Privacy Policy

Last updated: 2026-10-05

1. Data Controller

Baubiber
Switzerland
Email: hello@baubiber.com

2. Overview

We take the protection of your personal data very seriously. This privacy policy informs you about the personal data we collect, process, and use in connection with the Baubiber platform. Processing is carried out in accordance with the European General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP/nFADP).

3. Data Collected

We collect and process the following categories of personal data:

  • Account data: Name, email address or phone number, verification status, and sign-in identifiers. Sign-in uses email links or one-time codes, phone codes, Apple or Google; Baubiber does not offer password sign-in.
  • Project data: Descriptions of your renovation projects, material preferences, timelines
  • Photos and images: Photos you upload of your property for AI-powered analysis
  • Property details: Property type, size, location, and building information
  • Room measurements: LiDAR-based room measurements via your mobile camera (room type, size, fixtures)
  • Communication data: Messages between you and craftsmen through the platform
  • Voice data: User-initiated site-visit recordings, diary voice notes, voice-consultation audio, and resulting transcripts
  • Optional shift-reminder data: If you enable location-assisted reminders, your phone processes the assigned site's coordinates, scheduled shift times, and an enter/exit transition locally as described in Section 4b
  • Usage data: Device information, IP address, access times, app usage behavior
  • Invitations: Selected colleagues' names and phone numbers, invitation status and team role
  • Business and identity verification: Business registration details, identity details and verification results from Didit
  • Financial and work records: Quotes, invoices, payment status, bank details you provide, work times, costs and project attachments
  • Fleet and day plans: Crew assignments, work status, and vehicle or equipment positions from providers connected by your company. A person's map position is derived from their site check-in or assigned vehicle, not continuous tracking of their phone

4. Purpose of Data Processing

Your data is used for the following purposes:

  • Providing and managing your user account
  • AI-powered matching between homeowners and craftsmen
  • Creating and managing project sketches and quotes
  • Communication between platform users
  • Improving our services and algorithms
  • Fulfilling legal obligations

4a. AI-Powered Analysis (Third-Party AI Service)

Baubiber uses Google Gemini AI (provided by Google LLC) to deliver core features of the platform. When you use these features, the following data is sent to Google Gemini for processing:

  • Photos you upload: Images of your property are sent to Google Gemini to detect issues (e.g. damage, wear) and analyze room conditions
  • Project descriptions: Text descriptions of your renovation needs are sent to generate tailored solution options and contractor reports
  • Property details: Property type, size, and location are sent to provide context-aware renovation recommendations and design visualizations
  • Voice recordings and site context: User-initiated site-visit recordings and diary voice notes, together with relevant dates, participant names, and attached site photos, are sent for transcription and structured extraction

This data is processed by Google Gemini AI for the following purposes:

  • Detecting issues and damage in your property photos
  • Generating renovation solution options and scope recommendations
  • Creating before/after design visualizations
  • Producing technical contractor reports with work items and material lists
  • Generating interior design moodboard images
  • Transcribing voice recordings and turning them into structured site notes, work items, and follow-up actions

Your explicit, provider-specific consent for AI data processing is obtained immediately before you first use the relevant feature. You may withdraw this consent at any time through the app settings. Google's data processing is governed byGoogle's Privacy Policyand their Data Processing Addendum.

4b. Optional Location-Assisted Shift Reminders

Organization members carrying out assigned site work, including owners or managers working in the field, may voluntarily enable location-assisted time reminders in the mobile app. The feature is off by default and requires background location and notification permissions. It uses one operating-system geofence for the site assigned to the current scheduled work block.

