Privacy Policy
Last updated: 26 August 2026
This policy explains what personal data the Bambinoush mobile app collects, why, how long we keep it, and what your rights are. Bambinoush connects parents and babysitters. Access is reserved for people aged 18 and over, whether parents or babysitters.
1. Data controller and applicable law
TO BE COMPLETED BEFORE PUBLICATION: exact company name, company number (ח.פ.) and registered address in Israel.
For any question about your data, or to exercise your rights:contact@bambinoush.com. We reply within 30 days at the latest.
The service is established and operated in Israel. Processing of your data is governed by theIsraeli Protection of Privacy Law, 5741-1981, as amended — in particular by Amendment No. 13, in force since 14 August 2025 — and by theProtection of Privacy Regulations (Data Security), 5777-2017.
If you live in the European Economic Area, theGeneral Data Protection Regulation (GDPR) also applies to you. The rights it gives you are set out in section 8.
2. Data we collect
Account data
- Email address and password (stored as a hash, never in clear text), or your Google or Apple sign-in identifier if you use those services.
Profile data
- First name, last name, phone number, profile photo, preferred language, role (parent or babysitter).
- City and neighbourhood of availability: an approximate location that you enter yourself. The app collects no GPS location, neither one-off nor continuous.
- For babysitters: introduction, availability, areas covered, hourly rate.
Data about children, entered by the parent
First name, date of birth, sex, and optionally a photo, for the sole purpose of informing the babysitter about a babysitting job. This data is provided voluntarily by the parent holding parental authority, on the basis of their consent, which can be withdrawn at any time.
Who can see it: only babysitters who have applied to that parent’s listing, or who are linked to them by a babysitting request. It is never public, never visible to other parents, and never reachable through search. The app blocks screenshots while a photo of a child is displayed.
The parent can remove a photo or a piece of information at any time from the app; removal is immediate.
Identity verification (optional)
If you wish, you can have your identity verified to obtain the “verified profile” badge.This is entirely optional: the app remains usable without it, and you can decline at any time.
It is carried out by our provider Didit, which asks you to photograph an identity document and record a short selfie in order to check that the document is yours.This face comparison is processing of biometric data. Under Israeli law, such data is sensitive information within the meaning of the 1981 law as amended; under European law it falls under Article 9 of the GDPR. In both cases, processing rests on yourexplicit consent, collected before the process starts and withdrawable at any time.
Photographs of your identity document and your selfie are never kept by Bambinoush.They are processed by Didit and never pass through our servers. We only receive the outcome of the verification:
- the document type (identity card or passport) and its country of issue;
- your last name, first name, date of birth and the document’s expiry date, as read from it;
- a cryptographic fingerprint of the document number — never the number itself — used solely to prevent the same document being used to create several accounts;
- the outcome (accepted, refused, under review) and, if refused, the reason, so that we can explain it to you.
Your last name, first name, date of birth, and the document’s type and country aredeleted no later than 7 days after the file is submitted, whether or not a decision has been reached. What remains afterwards is: the “verified” status of your profile, and the cryptographic fingerprint of the document number. That fingerprint iskept deliberately, because it alone durably prevents the same identity document being used to create several accounts; it cannot be reversed and does not allow the number to be recovered.
The decision is made automatically. When a file calls for review, it is examined by a member of our team. You may at any time request human intervention, contest the decision or express your point of view by writing tocontact@bambinoush.com.
Identity verification confirms that you are the person shown on your profile.It is not a criminal background check and says nothing about a user’s behaviour.
Service usage data
- Listings, requests and bookings (dates, times, details).
- Messages exchanged between users through the app’s messaging, including voice messages.
- Reviews and ratings left after a babysitting.
- Reports and blocks that you make.
Subscriptions
Subscriptions and paid options are handled by Apple’s App Store or Google Play, through our provider RevenueCat. We neither collect nor store your card details; payment is processed by the store concerned.
Technical data
- Usage statistics and crash reports, to fix faults and improve the app.
- Device identifier, app version and notification token, if you accept notifications.
