Skip to content

Bimbi Privacy Policy

Effective date: September 17, 2026

This Privacy Policy explains how Bimbi’s creator, operating the project under the name Bimbi Labs (“Bimbi Labs,” “Bimbi,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use getbimbi.com, the Bimbi iOS app, the Bimbi web beta, Nana, our website demo, and related support and beta services (collectively, the “Services”).

The short version: We do not sell personal information, serve behavioural advertising, or use your family’s information to train public AI models. The native iOS app keeps its tracking database and saved history on your iPhone. Nana sends conversation content and selected family context to OpenAI to respond. In iOS versions that offer Shared learning, you may separately review and send limited structured child-profile and outcome data to Bimbi to help us understand patterns across families. This is optional and does not authorize AI model training. The web beta stores account, child, tracking, plan, and conversation information on Bimbi’s systems so it can work across browser sessions. You can request a copy of your information or delete it.

1. Who we are

Bimbi is an independent project operated by its creator under the project name Bimbi Labs. It provides voice-first parenting tracking, education, and coaching for adult parents and caregivers. Bimbi is not directed to children.

For privacy questions or requests, contact our Privacy Lead at [email protected]. General support is available at [email protected], and safety concerns can be sent to [email protected].

2. Information we collect

The information we collect depends on which Services you use, your app version, and the choices you make. Supported versions offer the simplified personalized-Nana setup and Manage data navigation described below. Earlier versions show separate AI-processing and personalization switches and may call these screens Privacy center and Shared learning. Existing choices remain valid for their original scope; installing an update does not grant a new permission. Shared learning data is collected only in a supported version after a separate opt-in and your explicit review and submission.

Account and contact information

We may collect:

We do not receive your Apple Account password.

Child, caregiving, and tracking information

You may choose to provide information about a child and your family’s routines, including:

This information can reveal health, development, and family-routine details. We treat it as sensitive personal information and, where applicable, consumer health data.

Conversations, voice, and AI information

When you start a Nana voice or chat session, the Services may process:

In the iOS app, raw voice audio is streamed for real-time processing and is not stored by Bimbi Labs. Partial captions are discarded. Finalized conversation text is stored on your iPhone only if you enable conversation history; summaries may be stored locally so you can review prior sessions. The Bimbi iOS backend is designed not to store raw audio, typed chat content, transcripts, or summaries.

The separate web beta stores typed messages and finalized voice transcript lines, summaries, guides, and plan information on Bimbi’s systems so the beta experience can persist between browser sessions. The web beta never stores raw audio.

Optional Shared learning in supported iOS versions

Shared learning lets an adult caregiver explicitly review and contribute structured observations about a completed coaching outcome. Contributions can include:

This submission excludes names, dates of birth, private notes, free text, raw sleep logs, audio, and conversation transcripts. The optional structured health fields include asthma, eczema, reflux, food allergy, sleep apnea, or an “other” code without a diagnosis description. You may leave sex or health information unshared. Contributions remain linked to your Bimbi account; hashing identifiers does not make this data anonymous.

Changing a profile does not silently add today’s health information to an older outcome. Editing an outcome invalidates its older contribution when the app can reach Bimbi; you must explicitly review and submit a corrected outcome to share it again. There is no automatic retrospective upload.

Purchase and subscription information

Apple processes App Store purchases. We may receive product identifiers, transaction and original-transaction identifiers, subscription state, expiration or revocation status, storefront or environment information, and an app-account token used to associate an entitlement with your Bimbi account. We do not receive or store your full payment-card number.

Device, usage, and operational information

We may collect limited technical and operational information, including:

Optional in-app analytics contain account-linked counts, timings and short feature categories, not message text, transcripts or private notes. They are not anonymous. Essential service usage and security records are separate from optional analytics. The private operations dashboard displays usage, reliability, cost, subscriptions, consented product events, and feedback and optional reply email you submit. Authorized personnel may separately access contributions you explicitly share to operate Shared learning, examine patterns, and honor correction or deletion; this does not provide remote access to your iPhone tracking database.