  • Limited period: The geofence is used from 30 minutes before the scheduled start until 60 minutes after the scheduled end. If a timer remains active, departure assistance may continue for up to four additional hours to support overtime. Events outside the permitted window are rejected.
  • On-device detection: The operating system reports an enter or exit transition to the app. Baubiber does not receive the worker's raw device coordinates, continuous location, movement trail, or a dismissed transition.
  • Short local retention: A pending transition is stored on that device for no more than two hours and is cleared when dismissed, disabled, signed out, or no longer applicable.
  • Worker confirmation: A transition only suggests an action. No server-side time record changes until the worker reviews and confirms the displayed time. The confirmed timer action and timestamp are then processed like a manual time action.
  • Voice remains optional: Confirming departure opens the work report, but does not start the microphone. A voice recording requires a separate worker action and the applicable permissions and AI consent.
  • Withdrawal and alternative: The worker can disable the feature at any time in the app settings. Manual time controls remain available.

When this feature is used in an employment relationship, the employer may be a separate data controller and is responsible for its own lawful basis, employee information, retention and access rules, and any required consultation with employee representatives. An in-app opt-in is not, by itself, proof that employee consent is freely given or that all employment-law requirements have been met.

4c. Phone Sign-In and Inviting Colleagues

You can sign in with your mobile number instead of an email address. We then send a one-time code by SMS or WhatsApp, as you choose. We store your mobile number with your account and whether it has been confirmed.

Business owners and project managers can invite colleagues by phone number. In the mobile app they may pick those colleagues from their phone's address book:

  • On-device access: The app asks for access to your contacts only when you open the invite screen. Your address book is read on your phone; Baubiber does not upload or store it.
  • Only what you choose: Baubiber receives only the names and mobile numbers you select, to create the invitations.
  • Sending invitations: When you choose Send SMS, Baubiber sends the invitation through Twilio. It contains a single-use sign-in link that expires within one hour and lets the recipient verify the invited number and join the team. Alternatively, you can share an ordinary invitation through your own WhatsApp app or copy its text; those links require sign-in and verification.
  • Retention: An invitation expires after seven days unless it is sent again, and is deleted 30 days after it expired. The inviting organization can withdraw it at any time, which deletes it immediately. When the invited person joins, the invitation is linked to their account.

Processing the invited person's name and number is based on the legitimate interest of the inviting organization in adding its colleagues to the team (Art. 6 para. 1 lit. f GDPR).

4d. Face Data for Identity and Business Verification

When you start identity verification (KYC), or an identity check for a business representative during business verification (KYB), you enter a verification flow hosted by Didit. This flow processes the portrait on your identity document, selfies or face images, liveness captures (including video where the verification step requires it), and derived facial geometry, face-match scores, liveness results and fraud signals.

We use this data to confirm identity, match the person to the identity document, check that a real person is present, prevent impersonation and duplicate-account abuse, and review business representatives and verification decisions. We do not use verification face data for advertising, marketing or renovation AI features, and we do not sell it. Didit's model-training option is disabled for Baubiber: our historical and new verification data is excluded from future model training and related evaluation. This does not reverse model updates made before the opt-out.

Sharing and storage

Face data is shared with Didit as our verification provider and processed by its authorized infrastructure and service providers. Didit's standard verification storage and processing are in the European Union, with encryption in transit and at rest. Its privacy notice describes service providers, legally required disclosures and safeguards for international transfers. Baubiber receives and stores identity details, verification outcomes, face-match scores, warnings and the returned verification response, which may include references to verification media. These records are stored in our access-controlled Neon PostgreSQL database in AWS's Frankfurt region, and processed by our API hosted on Fly.io in Frankfurt. Verification images and biometric templates are not published to other platform users.

Retention and deletion

Baubiber has configured a 10-year retention period for verification sessions in Didit. Didit automatically deletes session data at the end of that period; earlier deletion may follow a valid erasure request or a shorter applicable legal requirement. Our setting deletes the face biometric template with the session; we do not enable separate template retention after session deletion. This period supports verification review, fraud investigation, dispute handling and audit records; it is not a statement that every user is legally required to have their face data retained for ten years.

Baubiber's own verification records remain while the relevant account or organization exists. Deleting your account deletes its personal KYC record from our application database. A business verification record belongs to the organization and may remain if that organization continues. Account deletion does not automatically delete Didit's records. To request earlier erasure of verification data, contact hello@baubiber.com or use our support form. Our team checks the request and arranges deletion of the relevant local records and Didit sessions, including attributable biometric templates, unless a lawful retention obligation applies. These specific rules govern verification data alongside the general rules in Section 7.

