1- OWNERSHIP AND EDITORIAL RESPONSIBILITY
This Privacy Policy governs the collection and processing of your Personal Data in connection with our provision of the application.
We are the data controller.
In connection with the provision of the Application, we may collect and process your
Personal Data.
We have implemented strict rules and procedures to protect them.
You are fully informed that the Personal Data submitted and collected will be subject to automated processing.
. 2 - DEFINITIONS
For the purposes of this Privacy Policy, the following definitions shall apply to
all terms beginning with a capital letter, whether in the singular or plural:
- “Application”: the Baobab application that We publish. It can be used
on various mobile devices.
- “Account”: Your account on the Application, accessible via Your username
and Your password, and containing Your personal information as well as
Your history.
- “Terms and Conditions” or “T&C”: the Application’s terms and conditions,
accessible within the Application.
- “Personal Data”: the personal data that We collect
and process.
- “We”, “Our,” “Ours”: refers to the company BAOBAB LABS,
, a simplified joint-stock company with a share capital of £1,500, whose registered office
is located at 1 Impasse des Amandiers 71700 TOURNUS, registered with the
Mâcon Trade and Companies Register under number 985 354
158.
- “Party”: Baobab Labs and/or You, taken individually and/or collectively.
- “Privacy Policy”: this document.
- “You,” “Your,” “Yours”: refers to you, the user of the Application.
3 - SCOPE AND AMENDMENTS TO THE PRIVACY POLICY
This Privacy Policy governs the collection, processing, and disclosure of Your
Personal Data by Us in connection with the provision and use
of the Application. It also details how You may exercise Your rights regarding Personal Data
.
You must read the entire Privacy Policy and
accept it without reservation.
You will be deemed to have accepted this Policy by clicking the "Accept" button for the Privacy Policy at
during registration within the Application.
We reserve the right to modify the Privacy Policy at any time by publishing a new version on the Application at
, notifying you by email, or displaying a notification upon your next login at
.
If you do not accept the amended Privacy Policy, you will not be able to continue using the Application at
and may request the deletion of your Account.
The applicable Privacy Policy is the most recent one you have accepted.
If you are a minor under the age of 15, the consent of your parent or legal guardian
must be obtained in addition to your consent, whenever consent is
required.
The App may contain links to third-party websites. These websites may have different privacy policies, and we are not responsible for them.
4 - HOW IS DATA COLLECTED?
We may collect your Personal Data in various ways:
- When you sign up for the app.
- When you use the app.
- When you contact us, for any reason.
5 - WHAT PERSONAL DATA IS COLLECTED, AND FOR WHAT PURPOSES?
We collect and process Personal Data to fulfill Our contractual obligations
to you, including:
- Providing you with an account;
- Making the Application available;
- Displaying content that meets your needs, in particular by enabling the
processing of your content using an artificial intelligence model;
- Being able to provide you with the Application free of technical errors, in a secure manner
, and to detect and correct any errors.
- To compile usage statistics.
They are adequate, relevant, and limited to what is necessary in light of the purposes
for which they are processed.
We may also collect Personal Data for Our legitimate interest, and
in particular
- To improve Our Application.
With Your specific consent, this Personal Data may also be
used for:
- Sending information about our activities;
- Sending marketing and promotional offers related to Our Services via email and on any
another medium.
However, you may choose at any time to decline to provide certain Personal Data
within the App’s settings; please note that this may
affect the App’s proper functioning, as certain Personal Data
is required to continue using it.
We do not collect any sensitive data. The following data is considered sensitive:
racial or ethnic origin, political opinions, religious or
philosophical beliefs, trade union membership, data concerning health or
sexual orientation. If such information were to be communicated to us in any way,
it will be deleted as soon as we become aware of the situation.
We may collect and process the following Personal Data, if it has been provided
- If the Account is created by a parent for their child:
- The parent's first name;
- The parent's email address (if creating an account with an email address and a password)
(via Apple ID or Google ID);
- If a child uses a parent's account, the parent may
create a user within their parent's account.
- If the child uses their own account, the parent should
sends an invitation link or has them scan a QR code.
- The child's first name;
- The child's gender (optional);
- The child's school (optional);
- The child's grade level;
- Audio recording of the child reading their lessons;
- Photos of the child's classes (if they include Data)
(Personal);
- Communication with support.
- If the account is created by a child over the age of 15:
- The child's first name;
- The child's email address (if an account is created using an email address and a password)
(via Apple ID or Google ID);
- The child's gender (optional);
- The child's school (optional);
- The child's grade level;
- Audio recording of the child reading their lessons;
- Photos of the child's classes (if they include Data)
(Personal);
- Communication with support.
This Personal Data is necessary to allow you to access the
application (access your account), ensure its proper functioning, provide you with a personalized
experience (unique profile), provide support for using the application, compile statistics on the application’s usage (
), and notify you of any changes related to
the application.
6 - DATA STORAGE LOCATION
As soon as possible, the collected Personal Data is stored within the European Economic Area (EEA) by a service provider that adheres to industry standards for IT secur
.
However, it cannot be ruled out that certain Personal Data collected may be transferred outside the European Union by our subprocessors.
