay with them, and your name is removed from the family.
- Residual copies may remain in Google’s systems for a limited period before being permanently erased according to Google’s deletion practices.
See how to delete your account, including how to request deletion if you no longer have the app.
Your rights
Depending on where you live, you have the right to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent at any time. You can edit and delete most data directly in the app; for anything else, email despamihai66@gmail.com. We will reply within one month.
If you are in the EU, you can also lodge a complaint with your data protection authority. In Romania, this is the ANSPDCP (dataprotection.ro).
Children
Bebelino is meant for parents and caregivers aged 18 or over. Children do not use the app; information about a baby is entered by their parent or caregiver.
Changes to this policy
If we make material changes, we will update the effective date above and let you know in the app or by email before they take effect.
Contact
DESPA MIHAI-LIVIU PFA
despamihai66@gmail.com