Privacy Policy (GDPR) – Babyverse by BashBash Labs

Last updated: February 2, 2026

This Privacy Policy explains how Babyverse by BashBash Labs handles personal data when you visit our website or use our services.

1) Who we are

Babyverse is a product operated by BashBash Labs, trading online as BashBashlabs.com ("we", "us", "our"). BashBash Labs acts as the data controller for personal data processed in connection with Babyverse under the General Data Protection Regulation (GDPR).

• Product: Babyverse
• Company: BashBash Labs (BashBashlabs.com)
• Website: https://www.bashbashlabs.com
• Product Website: https://www.babyverse.world
• Contact: hello@babyverse.world

2) What personal data we collect

a) Data you provide

• Email address
• Account or session identifiers required to access the service
• Messages, feedback, or support requests you submit
• Payment-related metadata (processed securely by third-party payment providers)

b) Data we collect automatically

We do not use advertising or tracking cookies. We process limited technical data necessary to operate and secure the service, including:

• IP address
• Device and browser type
• Timestamps and basic system logs

c) Uploaded content

When you upload photos to Babyverse ("User Content"), those images may include personal data such as faces or identifiable individuals.

Important:

• Babyverse does not store your uploaded photos—we store only your generated outputs.
• Uploaded images are not stored—they are used only for processing and are not retained.
• Only generated outputs are saved to your account history.
• Babyverse does not perform biometric identification or identity verification.
• You are responsible for ensuring you have the rights and permissions to upload and process the content.

3) How we use personal data

We use personal data to:

• Provide and operate the Babyverse experience
• Process image and video generations you request
• Authenticate sessions and manage access
• Handle payments and prevent fraud
• Respond to inquiries and support requests
• Maintain security, reliability, and service integrity
• Comply with legal obligations

4) Legal bases (GDPR)

We rely on the following legal bases:

• Contract (Art. 6(1)(b)) to provide the service you request
• Legitimate interests (Art. 6(1)(f)) to secure and operate the service
• Consent (Art. 6(1)(a)) where required
• Legal obligation (Art. 6(1)(c)) where applicable

5) Creative processing and limitations

Babyverse uses advanced generative systems to transform images into new creative forms. Results are artistic and may vary. Outputs should be reviewed before relying on them for important decisions.

User-uploaded content is not used to train, fine-tune, or improve models for other users. We may use aggregated or anonymized usage data (that cannot identify individuals) to improve system performance and reliability.

6) Prohibited sensitive data

Please do not upload highly sensitive personal data, including special categories of personal data under GDPR, biometric identifiers used for identification, health information, or government-issued identifiers, unless explicitly agreed in writing.

7) Service providers

We work with trusted third-party providers for infrastructure, temporary storage, analytics, and payment processing. These providers process limited data only as necessary to deliver the service and are contractually required to protect it.

We may disclose personal data if required by law or to protect the rights, safety, and integrity of Babyverse and its users. A list of subprocessors is available upon request.

8) International transfers

Babyverse serves users globally. Where personal data is transferred outside the EU or UK, we use appropriate safeguards such as Standard Contractual Clauses and additional protective measures where required.

9) Data retention and deletion

We minimize retention by design:

• Uploaded photos are not stored—we do not retain them at all.
• Only generated outputs are saved to your account history.
• Account or session data is retained only as long as necessary to provide the service
• Support communications are typically retained for up to 12 months
• Security logs are retained for limited periods appropriate for system protection

10) Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, restricted access controls, and secure infrastructure practices.

11) Your rights

If you are located in the EEA or UK, you may have the right to:

• Access your personal data
• Correct or delete personal data
• Restrict or object to processing
• Request data portability
• Withdraw consent where applicable

You may also lodge a complaint with your local data protection authority. To exercise your rights, contact hello@babyverse.world.

12) Children's privacy

Babyverse is not intended for use by children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us and we will delete it.

13) Cookies

Babyverse uses only essential cookies required for core functionality. We do not use advertising or tracking cookies. If this changes, we will update this policy and request consent where required.

14) Contact

For privacy-related questions or requests:

Email: hello@babyverse.world
Website: https://www.babyverse.world

← Back to Babyverse