Last Updated: August 4th, 2026    


    

    BabyBus Co., Ltd and its affiliates (collectively, "BabyBus", "we", "us", or "our") highly respect the privacy of users, including parents and children (collectively, "you", "users"). Through this Privacy Policy, we alm to clearly and cmprehensively explain what personal information (date) we may collect from you and how we collect, use, disclose, and transfer such information.    

    This Privacy Policy complies with the requirements of the U.S. Children's Online Privacy Policy Protection Act ("COPPA"),     

the European General Data Protection Regulation ("GDPR"), and other applicable laws. We may amend this Privacy Policy at any time in accordance with applicable laws; therefore, please review this Privacy Policy periodically to understand how we use your personal information. If we make material changes to this Privacy Policy, we will provide appropriate notice to you as required by law, such as by email.        


   

   

I. Personal Information We Collect    

    We generally collect and obtain information in the following three ways:    

1. Information You Provide Directly to Us    

    Contact information: If you choose to contact us directly by email, we will collect the email address you provide and any other information you voluntarily provide in order to respond to your inquiry. After responding to any inquiry from a child, we will immediately delete all relevant personal information contained therein.    

1. Information We Automatically Collect    

    When you use our Services, we automatically collect certain information, primarily including the following:    

Type of Information                    

Specific Information                    

Data Processing Activities and Description                    

Location Data                    

The approximate geographic location of the device inferred from the IP address, such as country or city level.                    

Note: We do not collect precise GPS location information.                    

1) To provide the Services, such as providing age-appropriate content or language versions based on region;                     

2) to operate, provide, maintain, protect, manage, and customize our applications and the manner in which they are provided;                     

3) to improve the application experience and identify fraud, security, or technical issues related to the applications, such as detecting abnormal login regions.
                   

Technical Data                    

1) IP address;                    

2) Device operating system version, device model, device brand, device resolution, device language, and device identifier (OpenUDID, collected only on iOS);                    

3) Application ID / Bundle ID: used to identify the application operating environment and version updates;                    

4) App Set ID / App Group ID: used for basic cross-application statistical analysis and fraud prevention;                    

5) Cookies: used only for web-based services, which are directed to adults, to maintain login status and perform basic statistical analysis. We do not use Cookies for cross-site tracking or behavioral marketing.                    

1) To ensure the normal operation and compatibility adaptation of applications;                     

2) to analyze application performance and troubleshoot technical failures;                     

3) to prevent fraud and safeguard security; 4) not to be used for behaviorally targeted advertising, profiling, or automated decision-making.

                    

With respect to Cookie management, you may control Cookies through your device system settings or the Cookie banner displayed in our application, and choose to accept or reject non-essential Cookies.                    

Log and Usage Data                    

1) Frequency and duration of application use;                    

2) Features used and actions performed within the application, including browsing and click behavior;                    

3) In-application progress, aggregated usage, and performance data;                    

4) Error and crash reports.                    

1) To improve and optimize application functions and user experience;                     

2) to troubleshoot faults and ensure the stable operation of the Services;                     

3) to conduct aggregated statistical analysis and understand user usage trends, without identifying individuals;                     

4) crash logs will also be used for security incident investigation and remediation verification.
                   

Under no circumstances do we collect your precise location information, such as a specific street address.    

We do not intend to, and do not actively, collect "special categories of data" (such as health, race, religion, political opinions, philosophical beliefs, sexual orientation, etc.), and we have made our best efforts through technical and administrative measures to prevent the accidental collection of such data. If such data is collected due to an unforeseeable system vulnerability, we will delete it immediately and notify the relevant regulatory authorities.    


    

II. How We Use Such Personal Information and Legal Bases    

We will use your personal data only to the extent permitted by law. The specific legal basis for each processing activity is as follows:    

Purpose of Use                    

Types of Data Processed                    

Legal Basis                    

Providing the Services, improving the Services, and customizing the Services according to your individual needs                    

Technical Data; Log and Usage Data                    

Performance of contractual obligations / support for internal operations (as applicable)                    

Managing and protecting our website and mobile applications, and ensuring security                    

Location Data; Technical Data; Log and Usage Data                    

Performance of contractual obligations / support for internal operations (as applicable)                    

Responding to inquiries and providing customer support                    

Contact information (email address); information voluntarily provided by users                    

Performance of contractual obligations / legitimate interests (as applicable)                    

Obtaining consent from a child's parent or guardian                    

                   

Contact information (email address)                    

Legal obligation                    

Establishing, exercising, or defending legal claims                    

Relevant necessary data                    

Legitimate interests                    

   

Please note that, in exceptional circumstances where the law requires us to process personal data and advance notice is not possible, such as an emergency to protect a child's safety, we may process the data without prior notice, but will provide subsequent notice in accordance with law.    


    

III. Children's Privacy    

1. Age Verification and Parental Consent Mechanism    

We attach great importance to the protection of children's privacy. When users use our Services, if a user indicates at a key operation point that his or her age is below the applicable legal age for a "child," we will:    

(1) Limit data collection: behavioral tracking will be disabled by default;    

(2) Seek parental consent: by requiring the email address of a parent or guardian, we will send the parent or guardian a Verifiable Parental Consent notice explaining the types of data we will collect and the purposes for which they will be used;    

(3) Confirmation of consent: the parent must confirm consent by replying to the email. Before obtaining such consent, we will not collect any child's personal data beyond the scope permitted by law, except for technical data necessary for internal operations, such as crash logs.    

2. Information We Collect from Children    

Through the operation of the Services, we may automatically collect the following persistent identifier information generated when children use the application, solely to the extent necessary to support internal operations and never for behavioral advertising, profiling, or contacting children:    

Internal operations specifically refer to crash remediation, service stability monitoring, basic data statistics, security protection, and compliance with legal requirements. We will not use the foregoing data for any other purpose.    

