Privacy Policy

Effective date: November 2, 2026

This Privacy Policy explains how BayBee (synbay.si) (“BayBee”, “we”, “us”) handles information when you use the BayBee personal AI voice assistant app on iOS, Android and the web. Contact: dev@synbay.si.

1. Information we access

Connecting third-party accounts is optional. If you choose to connect an account, BayBee accesses only the data needed for the features you use:

• Google account (with your consent via Google OAuth):
  • Gmail – read messages, compose drafts and send email on your behalf;
  • Google Calendar – read and manage your calendar events;
  • Google Drive – find, read and work with your files.
• Microsoft account (with your consent via Microsoft sign-in):
  • Outlook mail – read messages and send email on your behalf;
  • Outlook Calendar – read and manage your calendar events;
  • OneDrive – find, read and work with your files.
• Basic profile information – your email address, name and account identifier, used to identify your account and connection.

We also process the requests you make to the assistant (for example voice or text instructions) in order to respond to them.

2. How we use information

We use the information above only to provide the features you request in the app – for example summarizing your inbox, drafting a reply, checking your schedule, or finding a file. Emails are sent only after you tap to confirm. Orders and bookings are likewise made only with your explicit confirmation.

We do not:

• sell your data;
• use your data for advertising, or share it with advertisers or data brokers;
• use your data to train generalized AI or machine-learning models;
• allow humans to read your data, except with your explicit consent (e.g. for support you request), where necessary for security purposes, or to comply with applicable law.

3. Google API Services – Limited Use disclosure

BayBee's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Storage and security

• OAuth access and refresh tokens are encrypted at rest on our servers.
• Our services are hosted on Railway (EU region) and Supabase (EU, Frankfurt).
• Data is transmitted over encrypted connections (HTTPS/TLS).

5. Sharing

We share data only with:

• Infrastructure processors that host and run our service (Railway, Supabase); and
• AI providers to the extent needed to fulfil the specific request you make (for example, to summarize an email you asked about).

These providers process data on our behalf solely to deliver the service. We do not share your data with anyone else, except where required by law.

6. Your choices and control

• You can disconnect any connected Google or Microsoft account at any time in the app. You can also revoke access from your Google Account (myaccount.google.com/permissions) or Microsoft account settings.
• You can request deletion of your data by emailing dev@synbay.si.

7. Retention

We keep data only as long as needed to provide the service. When you disconnect an account, its stored tokens and associated data are deleted. When you delete your BayBee account (or ask us to), your data is deleted.

8. Children

BayBee is not directed at children under 16, and we do not knowingly collect their data.

9. Your rights

Depending on where you live (for example under the EU GDPR), you may have the right to access, correct, delete, or export your data, and to object to or restrict processing. To exercise these rights, contact dev@synbay.si. You may also lodge a complaint with your local data-protection authority.

10. Changes

We may update this policy. Changes will be posted on this page with a new effective date.

11. Contact

BayBee (synbay.si) – dev@synbay.si