Further information: Didit Verification Privacy Notice.

Support requests

When you contact support, we store your name, email address, message, language and ticket reference in our internal support system. Our team uses this information to investigate your request and reply by email. Submitting a request does not create an account or verify ownership of an existing account. Please do not include passwords, sign-in codes, identity documents or selfies. Support records follow the storage and deletion rules in Section 7; you can request access or deletion at hello@baubiber.com.

5. Legal Basis

The processing of your data is based on the following legal grounds:

  • Contract performance (Art. 6 para. 1 lit. b GDPR): To provide our services
  • Consent (Art. 6 para. 1 lit. a GDPR): For AI-powered data processing by Google Gemini, LiDAR measurement, and marketing communications
  • Legitimate interest (Art. 6 para. 1 lit. f GDPR): To improve our platform and security

The appropriate legal basis for employee time and location-related processing depends on the employment relationship and applicable national law. Employers must determine and document that basis before deploying location-assisted reminders to employees.

6. Third-Party Service Providers

To provide our services, we work with the following third-party providers:

  • Google Gemini AI (Google LLC): AI-powered photo analysis, renovation recommendations, design visualizations, voice transcription, and structured site-report generation. Receives recordings, photos, project descriptions, and relevant site context as described in Section 4a
  • LiveKit: Secure real-time transport for optional Bobo voice consultations
  • Deepgram: Speech-to-text processing for optional Bobo voice consultations
  • OpenAI: Language processing of conversation text and relevant project context for optional Bobo voice consultations
  • Fish Audio: Turns Bobo's response text into speech for optional voice consultations
  • TypeSafe: Evaluates structured observations from project analysis to assess issues and recommendations
  • World Labs: Processes selected property imagery to generate optional 3D visualizations
  • Didit: Identity and business verification, including submitted identity documents, verification images and business details. Baubiber stores the verification outcome and returned details, which may include names, date of birth, nationality and document number
  • Neon: PostgreSQL database hosting in Frankfurt, including the verification records described in Section 4d
  • Fly.io: Hosting for the API and voice services
  • Webfleet and Hilti ON!Track: Connected company fleet and equipment services supply vehicle or tool positions and status for day planning and the live map
  • Vercel: Website hosting and delivery
  • Tigris: Secure file storage for uploaded photos, documents, and user-initiated recordings
  • Resend: Transactional email delivery
  • Twilio: Delivery of phone sign-in codes and SMS invitations, including the recipient number and message content. WhatsApp sign-in is offered only when enabled; WhatsApp delivery also involves WhatsApp
  • Sentry: Error monitoring and crash reporting

Authentication runs in our infrastructure using the Better Auth software library. Apple and Google process sign-in when you choose their respective sign-in methods.

All third-party providers are contractually obligated to comply with data protection regulations.

7. Data Storage and Deletion

For verification face data, Didit sessions and organization verification records, the specific retention and deletion rules in Section 4d apply.

Your personal data is stored only as long as necessary for the stated purposes or as required by legal retention obligations. After deleting your account, your data will be anonymized or deleted within 30 days, unless legal retention requirements apply.

Unconfirmed shift-reminder transitions are device-local and expire after no more than two hours. Confirmed time records follow the retention rules applicable to project, accounting, and employment records.

8. Your Rights

You have the following rights regarding your personal data:

  • Right of access: You may request information about the data we store
  • Right to rectification: You may request correction of inaccurate data
  • Right to erasure: You may request deletion of your data
  • Right to data portability: You may receive your data in a common format
  • Right to object: You may object to the processing of your data

To exercise your rights, please contact us at:hello@baubiber.com

9. Cookies and Tracking

Our website uses technically necessary cookies to ensure the functionality of the platform. Analytical cookies are only used with your explicit consent.

10. Contact

For questions about data protection, you can reach us at:
Email: hello@baubiber.com