PRIVACY POLICY

1. Introduction

ZipLyne LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the baba App, the baba Web App, the baba Chrome Extension, or baba: learn hebrew ("baba Learn"), together the "Services." IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

Baba News (news.itsbaba.com) is a separate product with its own privacy practices, not covered here. See Section 2.6.

1.1 Key Points Summary

1.2 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email, an in-app notice, or a push notification. The "Last Updated" date above shows when it was last revised. Continued use of a Service after changes are posted means you accept the revised policy.

2. Information We Collect

The categories below apply broadly across our translation products (the baba App, Web App, and Chrome Extension), followed by the specifics for baba Learn, baba Enterprise, and Baba News.

2.1 Account Information (App, Web App, Extension)

When you create an account, we collect your email address, a hashed password (if you use one), display name, language preferences, and communication preferences. Signing in with the same account links your data across the App, Web App, and Extension.

2.2 Translation Content

We process the text you input for translation, images you upload for image translation, the resulting translations, the context settings you choose (such as gender context or formality level), and, if you save it, your translation history.

3. How We Use Your Information

We use the information described in Section 2 to:

• Operate, maintain, and improve the Services and provide translation, learning, and localization functionality
• Process and manage subscriptions and payments
• Sync your history, progress, or entitlements across devices and products when you are signed in
• Personalize your experience and remember your preferences
• Send service-related communications, respond to support requests, and (where you've opted in) send product updates or marketing
• Send push notifications or reminders you've enabled, which you can disable in device settings
• Diagnose crashes, fix bugs, and monitor the reliability of the Services
• Detect, prevent, and respond to fraud, abuse, and security threats, and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We share information only with service providers who help us run the Services, each authorized to use it only as necessary to provide their service to us:

• AI providers (via OpenRouter and Cloudflare AI Gateway): to generate translations and learning feedback. Providers include Anthropic for translation features and Google and OpenAI for Learn conversations and recaps, and TypeSafe for practice and memory relevance decisions. OpenAI and ElevenLabs also transcribe Learn voice replies, as described in Section 2.6.
• Text-to-speech (ElevenLabs): to generate spoken audio for supported features.
• Cloud infrastructure (Neon, Cloudflare): to host our database and run our servers.
• Apple, Google, and RevenueCat: to process and manage mobile subscriptions and in-app purchases.
• Stripe: to process and manage Web App subscriptions.
• Resend: to deliver transactional email, including sign-in links.
• Sentry: to receive crash reports and diagnostic data.
• Google Analytics, Meta Pixel, and PostHog: on the public marketing website for traffic measurement and ad-conversion tracking. The Web App also uses Google Analytics and PostHog for product analytics. Learn uses PostHog, AppsFlyer, and OneSignal as described in Section 2.6; translation text and Learn conversations are excluded from analytics.

We may also disclose information where required by law, to protect our rights or the safety of our users or the public, to investigate fraud or abuse, or in connection with a merger, acquisition, or sale of assets, in which case you will be notified by email and/or a notice in the Services.

5. Cookies and Tracking Technologies

Our marketing website (itsbaba.com) uses cookies and similar technologies from Google Analytics, Meta Pixel, and PostHog to measure traffic and ad performance, and the Web App (app.itsbaba.com) uses Google Analytics and PostHog to measure how its features are used. PostHog may also record how visitors interact with the marketing website (clicks, scrolling, and page navigation), and with the Web App's onboarding and subscription screens, so we can find broken or confusing pages; anything you type into a form or a translation box is masked before it leaves your browser. You can control these through your browser's cookie and privacy settings, your device's ad-tracking controls, or opt-out tools offered by those providers.

Within the baba translation App and Extension, we use local storage and cookies to keep you signed in and remember preferences. The Web App adds the analytics cookies described above. Learn caches account and learning data on the device and uses the analytics and advertising measurement described in Section 2.6.

6. Data Retention

We retain personal information only as long as necessary for the purposes in this Policy, unless a longer period is required by law.

• Account information: retained while your account is active, plus up to 90 days after deletion for backup and legal-compliance purposes.
• Translation history, uploaded images, and learning progress: retained while your account is active; deleted or anonymized within 30 days of account deletion.
• Usage and log data: typically retained 12-24 months for analytics and security purposes.
• Diagnostic/crash data: kept for a limited period; Learn diagnostics may be linked to an account identifier.
• Learn voice recordings: deleted after at most 30 days. Text, progress, and learning memory remain while the account is active, unless removed sooner. Account deletion covers stored learning data and recordings.
• Financial records: retained for 7 years as required by law.

7. Your Data Rights and Choices

Depending on your location, you may have rights regarding your personal information:

7.1 General Rights (All Users)

• Access: request a copy of the personal information we hold about you by contacting privacy@itsbaba.com.
• Correction: update your account information in-app or in your account settings, or ask us to correct it.
• Deletion: delete your account and data from within the relevant app's settings, or by contacting privacy@itsbaba.com. See our Data & Privacy page for step-by-step instructions per product.
• Marketing Opt-Out: unsubscribe via the link in any marketing email or your in-app notification settings.

7.2 GDPR Rights (EEA, UK, and Switzerland)

• Right of access, rectification, and erasure ("right to be forgotten")
• Right to restrict or object to processing, including processing based on legitimate interests or for direct marketing
• Right to data portability
• Right to withdraw consent at any time, without affecting processing carried out before withdrawal
• Right to lodge a complaint with your local supervisory authority

7.3 CCPA/CPRA Rights (California)

• Right to know what categories and specific pieces of personal information we've collected
• Right to delete, and right to correct inaccurate personal information
• Right to opt out of sale or sharing: we do not sell or share personal information as defined under California law
• Right to non-discrimination for exercising these rights

7.4 Israeli Privacy Rights

If you are located in Israel, you have rights under the Protection of Privacy Law (PPL), as amended by Amendment 13, including rights of access, correction, deletion, and objection, and the right to lodge a complaint with the Israeli Privacy Protection Authority.

8. International Data Transfers

We primarily operate from the United States, with our founder and team based in Israel and other locations globally. Your information may be transferred to and processed in the United States, Israel, and countries where our service providers operate, whose data-protection laws may differ from your own jurisdiction's.

If you are in the EEA, UK, or Switzerland, we rely on recognized transfer mechanisms, such as adequacy decisions (including the adequacy decision covering transfers to Israel), Standard Contractual Clauses, or other approved safeguards, for transfers outside those regions.

9. Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit (TLS/SSL) and at rest, hashed passwords, role-based access controls, and network security through our infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a data breach affects your personal information, we will notify you and relevant authorities without undue delay, as required by applicable law.

11. Questions, Concerns, and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, contact us at:

11.1 Supervisory Authorities

If you are in the EEA, UK, or Switzerland, you may lodge a complaint with your local data-protection authority. If you are in Israel, you may contact the Israeli Privacy Protection Authority at privacy@justice.gov.il.