Your data protection rights under the General Data Protection Regulation
Last updated: February 2, 2025
Buba AI is committed to protecting the privacy and personal data of all our users, especially those in the European Union (EU) and European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) and respect your rights under this regulation.
This page explains your specific rights under GDPR and how we fulfill our obligations to protect your personal data.
Data Controller: Buba AI
Contact Email: privacy@bubaai.com
Data Protection Officer: dpo@bubaai.com
For any questions about how we process your personal data or to exercise your GDPR rights, please contact us using the information above.
As a user in the EU/EEA, you have the following rights regarding your personal data:
You have the right to access your personal data and receive information about how we process it.
What you can do:
How to exercise: Log into your account and go to Settings → Privacy → Download My Data, or contact us at privacy@bubaai.com
You have the right to correct inaccurate or incomplete personal data.
What you can do:
How to exercise: Go to Settings → Profile to update your information, or contact us for assistance
You have the right to request deletion of your personal data in certain circumstances.
What you can do:
How to exercise: Go to Settings → Privacy → Delete Account, or contact us at privacy@bubaai.com
Note: We may retain certain data if required by law (e.g., transaction records for tax purposes) or to establish, exercise, or defend legal claims.
You have the right to request that we limit how we use your personal data in certain situations.
When this applies:
How to exercise: Contact us at privacy@bubaai.com with your request and reason
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
What you can do:
How to exercise: Go to Settings → Privacy → Export My Data, or contact us at privacy@bubaai.com
You have the right to object to certain types of processing of your personal data.
What you can object to:
How to exercise: Go to Settings → Privacy → Communication Preferences, or contact us at privacy@bubaai.com
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Our practice:
How to exercise: Contact us at privacy@bubaai.com if you have concerns about automated processing
Where we process your data based on consent, you have the right to withdraw that consent at any time.
What you can do:
How to exercise: Go to Settings → Privacy, or contact us at privacy@bubaai.com
Under GDPR, we must have a legal basis to process your personal data. We process your data based on:
We process your data to provide our coaching service, which is necessary for performing our contract with you.
Examples: Account creation, providing coaching sessions, processing payments
We process certain data based on your explicit consent, which you can withdraw at any time.
Examples: Marketing communications, voice recordings, optional features
We process data for our legitimate business interests, provided these don't override your rights and interests.
Examples: Fraud prevention, service improvement, security monitoring
We process data when required by law or to comply with legal obligations.
Examples: Tax records, responding to legal requests, regulatory compliance
Your personal data may be transferred to and processed in countries outside the EU/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place:
We work only with service providers who commit to GDPR-compliant data protection standards.
We retain your personal data only for as long as necessary for the purposes outlined in our Privacy Policy:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Conversation history | Until deletion by user or account closure |
| Transaction records | 7 years (legal requirement) |
| Usage logs | 90 days |
| Marketing consent | Until consent withdrawn |
We implement appropriate technical and organizational measures to protect your personal data:
In the unlikely event of a data breach that poses a risk to your rights and freedoms:
To exercise any of your GDPR rights:
Contact us via:
Please include your full name, email address, and specific request details.
To protect your privacy, we may ask you to verify your identity before processing your request. This may involve confirming account details or answering security questions.
We will respond to your request:
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority.
You can contact your local data protection authority in your EU member state. Find your local authority at:
European Data Protection Board - Member Authorities
We encourage you to contact us first so we can address your concerns directly, but you have the right to lodge a complaint at any time.
Our service is not directed at children under 16 years of age (or the applicable age of digital consent in your country). We do not knowingly collect personal data from children.
If you believe we have collected data from a child, please contact us immediately at privacy@bubaai.com so we can delete it.
We may update this GDPR policy to reflect changes in our practices or legal requirements. When we make significant changes:
For any questions about GDPR compliance or to exercise your rights:
Data Protection Officer: dpo@bubaai.com
Privacy Team: privacy@bubaai.com
General Support: support@bubaai.com
We aim to respond to all GDPR-related inquiries within 48 hours.
For more information about how we handle your data: