Privacy Policy

1. Who this policy is for

This privacy policy applies to the Bakbakum mobile app, clinic dashboard, company registration flow, patient onboarding flow, and related web pages.

It applies to parents, guardians, clinics, therapists, company admins, and linked patient accounts.

2. What information we may collect

• account data: email, username, password hash, sign-in provider
• child or usage profile: self / boy / girl selection, month-year of birth
• parent / guardian data: name, phone number, contact details
• clinic data: company name, address, admin email, therapist workflow data
• patient linkage data: unique patient ID, linked clinic, activation status
• practice record: the assigned plan, which exercises were opened, when, for how long, and the child’s answers
• microphone: used on the phone in speaking exercises; recordings stay on the device and are not uploaded
• technical data: device information, log data, IP address, error and performance data
• if you use Google sign-in: basic profile information from your Google account, such as email, account identifier, and available name

3. Why we use this information

• to create accounts, log in, and authenticate
• to set up the app for the child (name, age group)
• to link patients with a clinic or therapist
• to deliver the therapist-assigned home practice and show the practice record to the linked clinic
• to provide customer support and maintain service stability and security
• for aggregated product improvement and service monitoring

4. What Bakbakum does not do

Bakbakum does not assess the child’s pronunciation, makes no diagnosis, does not suggest exercises and does not recognise emotions. The therapist chooses every exercise and interprets the practice record.

If you have significant concerns about speech, language, hearing, or development, you should speak to a speech therapist, audiologist, or doctor.

Bakbakum is not an emergency service and should not be used as a substitute for a clinic or licensed professional care.

5. What happens when a clinic links your account

If a parent or patient visits a hearing centre or speech therapy centre and provides their Bakbakum ID, that clinic can link the patient account to their dashboard.

After linking, the relevant clinic team can see the patient profile, the assigned plan and the practice record (which exercises were done, when and for how long).

6. Who we may share data with

We do not sell personal data to third parties.

• linked clinics, therapists, or authorised care teams
• service providers such as hosting, storage, email delivery or security providers; for the exercise voice, a speech-synthesis provider (Microsoft) receives the exercise text only — never the child’s name or voice
• for booking an intro call on this website: Microsoft Bookings. The booking calendar only loads after you click to open it; what you enter there is processed by Microsoft on our behalf
• where required by a legal obligation or a valid regulatory request
• in the context of a business restructuring, merger, or acquisition, where required by law

7. Our approach to children's data

Although Bakbakum is a child-focused product, child accounts are generally created, linked, or managed by a parent, guardian, or clinic.

We follow a policy of not collecting unnecessary child data and of keeping the minimum necessary data wherever possible.

A parent, guardian, or authorised clinic representative can request to update, correct, or delete a child's data.

8. Research, product improvement and the synthetic voice

Bakbakum may use aggregated or de-identified usage data for product improvement.

Identifiable child data, practice responses or similar sensitive data will not be used for research or model development without explicit consent. The voice in the exercises is a synthetic voice (Microsoft Neural Voice, post-processed by Bakbakum); every audio clip is marked as AI-generated.

If separate consent is sought in future for research, analytics, or model improvement, this will be communicated clearly.

9. Data retention

Data may be retained for as long as an account is active, a clinic relationship continues, or it is needed for support, security, backup, or legal obligations.

On a deletion request or service closure, data may be removed, anonymised, or archived as needed.

Some data may be kept longer for fraud prevention, security logging, billing records, or legal compliance.

10. Security

We use reasonable technical and organisational security measures to reduce unauthorised access, disclosure, alteration, or loss.

However, no system is 100% secure.

11. Your rights

• request access to the account information we hold about you
• request correction of inaccurate data
• request deletion or unlinking where appropriate
• object to or restrict certain processing
• opt out of marketing or non-essential communication
• contact support for any privacy-related question

12. Service providers and third-party processing

Bakbakum may use third-party service providers for hosting, cloud storage, transactional email, crash reporting, analytics, or authentication support.

These providers may be given access to data only for necessary service delivery, security, or operational support.

13. Changes to this policy

This policy may be updated from time to time. If there are significant changes, an updated effective date will be published.

14. Waitlist for parents

If you sign up at bakbakum.de/warteliste, we store your e-mail address, your child's age group, the page that brought you to us, and the time and IP address of your sign-up and of your confirmation. Purpose: we tell you about the app launch and the founding offer and send you play ideas. The legal basis is your consent (Art. 6 (1) (a) GDPR); we store the time and IP address to be able to prove your consent (Art. 6 (1) (c) and (f) GDPR).

Sign-up uses double opt-in: without confirmation we delete your details after 7 days. We send the e-mails through the service Resend (Resend, Inc., USA) as our processor.

You can withdraw your consent at any time, through the unsubscribe link in every e-mail or by e-mail to privacy@bakbakum.app. We then delete your e-mail address; we keep the proof of your earlier consent, without your address, for up to three years.