PRIVACY POLICY

Data controller: ONROOM Inc.
Registered jurisdiction: Ontario, Canada
Principal office: Toronto, Ontario, Canada
General & privacy contact: [email protected]
Legal contact: [email protected]
Support contact: [email protected]

Account data: email address, password hash, display name, time zone, and locale.
Child profile data: child name or nickname, date of birth, sex if provided, optional photo, optional notes.
Log data: feedings, diaper changes, sleep intervals, growth measurements, milestones, medicine, pumping sessions, and other entries you create.
Device data: device model, operating system version, language, crash reports, and basic diagnostics.
Payment data: handled by Stripe; we receive only the subscription status, last four digits of the card, and country.
Optional voice memos, photos, and AI assistant interactions when you use those features.

We use information to operate the Application, sync data across your devices and family, deliver notifications you have opted into, diagnose crashes, prevent abuse, comply with legal obligations, and provide customer support. We do not use your data to train machine-learning models that are not strictly required to deliver Bebetick features.

We process personal data on the basis of: your explicit consent (sensitive health data, biometric authentication, AI processing); the performance of a contract you entered into with us; our legitimate interests in operating and securing the service in a way that is proportionate to your privacy; and compliance with legal obligations under Canadian and Korean law.

Information about a child's health is sensitive personal data and is processed only with your explicit, unbundled consent. The Health Data Addendum (linked above) describes how sensitive data is collected, transferred, retained, and deleted. You may withdraw consent at any time.

Bebetick is intended for parents, guardians, and authorized caregivers of children. Accounts are not for use by children themselves. We do not knowingly collect personal data from children under fourteen as the account holder. Parental consent is presumed for the health and developmental data the parent records about their child.

When you invite another adult into your family group, both you and the invitee must explicitly consent to the joint processing of the child's data as described in the Family Sharing Consent. Any family member with appropriate role permissions may read or write the records you share. You can revoke or change someone's access at any time.

We do not sell, rent, or trade personal data. We share personal data only with our subprocessors strictly as needed to operate the Application, and only under data-processing terms that match or exceed this Policy. Current subprocessors are listed in the Security page and include Stripe, Inc., Supabase, Inc., OpenAI, LLC, Google AdMob (free tier only), and Google Analytics for Firebase. We may disclose information when compelled by valid legal process or to protect the safety of users; in such cases we will, where lawful, notify affected users.

Bebetick is operated from Canada and may transfer personal data to subprocessors located in the United States and other jurisdictions. Where we transfer personal data outside your country of residence, we apply contractual safeguards that meet PIPEDA and PIPA standards.

We retain your data while your account is active. When you delete your account we apply a thirty (30)-day soft-delete window during which you may restore the account, after which all records are permanently and irreversibly deleted or anonymized, as described in the Account Deletion Policy.

We protect personal data with administrative, technical, and physical safeguards including Row-Level Security in our database, encryption in transit (TLS 1.2 or higher), encryption at rest for storage, restricted internal access on a need-to-know basis, audit logging, and biometric local authentication on the device.

Under PIPEDA, PIPA, and other applicable laws you have the right to access your personal data, request correction or deletion, withdraw consent, port your data, and lodge a complaint with the Office of the Privacy Commissioner of Canada or with the Personal Information Protection Commission of Korea. Contact [email protected] to exercise any of these rights; we will respond within 30 days.

The bebetick.com website does not use advertising cookies and does not load third-party advertising scripts. Essential cookies are used only to remember your language preference. Privacy-friendly aggregate analytics, if enabled, do not use cross-site tracking cookies.

You control which notification categories the Application sends. Notifications are processed by Apple Push Notification service or Google Firebase Cloud Messaging, both of which forward only the minimum information required to deliver the message.

Bebetick does not use automated decision-making that produces legal effects. Berry AI suggestions are advisory; you are free to ignore them and they do not affect your account standing.

We may update this Policy from time to time. Material changes will be notified in-app or by email at least thirty (30) days before they take effect. The current version is always available at https://bebetick.com/legal/privacy with the last-updated date.

For privacy questions, requests, or complaints: [email protected]. For legal notices: [email protected]. ONROOM Inc., Toronto, Ontario, Canada.