Information we do not currently collect

The current native app does not request access to contacts, HealthKit, the photo library, camera, Bluetooth data, precise device location, advertising identifiers, voiceprints, or biometric identifiers. This does not exclude attachments you deliberately send in a support request outside the app. Nana does not perform cry detection, speaker identification, emotion recognition, or voiceprint analysis. A child’s voice or other background sound may be incidentally captured during a Nana voice session; avoid starting a session when others should not be recorded.

3. Where information is stored

Native iOS app

Child profiles, optional learning profiles, tracking history, local plans, evaluations, plan preferences, decision comparisons and responses, frozen displayed sleep predictions, Nana summaries, optional finalized conversation history, and local notes are stored on the iPhone using Apple’s device protections. Bimbi Labs cannot remotely read that local database. Depending on your Apple settings, local app data may be included in a device backup controlled by Apple.

The native app sends selected context off-device when needed to authenticate, verify subscriptions, operate Nana, generate a recap, extract a fact, submit feedback, send analytics you have enabled, or submit Shared learning observations you explicitly reviewed. Supported Shared learning contributions are stored in an account-linked Bimbi database hosted by Cloudflare, separate from the local tracking database.

Web beta

The web beta stores account, child profile, tracking, plan, guide, conversation, consent, and product-event information in Bimbi’s Cloudflare-hosted database. This architecture is separate from the native iOS app.

Website and demo

The public Nana demo does not require an account. Bimbi does not store demo audio or transcripts. We use transient IP-based controls and security services to enforce session and spending limits. Waitlist submissions are stored so we can contact you about Bimbi.

4. How we use information

We use information to:

We never use child information or the personal information you provide through the native app and Nana for marketing, advertising, or sale. We do not add native-app accounts or family information to marketing audiences. A separate website waitlist or newsletter submission is used only to send the communications you requested through that form; it is not combined with family or coaching records. We do not use customer content to train or fine-tune our own or a third party’s general-purpose model unless we first offer a separate, explicit opt-in. Shared learning does not grant permission to train or fine-tune a general-purpose model. It is observational product learning, not clinical research, proof that a method caused an improvement, diagnosis, or automatic treatment. There is no automatic model training from these contributions. Small-group patterns can be misleading; aggregate reports suppress groups with fewer than ten distinct children and ten accounts.

In Build 24, Enable personalized Nana is one affirmative action that permits the disclosed core coaching uses: external AI processing and relevant family-history personalization. The setup identifies OpenAI, the information sent, the purposes, and provider retention before activation. These permissions are saved as separate, versioned records together. Nana uses relevant history, plans, preferences and observed outcomes automatically while personalized Nana is enabled. It also saves decision and prediction records on the iPhone so the app can explain and evaluate its coaching.

You can choose Continue with tracking without enabling Nana. Under More → Privacy → Manage Nana, you can review the processing explanation or turn Nana off. Turning it off stops active Nana sessions, future AI requests and new local learning records, and erases saved plan preferences. Other stored history and learning records remain available until you erase them. Withdrawal cannot undo processing that has already occurred. A failed save is reported rather than treated as a completed change.

An update preserves earlier permissions and refusals. An earlier AI-only or personalization-only permission does not become permission for both. You must explicitly activate the combined experience if you want to change those choices. A changed purpose or expanded data-sharing scope requires a new disclosure and permission where applicable.

These optional choices remain separate from personalized Nana:

Optional sharing and usage statistics are not required for personalized coaching. Permissions can be changed in Privacy. Accepting our Terms does not replace the specific choices described here.

6. AI and voice processing

Nana uses OpenAI’s API services. During a Nana session, microphone audio may travel directly from the device to OpenAI over an encrypted real-time connection, while Bimbi’s backend handles authentication, safety instructions, selected context, tools, and connection signalling. Typed conversations and recap or fact-extraction requests pass through Bimbi’s backend to OpenAI. Knowledge searches may send the search text to OpenAI to create a search embedding. Optional Apple speech dictation is a separate feature: recognition runs on the iPhone when supported; otherwise Apple processes the dictation audio under its speech-service terms and permission prompt.

OpenAI states that API customer content is not used to train its models unless the API customer opts in. Under OpenAI’s default API controls, abuse-monitoring logs may contain prompts, responses, audio, transcriptions, and related metadata and may be retained for up to 30 days, unless law requires longer retention. Bimbi Labs has not authorized OpenAI to train models on Bimbi customer content. We do not promise zero provider retention. See OpenAI’s API data controls for endpoint-specific policies.

