Privacy Policy

1. Who this policy is for

This privacy policy applies to the Bakbakum mobile app, clinic dashboard, company registration flow, patient onboarding flow, and related web pages.

It applies to parents, guardians, clinics, therapists, company admins, and linked patient accounts.

2. What information we may collect

• account data: email, username, password hash, sign-in provider
• child or usage profile: self / boy / girl selection, month-year of birth
• parent / guardian data: name, phone number, contact details
• clinic data: company name, address, admin email, therapist workflow data
• patient linkage data: unique patient ID, linked clinic, activation status
• speech screening data: test answers, red flags, result category
• practice data: assigned config, practice flow, session state, progress data
• audio or microphone input: when a user starts a recording in Voice Practice or a similar feature
• technical data: device information, log data, IP address, error and performance data
• if you use Google sign-in: basic profile information from your Google account, such as email, account identifier, and available name

3. Why we use this information

• to create accounts, log in, and authenticate
• to adapt the app experience for the child
• to show speech screening results
• to link patients with a clinic or therapist
• to enable Voice Practice and therapist-assigned home practice
• to provide customer support and maintain service stability and security
• for aggregated product improvement and service monitoring

4. Important note about the Speech Test

Bakbakum's speech test is a screening tool. It is not a medical diagnosis.

If you have significant concerns about speech, language, hearing, or development, you should speak to a speech therapist, audiologist, or doctor.

Bakbakum is not an emergency service and should not be used as a substitute for a clinic or licensed professional care.

5. What happens when a clinic links your account

If a parent or patient visits a hearing centre or speech therapy centre and provides their Bakbakum ID, that clinic can link the patient account to their dashboard.

After linking, the relevant clinic team can see the patient profile, assigned therapy flow, and necessary progress information.

6. Who we may share data with

We do not sell personal data to third parties.

• linked clinics, therapists, or authorised care teams
• service providers such as hosting, storage, email delivery, analytics, or security providers
• where required by a legal obligation or a valid regulatory request
• in the context of a business restructuring, merger, or acquisition, where required by law

7. Our approach to children's data

Although Bakbakum is a child-focused product, child accounts are generally created, linked, or managed by a parent, guardian, or clinic.

We follow a policy of not collecting unnecessary child data and of keeping the minimum necessary data wherever possible.

A parent, guardian, or authorised clinic representative can request to update, correct, or delete a child's data.

8. AI and product improvement

Bakbakum may use aggregated or de-identified usage data for product improvement.

Identifiable child data, speech recordings, practice responses, or similar sensitive data will not be used to train AI models without explicit consent.

If separate consent is sought in future for research, analytics, or model improvement, this will be communicated clearly.

9. Data retention

Data may be retained for as long as an account is active, a clinic relationship continues, or it is needed for support, security, backup, or legal obligations.

On a deletion request or service closure, data may be removed, anonymised, or archived as needed.

Some data may be kept longer for fraud prevention, security logging, billing records, or legal compliance.

10. Security

We use reasonable technical and organisational security measures to reduce unauthorised access, disclosure, alteration, or loss.

However, no system is 100% secure.

11. Your rights

• request access to the account information we hold about you
• request correction of inaccurate data
• request deletion or unlinking where appropriate
• object to or restrict certain processing
• opt out of marketing or non-essential communication
• contact support for any privacy-related question

12. Service providers and third-party processing

Bakbakum may use third-party service providers for hosting, cloud storage, transactional email, crash reporting, analytics, or authentication support.

These providers may be given access to data only for necessary service delivery, security, or operational support.

13. Changes to this policy

This policy may be updated from time to time. If there are significant changes, an updated effective date will be published.