Where applicable, these recipients have contractually committed to us to comply with
rules that are at least equivalent to those applicable within the European Union, in particular
by signing the European Commission’s standard contractual clauses, or
to carry out such transfers only to countries that have been granted an adequacy decision.
7 - DISCLOSURE OF PERSONAL DATA AND SUBCONTRACTING
Personal Data will never be disclosed to a third party without your prior consent.
However, we may disclose Personal Data to a third party if we are
required to do so in response to a legal obligation, or to the surviving entity in any merger, sale, or consolidation
in which we participate, or to the purchaser of all or
a substantial portion of our shares or our business.
We may use the following service providers, who may have access to Personal Data
, which you agree to:
- Application hosting provider (applies to all Data)
(Personal information provided):
- Google Cloud Platform: a data center located within the Espace
European Economy has been selected.
- APIIA:
- OpenAI (children's photography course or audio version, and grade level)
(of the child): Personal Data may be transferred outside of
the European Economic Area. However, we have entered into a contract with
OpenAl prohibits the reuse of data for training purposes
template, and providing for the deletion of such data within a period of
reasonable.
- Mistral (children's photography course or audio version, and grade level)
(of the child): Personal Data is hosted within the Space
European Economic Area. We have entered into an agreement with Mistral prohibiting
the reuse of data for model training purposes, and providing for
the deletion of this data within a reasonable timeframe.
- Anthropic (children's course in photography or audio version, and level
(the child's school): Personal Data may be transferred outside
of the European Economic Area. However, we have entered into a contract
with Anthropic prohibiting the reuse of data for purposes
model training, and providing for the deletion of this data in
ur1 ueluI UISUNTUDIE.
- Data visualization provider:
- OneSignal, Inc. (user email): A data center located within the European Economic Area (
) has been selected.
These subcontractors have contractually committed to us to comply with their legal and regulatory obligations regarding personal data.
We may modify the list of subcontractors at any time by updating our Privacy Policy on our web
.
Personal Data may also be disclosed to any administrative authority
upon request, or as required by law or by court order.
8 - PROTECTION OF PERSONAL DATA
We ensure that Personal Data is stored under conditions that are
and comply with industry standards.
In particular, we are committed to complying with the regulations governing the security of Personal Data
.
We ensure that our employees and contractors responsible for processing Personal Data
are subject to appropriate confidentiality obligations and are trained in the
processing of Personal Data.
In the event of a personal data breach, we will notify you as soon as possi
.
We will store Personal Data for the duration of your account’s validity,
unless it has been anonymized, in which case it may be retained indefinitely. Similarly, if the Account has been inactive for three (3) years, or if you delete the account yourself,
the Personal Data will be automatically deleted,
unless it has been anonymized.
In that case, we will delete all Personal Data, except for data that is strictly necessary for
to comply with its legal obligations, as well as data that has been
anonymized.
9 — COOKIES AND TRACKERS
What is a cookie?
A cookie is a text file that may be stored on a device when a user visits an online service using a web browser. A cookie file allows its issuer, during its validity period, to recognize the device in question each time that device accesses digital content containing cookies from the same issuer.
What are the cookies and trackers used on our website for?
The cookies we use allow us to:
- To compile statistics and data on traffic and usage of the various
components of our website.
- To adapt the layout of our website to your device's display settings.
- To store information related to a form you filled out on
Our website.
- To allow you to access restricted and personal areas of our website.
The cookies are as follows:
Issuer Cookie Name Cookie Type
Meta Meta Pixel Tracking Cookie
Google Firebase Authentication
Token
Bearer token (token
(identification)
How can you control the cookies that are used?
You can prevent cookies from being installed by following these steps:
- By opting out via the banner provided for that purpose.
- By deleting them using the appropriate browser option.
- Google Chrome: Tools menu / Settings / Show settings
Advanced / Content Settings / Allow data storage
local.
- Edge: https://support.microsoft.com/fr-fr/help/17442/windows-internet-
explorer-delete-manage-cookies
- Mozilla Firefox: https://support.mozilla.org/fr/kb/activer-desactiver-
cookies-preferences
- Safari: https://support.apple.com/fr-fr/guide/safari/sfrill471/mac
Only technical cookies cannot be refused, as they are necessary for the proper
functioning of the Site.
You have the option to accept some cookies and reject others, to accept all of them
, or to reject them all, keeping in mind that this may disrupt the functioning of the
website if they are functional cookies.
10 — YOUR RIGHTS
In accordance with the French Data Protection Act and the GDPR, you have the following
rights regarding all Personal Data you have provided to us:
- Right of access
- Right to rectification and modification
- Right to restrict processing
- Right to object
- Right to data portability
You may exercise these rights by contacting us at the following email address:
reclamation@baobab-labs.com
In accordance with our legal obligations, we will respond to you within one (
) month of receiving your request.
11. GOVERNING LAW AND DISPUTES
These terms and conditions are governed by French law.
The Privacy Policy is written in French, and the French version shall prevail—even
—in the event of a translation into another language.
You may submit to the CNIL any dispute regarding the performance or interpretation of the
Privacy Policy that cannot be resolved amicably between the Parties.
It may also be brought before the competent court within our company’s jurisdiction, including
in cases involving summary proceedings, third-party claims, or multiple defendants, regardless of
your country of origin.