Bimbi personnel do not routinely listen to or read native iOS Nana conversations because Bimbi does not store them. Access to web-beta conversation content, support messages, safety reports, or feedback is limited to authorized personnel who need it to provide support, investigate a reported problem, protect safety or security, or comply with law.

AI can be inaccurate or incomplete. Nana is an educational and coaching feature, not a healthcare professional or emergency service. See our Safety page and Terms of Service.

7. When we disclose information

We disclose personal information only as described here:

We may disclose information when you direct us to, when required by valid legal process, or when reasonably necessary to protect a person from serious harm, investigate fraud or abuse, or protect legal rights. If Bimbi Labs is involved in a financing, merger, acquisition, reorganization, or sale of assets, information may be transferred subject to confidentiality and applicable law.

We do not sell personal information, share it for cross-context behavioural advertising, or allow third-party advertising trackers in the native app. We do not knowingly sell or share consumer health data.

8. Cookies and website analytics

The public website uses Plausible for aggregate, cookieless analytics and Cloudflare for security. The web beta uses an essential secure session cookie to keep you signed in. Cloudflare Turnstile may process technical and security signals when you use protected forms. We do not use advertising cookies or respond differently to browser “Do Not Track” signals because we do not track users across unrelated services for advertising.

9. Retention and deletion

We retain information for the period reasonably needed to provide the Services, meet the purposes described above, resolve disputes, maintain security, and comply with legal obligations.

Deletion from Bimbi does not automatically cancel an App Store subscription. Cancel the subscription separately in your Apple subscription settings. Providers such as Apple and OpenAI may retain information under their own legal obligations and retention schedules. Residual copies may remain temporarily in protected backups until those backups cycle out.

10. Your privacy rights and choices

Depending on where you live, you may have rights to:

In Build 24, use More → Privacy → Manage data to export, delete one baby’s data, or delete your account and all family data. Deleting one child preserves other profiles and queues removal of that child’s shared contributions. Account deletion removes all family profiles and active account records. Server cleanup may require a connection; the app distinguishes completed local erasure from pending server work. Earlier supported iOS releases expose these controls in the baby-profile editor and Privacy center. The web beta provides its own export and deletion controls. You can also email [email protected]. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law, but we may ask for proof of authorization and may verify the request directly with you. We will not discriminate against you for exercising a privacy right.

11. Children and caregiver authority

The Services are for adults. You must be at least 18 or the age of legal majority where you live. Children may not create an account or intentionally use Nana.

By providing information about a child, you confirm that you are the child’s parent or legal guardian or are otherwise authorized by the parent or guardian to provide the information and use the Services for that child. Babysitters and other caregivers must have the parent’s or guardian’s permission.

We do not knowingly solicit personal information directly from children. If you believe a child has created an account, intentionally spoken to Nana without adult involvement, or provided personal information without appropriate authorization, contact [email protected]. We will investigate and delete information where required.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network connections, Apple platform protections, access controls, pseudonymous account identifiers in the native backend, and data-minimization rules for analytics. No service can guarantee absolute security. Keep your device, Apple account, web-beta credentials, and email account secure, and contact us if you suspect unauthorized access.

13. International processing

Bimbi Labs and its providers may process information in Canada, the United States, and other countries where our providers operate. Those countries may have privacy laws different from the laws where you live. Where required, we use contractual and other safeguards intended to protect information transferred across borders.

The Services may link to Apple, healthcare, crisis, educational, or other third-party resources. Their privacy practices apply to information you provide directly to them. This Policy does not govern third-party services that Bimbi Labs does not control.

15. Changes to this Policy

We may update this Policy as the Services, vendors, or law change. We will post the revised Policy with a new effective date. If a change materially affects how we use sensitive information, we will provide additional notice in the app, by email, or through another reasonable channel before the change takes effect where required.

16. Contact us

Questions, requests, or complaints may be sent to:

Bimbi Labs — Privacy Lead

[email protected]

For general support: [email protected]

For urgent product-safety concerns: [email protected]