← back

Privacy Policy

Last updated: April 12, 2026

baba.gg UG ("baba", "we", "us") operates the baba mobile application and the website baba.gg. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services.

1. Controller

baba.gg UG
Parkaue 34, 10367 Berlin
Germany
Email: hello@baba.gg

2. Data We Collect

Category Data Purpose Legal Basis (GDPR)
Account Email address, display name, profile picture, bio, favourite sports, languages, home base Account creation, identification, and personalisation Art. 6(1)(b) — contract performance
Location (foreground) GPS coordinates (when app is in use) Show nearby sports locations, enable check-ins, calculate distances Art. 6(1)(a) — consent
Location (background, optional) Region monitoring around lobby venues you have joined, active only within ~2 hours of lobby start time Automatically check you in when you arrive at a lobby you've joined Art. 6(1)(a) — explicit opt-in consent
Usage & Analytics Feature interactions, screen views, anonymized event data Product improvement and understanding how features are used Art. 6(1)(f) — legitimate interest
Device Device type, OS version, push notification token Push notifications and app compatibility Art. 6(1)(a) — consent (notifications); Art. 6(1)(b) — contract (compatibility)
Social Friend connections, lobby participation, group membership, lobby chat messages Core app functionality (finding and playing with friends) Art. 6(1)(b) — contract performance
Player awards MVP votes cast after eligible lobbies, final award winners, lifetime Best Player / Nicest Player totals Let players vote on post-game awards and display lifetime award counts on profiles Art. 6(1)(b) — contract performance
Activity Online status (last-active timestamp), notification preferences (quiet hours, per-type settings) Show online friends, respect notification preferences Art. 6(1)(b) — contract performance
Waitlist Email address (via website form) Notify you when baba becomes available Art. 6(1)(a) — consent

3. Third-Party Services

We use the following third-party services to operate baba. Your data may be processed by these providers:

Service Provider Purpose Data Region
AWS (Cognito, DynamoDB, S3, CloudFront, EventBridge, Pinpoint) Amazon Web Services EMEA SARL Authentication, database, file storage, scheduling, push notifications EU (eu-central-1, Frankfurt)
PostHog PostHog Inc. Product analytics EU (eu.posthog.com)
Google Maps Google LLC Map display, geocoding, directions Global (US-based, EU SCCs apply)
Apple Push Notification service (APNs) Apple Inc. Push notifications on iOS Global
Firebase Cloud Messaging (FCM) Google LLC Push notifications on Android Global (US-based, EU SCCs apply)
Expo 650 Industries Inc. App updates and build services US (EU SCCs apply)
Notion Notion Labs Inc. Waitlist form on website US (EU SCCs apply)

For US-based providers, data transfers are safeguarded by EU Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework where applicable.

4. Location Data

Foreground location. baba uses your device location while the app is actively in use to show nearby sports locations, calculate distances, and let you check in manually. Foreground location access is optional — you can deny or revoke permission at any time in your device settings. Without it, some features (check-in, nearby locations) will be limited.

Background location (Auto check-in — optional, opt-in). If you explicitly enable the "Auto check-in" feature, baba registers OS-level geofences around the venues of lobbies you have joined, so the operating system can wake the app and check you in automatically when you physically arrive. This feature:

Background location coordinates are never stored beyond the single check-in event they trigger.

5. Push Notifications

We send push notifications to inform you about friend activity, lobby invitations, and check-ins. You can opt out at any time via your device settings or within the app's notification preferences.

6. Analytics

We use PostHog (EU cloud) for product analytics. Analytics are disabled in development builds. We track feature usage events (e.g. "lobby created", "check-in completed") but do not send personally identifiable information (names, emails) as event properties. You can opt out at any time via the Privacy settings in the app.

7. Data Retention

8. Your Rights (GDPR)

As a user in the EU, you have the right to:

You can exercise your right to access, portability, and erasure directly in the app via Privacy settings (data export and account deletion). For all other requests, contact us at hello@baba.gg.

9. Age Requirement

baba is intended for users aged 17 and above. We do not knowingly collect data from anyone under 17. If you believe someone under 17 has provided us with personal data, please contact us and we will delete it promptly.

10. Push Notification Preferences

You can configure notification preferences within the app, including quiet hours (with timezone) and per-type toggles (e.g. friend requests, lobby updates, check-ins). These preferences are stored on our servers so they persist across devices.

11. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest (AWS managed keys), and access controls. Authentication is handled by AWS Cognito with industry-standard protocols.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. The "last updated" date at the top reflects the most recent revision.

13. Contact

baba.gg UG
Parkaue 34, 10367 Berlin
Germany
Email: hello@baba.gg