3. Why we use this data, and on what basis
| Purpose | Legal basis |
|---|---|
| Providing the introduction service | Performance of the contract |
| Securing accounts, preventing fraud and abuse | Legitimate interest and security obligation |
| Notifications about your listings, requests and messages | Performance of the contract |
| Support and improving the app | Legitimate interest |
| Children’s data and photos | Parent’s consent, revocable |
| Identity verification (biometrics) | Explicit consent, revocable |
| Commercial or promotional messages | Prior consent, withdrawable at any time |
We only send you a commercial or promotional message if you have consented beforehand, in accordance with section 30A of the Israeli Communications Law (Telecommunications and Broadcasting), 5742-1982. Every such message includes a simple way to unsubscribe, and refusing has no effect on your use of the service. Messages tied to how the service works — an application received, a babysitting reminder, a message from another user — are not commercial messages; you can turn them off in your phone’s settings.
4. Sharing data
We do not sell your data and we do not pass it to any third party for advertising purposes.
Some profile information (first name, photo, rating, neighbourhood) is visible to other users as part of the normal service — for example a listing visible to babysitters. Your contact details are only revealed once a babysitting has been accepted.
We use technical processors that handle data on our behalf, on our instructions and under contract:
| Provider | Role | Hosting |
|---|---|---|
| Supabase | Database, authentication, file storage | European Union (Frankfurt) |
| Apple, Google, RevenueCat | Subscriptions and payments | Depending on the store |
| PostHog | Usage statistics | European Union |
| Sentry | Crash reports | European Union |
| Resend | Sending the service’s emails | European Union |
| Didit | Identity verification, only at your request | See the provider’s policy |
We may also pass data to a competent authority where the law requires it or upon a judicial order.
5. Transfers of data outside Israel
Our servers and those of our main processors are located in the European Union. Your data is therefore transferred outside Israel, to a territory recognised as providing an adequate level of protection, in accordance with the Israeli Protection of Privacy Regulations (Transfer of Data Abroad), 5761-2001. These transfers are covered by processing contracts imposing confidentiality and security.
6. How long we keep your data
| Data | Retention |
|---|---|
| Account and profile | As long as the account is active |
| Children’s data and photos | As long as the parent keeps them in the app; deleted with the account |
| Listings, bookings, messages and reviews | For the life of the account, then anonymised |
| Identity verification data | 7 days after the file is submitted, whether or not a decision was reached |
| Technical logs and crash reports | Up to 90 days |
| Data required by a legal obligation | For the period the law imposes |
When you delete your account, your personal data is erased or anonymised, unless the law requires it to be kept. Deletion is done from the app, under Profile → Delete my profile.
7. Security
Data is transmitted over encrypted connections (HTTPS) and stored on servers with restricted access. Passwords are never stored in clear text. Access to data is partitioned by rules applied at database level, so that a user can only read what concerns them. These measures sit within the framework of the Israeli Protection of Privacy Regulations (Data Security), 5777-2017.
In the event of a serious security incident affecting your data, we inform the Israeli Privacy Protection Authority under the conditions set out in those regulations, and we inform you directly where the incident is likely to harm your rights.
8. Your rights
Under Israeli law, you have the right to review the data we hold about you, and to request its correction or deletion if it is inaccurate, incomplete or out of date. You may also withdraw, at any time, a consent you have given us.
If you live in the European Economic Area, you additionally have the rights of access, rectification, erasure, restriction, portability and objection provided by the GDPR.
To exercise these rights, write tocontact@bambinoush.com. You can also delete your account directly from the app.
Complaints: if our answer does not satisfy you, you may refer the matter to the Israeli Privacy Protection Authority (הרשות להגנת הפרטיות). If you live in the European Economic Area, you may also refer it to the supervisory authority of your country of residence.
9. Children
The children being cared for never use the app and have no account on it.
No minor may open an account, either as a parent or as a babysitter. A date of birth is requested at sign-up and the age is verified: registration is refused below 18, and the date of birth cannot be changed afterwards. Should a minor's account nevertheless be reported to us, it would be closed and its data deleted; a legal guardian may request this by writing to contact@bambinoush.com.
Information about a child is entered solely by the parent, under their responsibility, for the sole purpose of organising a babysitting job. We use it for no other purpose: no statistics, no service improvement, no communication. If you believe information about a child has been added without the right to do so, write to us: we delete it without delay.
10. Changes
This policy may be updated. The date it was last updated appears at the top of the page. If there is a significant change, we tell you in the app before it takes effect.
See also our Terms of Use and ourhelp and support.
Any question :contact@bambinoush.com
← Back to home