Privacy Policy

Last updated: April 2026

Bambino.io ("we", "us", "our") is committed to protecting the privacy of our users, especially when it comes to children's photos. This policy explains what data we collect, how we use it, and how we protect it.

What We Collect

Photos you upload: We temporarily store your photos for AI processing only. All photo metadata (EXIF data including GPS location, camera info, and timestamps) is stripped on upload before any processing occurs.

Account data (optional): If you choose to sign in, we store only your display name and authentication provider ID. We do not store your email address, phone number, date of birth, or location.

Usage analytics: We collect anonymous, aggregate usage statistics (e.g., number of photos processed per day). We do not track individual users, log IP addresses, or use cookies for tracking.

How We Use Your Data

  • Photos are used solely to generate your stylized image
  • Photos are never used to train, fine-tune, or evaluate AI models
  • Photos are never shared with third parties
  • Account data is used only to identify you when you sign in

Data Retention

Photos: Automatically and permanently deleted within 24 hours of upload. This is enforced by automated storage lifecycle policies -- no manual process is required.

Generated results: For anonymous users, deleted within 24 hours. For signed-in users, results may be retained for up to 30 days in your personal gallery. You can delete them at any time.

Account data: Retained until you delete your account. Account deletion permanently removes all associated data.

Your Rights

Under GDPR, CCPA, and other applicable privacy laws, you have the right to:

  • Access the data we hold about you
  • Request deletion of your data (Right to Erasure)
  • Withdraw consent for data processing at any time
  • Request a copy of your data in a portable format

Children's Privacy

We are aware that our service involves photos of children. We take this responsibility seriously:

  • We do not collect personal information from children
  • Photos of children are processed and deleted within 24 hours
  • We do not use children's photos for any purpose other than generating the requested stylization
  • We do not share children's photos with any third party

Security

All data is encrypted in transit (TLS/HTTPS) and at rest. Photos are stored in private cloud storage buckets with strict access controls. Our infrastructure is hosted on Oracle Cloud Infrastructure (OCI) with enterprise-grade security.

Cookies

We use only essential session cookies required for authentication. We do not use tracking cookies, advertising cookies, or analytics cookies. We do not use any third-party tracking services.

Contact

For privacy-related questions or to exercise your rights, please contact us at privacy@bambino.io.