← back

Privacy Policy

Last updated: March 22, 2026

baba UG ("baba", "we", "us") operates the baba mobile application and the website baba.gg. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services.

1. Controller

baba UG
Musterstraße 1, 10115 Berlin, Germany
Email: hello@baba.gg

2. Data We Collect

Category Data Purpose Legal Basis (GDPR)
Account Email address, display name, profile picture Account creation and identification Art. 6(1)(b) — contract performance
Location GPS coordinates (when app is in use) Show nearby sports locations, enable check-ins, calculate distances Art. 6(1)(a) — consent
Usage & Analytics Feature interactions, screen views, anonymized event data Product improvement and understanding how features are used Art. 6(1)(f) — legitimate interest
Device Device type, OS version, push notification token Push notifications and app compatibility Art. 6(1)(a) — consent (notifications); Art. 6(1)(b) — contract (compatibility)
Social Friend connections, lobby participation Core app functionality (finding and playing with friends) Art. 6(1)(b) — contract performance
Waitlist Email address (via website form) Notify you when baba becomes available Art. 6(1)(a) — consent

3. Third-Party Services

We use the following third-party services to operate baba. Your data may be processed by these providers:

Service Provider Purpose Data Region
AWS (Cognito, DynamoDB, S3, CloudFront, SES, Pinpoint) Amazon Web Services EMEA SARL Authentication, database, file storage, email, push notifications EU (eu-central-1, Frankfurt)
PostHog PostHog Inc. Product analytics EU (eu.posthog.com)
Google Maps Google LLC Map display, geocoding, directions Global (US-based, EU SCCs apply)
Apple Push Notification service (APNs) Apple Inc. Push notifications on iOS Global
Firebase Cloud Messaging (FCM) Google LLC Push notifications on Android Global (US-based, EU SCCs apply)
Expo 650 Industries Inc. App updates and build services US (EU SCCs apply)
Notion Notion Labs Inc. Waitlist form on website US (EU SCCs apply)

For US-based providers, data transfers are safeguarded by EU Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework where applicable.

4. Location Data

baba uses your location only while the app is actively in use (foreground). We do not track your location in the background. Location access is optional — you can deny or revoke permission at any time in your device settings. Without location access, some features (check-in, nearby locations) will be limited.

5. Push Notifications

We send push notifications to inform you about friend activity, lobby invitations, and check-ins. You can opt out at any time via your device settings or within the app's notification preferences.

6. Analytics

We use PostHog (EU cloud) for product analytics. Analytics are disabled in development builds. We track feature usage events (e.g. "lobby created", "check-in completed") but do not send personally identifiable information (names, emails) as event properties. You can opt out by contacting us at hello@baba.gg.

7. Data Retention

8. Your Rights (GDPR)

As a user in the EU, you have the right to:

To exercise any of these rights, contact us at hello@baba.gg.

9. Children

baba is intended for users aged 12 and above. We do not knowingly collect data from children under 12. If you believe a child under 12 has provided us with personal data, please contact us and we will delete it promptly.

10. Email Communications

We may send you transactional emails (e.g. app invitations sent on your behalf). You can unsubscribe from non-essential emails by contacting us at hello@baba.gg.

11. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest (AWS managed keys), and access controls. Authentication is handled by AWS Cognito with industry-standard protocols.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. The "last updated" date at the top reflects the most recent revision.

13. Contact

baba UG
Musterstraße 1, 10115 Berlin, Germany
Email: hello@baba.gg