Baba

Baba App (“we,” “us,” or “our”) operates the Baba mobile application (“App”) and the Baba website at readbaba.com (“Website”), collectively the “Service.”

This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Service. We are committed to protecting your privacy and handling your data with transparency.

By using the Service, you consent to the data practices described in this policy.

2.1 Information Collected Automatically

When you use the App, we may automatically collect:

• Device identifier: A unique, anonymous token generated by your device for push notification delivery and saved article synchronization. This is not your Apple ID, phone number, or any personally identifiable information.
• App usage data: Which sections of the app you visit (e.g., News, Faith, War Updates), how often you open the app, and general interaction patterns. This data is aggregated and anonymized.
• Device information: Device type (iPad/iPhone), operating system version, app version, and language settings. Used solely for compatibility and debugging purposes.
• Crash reports: If the App crashes, we may collect diagnostic information to improve stability. Crash data does not contain personal information.

2.2 Information You Provide

• Language preference: Your choice of Ukrainian or English for the app interface, selected during onboarding.
• Content preferences: Categories of interest selected during onboarding (e.g., News, Politics, Faith, Culture).
• Saved articles: Articles you bookmark within the App for later reading.
• Notification preferences: Your choices regarding which types of push notifications you wish to receive (breaking news, daily digests, faith reminders).
• Appearance settings: Theme preference (light/dark/system), text size multiplier, and faith content intensity level.

2.3 Information We Do NOT Collect

Baba is designed with privacy in mind. We do not collect:

• Your name, email address, or phone number
• Your physical location or GPS data
• Your contacts, photos, or other device data
• Financial or payment information
• Social media profiles or credentials
• Browsing history outside of the Baba app
• Biometric data

No account required: Baba does not require you to create an account, log in, or provide any personal information to use the Service.

We use the limited information we collect to:

• Deliver content: Serve news articles, faith content, and other information based on your language and category preferences.
• Send push notifications: Deliver breaking news alerts, daily digests, and other notifications you have opted into.
• Maintain saved articles: Sync your bookmarked articles so they persist across app sessions.
• Improve the Service: Analyze aggregated, anonymized usage patterns to improve content curation, app performance, and user experience.
• Fix bugs and ensure stability: Use crash reports and device information to diagnose and resolve technical issues.

We do not sell, rent, or trade your personal information. Period.

We may share limited data in the following circumstances:

• Service providers: We use Vercel (hosting), Upstash (database), and Apple Push Notification Service (APNs) to operate the Service. These providers process data on our behalf under contractual obligations to protect your information.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Safety: We may disclose information if we believe it is necessary to protect the safety, rights, or property of our users, the public, or Baba App.

No advertising: Baba does not display advertisements and does not share any data with advertising networks or data brokers.

• Device tokens: Retained for 30 days of inactivity, then automatically deleted.
• Saved articles: Retained for up to 1 year, or until you manually remove them.
• News content: Aggregated articles are retained in our system for 48 hours, after which they are automatically removed. Deduplication hashes are retained for up to 7 days.
• Usage analytics: Aggregated and anonymized analytics data may be retained indefinitely, as it cannot be linked to individual users.

We implement appropriate technical and organizational measures to protect your data, including:

• All data transmitted between the App and our servers is encrypted using TLS 1.3
• Server infrastructure is hosted on Vercel's secure cloud platform with SOC 2 compliance
• Database access is restricted and authenticated using secure tokens
• Administrative access to our systems is protected by HMAC-signed session authentication with automatic expiration
• No passwords or sensitive credentials are stored in the App

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

The Service contains links to third-party websites (news publishers, YouTube, podcast platforms, etc.). When you click a link to an external website, you leave our Service and are subject to that third party's privacy policy.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us and we will promptly delete such information.

9.1 Access and Deletion

Since Baba does not require an account and collects minimal data, most of your data exists only on your device. You can:

• Delete the App at any time, which removes all locally stored data
• Clear your saved articles within the App's settings
• Request deletion of any server-side data associated with your device token by contacting us

9.2 Push Notifications

You can manage push notifications by:

• Adjusting notification settings within the App
• Disabling notifications through your device's system settings

9.3 Language and Preferences

You can change your language, content preferences, and all other settings at any time within the App's Settings section.

Our servers are located in the United States. If you are accessing the Service from outside the United States, your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers.

We take appropriate measures to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request information about the categories and specific pieces of personal information we have collected.
• Right to delete: You may request deletion of your personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• No sale of data: We do not sell personal information to third parties.

To exercise these rights, contact us at the address below.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to data processing based on legitimate interests

Our legal basis for processing data is legitimate interest (providing and improving the Service) and your consent (push notifications, saved articles).

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to, or correction of, your personal information by contacting us. We will respond to your request within 30 days.

The App does not use cookies. The App does not use any third-party tracking SDKs, analytics frameworks (such as Google Analytics, Facebook SDK, or similar), or advertising identifiers.

The Website uses minimal, essential cookies only for administrative session management. No tracking cookies, advertising cookies, or analytics cookies are used on the public-facing website.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes may also be communicated through the App.

Your continued use of the Service after changes to this policy constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all legitimate privacy inquiries within 30 days.