3. Retention of, and Access to/Deletion of, Children's Data    

We retain children's data only for the period reasonably necessary to achieve the purposes for which it was collected, namely providing application services and supporting internal operations.    

Parents or children have the right to refuse any further use or collection of a child's information at any time. If you, as a parent, wish to access, review, or delete your child's information, you may contact us by email at [privacy@babybus.com]. To protect children's privacy, we may request information to verify parental identity, such as records confirming the parental consent email. After a deletion request is made, we will thoroughly remove the child's data from active databases within the period required by law, but may retain de-identified records in backups as necessary for legal compliance or security audits.    


    

IV. How We Disclose the Information We Collect    

We may share or disclose your personal information with a limited number of selected third parties, including:    

1. Our Affiliates    

We may share information with our affiliates, such as BABYBUS (FUJIAN) NETWORK TECHNOLOGY CO., LTD. and JAPAN BABYBUS CO., LTD. These companies will use your personal information in the same manner in accordance with this Privacy Policy. For users subject to the GDPR, the basis on which affiliates process data is our legitimate interests or your consent, as applicable.    

2. Disclosure to Protect Us or Others    

If we believe in good faith that accessing, preserving, and disclosing any information relating to you to external parties is necessary or appropriate, we may do so in order to: comply with law enforcement or national security requests and legal processes, such as court orders or subpoenas; protect the rights, property, or safety of you, us, or others; enforce our policies or contracts; collect amounts owed to us; or assist in the investigation or prosecution of suspected or actual illegal activities to the extent permitted by law.    

3. Disclosure in Connection with Business Transfers    

If we are involved in an actual or proposed merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transfer of services to another provider, your information may be transferred as part of that transaction where permitted by law and/or contract and to the extent permitted by law.    


    

V. How We Protect Your Personal Information    

We adopt appropriate physical, technical, and administrative measures based on existing technology to ensure that your personal data is not lost, used or accessed without authorization, altered, or disclosed.    

Although we have taken measures designed to protect data security, no website or Internet transmission is completely secure, and we cannot guarantee that unauthorized access, hacking, data loss, or other breach events will never occur. If a security incident occurs, we will promptly notify affected users and regulatory authorities in accordance with law. To the maximum extent permitted by applicable law, we shall not be liable for unauthorized access to, use or disclosure of, or loss of, personal information.    

By using our Services or providing personal information to us, and to the extent permitted by law, you agree that we may communicate with you electronically regarding security, privacy, and administrative matters related to your use of the Services. If we discover that a security system has been compromised, we may attempt to notify you by posting a notice within the Services, by mail, or by sending you an email.    


    

VI. Data Storage and Retention    

1. We store information on servers closest to end users in order to provide secure and fast services. Server locations include:    

(1) The United States;    

(2) Hong Kong;    

(3) Germany.    

You acknowledge and agree that your data is processed on our servers or on the servers of our processors, which may not be located in your country of residence. Nevertheless, we will ensure that appropriate measures are taken to protect your personal data as described in this Privacy Policy. This means that all of our service providers and partners must process personal data in a manner consistent with the EU General Data Protection Regulation and other applicable laws.    

2. We retain your information for as long as necessary to provide the Services to you; thereafter, we will continue to retain it to the extent necessary to comply with legal obligations, resolve disputes, enforce agreements, and during applicable limitation periods for legal proceedings.    


    

VII. Your Rights    

This section is divided according to your jurisdiction. Please review the applicable provisions based on your actual circumstances.    

A. General Rights Worldwide (Applicable to All Users)    

You may contact us at [privacy@babybus.com] to exercise the following basic rights:    

Right of access: to obtain a copy of your personal data that we hold.    

Right to rectification: to correct incomplete or inaccurate data.    

Right to erasure ("right to be forgotten"): to request deletion of your data, subject to legal retention obligations.    

Right to restriction of processing: to restrict the way in which we use your data under specific circumstances.    

Right to object to processing: where we process data based on legitimate interests, you have the right to object.    

B. EU/UK Users (GDPR Rights)    

In addition to the rights above, if you are located in the European Union or the United Kingdom, you also have:    

Right to withdraw consent: where we process data based on your consent, you have the right to withdraw it at any time; withdrawal will not affect the lawfulness of processing conducted before withdrawal.    

Right to data portability: to receive an electronic copy of the personal data you have provided in a structured and commonly used format.    

Right to lodge a complaint with a supervisory authority: you have the right to lodge a complaint with your local data protection authority (DPA). For example:    

UK Information Commissioner's Office (ICO): https://ico.org.uk    

Irish Data Protection Commission: https://www.dataprotection.ie    

Contact details for DPAs in other EU Member States are available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en    

Right to object to automated decision-making: We undertake not to conduct automated decision-making; if any exception applies, we will notify you separately.    

C. U.S. Users (COPPA Rights - for Parents)    

If you are a U.S. resident and your child is under 13 years of age:    

Right to review: you have the right to request a review of the personal information we have collected about your child.    

Right to deletion ("Eraser Button"): you have the right to request at any time that we delete all personal information about your child, and we will promptly process such request through the channel described in Section III.3.    


   

Right to refuse further collection: you have the right to require us to stop further collecting or using your child's personal information.    

Please note that the exercise of all rights may require verification of your identity, and the exercise of certain rights may be subject to exemptions under local law, such as where necessary to protect the public interest or to exercise legal claims.    


    

VIII. Contact Us    

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us by email at [privacy@babybus.com].    

We have appointed representatives in the United Kingdom and the European Union respectively in accordance with Article 27 of the GDPR. You may contact them as follows: