Privacy Policy

We may update this policy as the Service changes. We'll change the date at the top when we do, and if a change is significant we'll let you know by email or in the app before it takes effect.

• We don't sell your information, and we don't show ads.
• We don't use analytics or advertising trackers.
• We don't use your information to train AI models, and neither does our AI provider.
• The data inside apps you build is stored on your device, not on our servers.
• You can delete a chat, an app, or your whole account at any time.

Bambii's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Gmail data only to provide the features you use in Bambii.
• We don't use it for advertising, and we don't sell it.
• We don't use it to develop, improve or train AI or machine-learning models.
• People at Bambii don't read it unless you ask us to, it's needed for security or to comply with the law, or it has been aggregated and anonymized.

• The app itself. Each version's code and build are stored on our servers so you can open the app on your devices and keep changing it.
• The app's data. What you save in an app is stored on your device: on your Mac, or in your browser if you open the app there. It isn't stored on our servers.
• Chatting with an app's bot. So the bot can answer questions about your app, each message you send it includes a snapshot of that app's data.
• What apps can reach. Apps can't access the internet directly. Their AI requests and connected-service requests go through our servers, under the rules above.
• Building. Builder writes and tests code in an isolated sandbox that can reach only the public npm package registry.

• To provide the Service: run your chats, carry out what you ask, and build and run your apps.
• To keep chats going: when a chat continues in a new session, earlier messages are given back to the bot.
• To enforce usage limits and prevent abuse, fraud and security incidents.
• To find and fix problems, and to improve the Service.
• To contact you about the Service, including changes to this policy.
• To comply with the law and enforce our terms.

We don't sell your information. We share it only as follows:

• Service providers that run parts of the Service for us, under contracts that limit how they use it:
  • Vercel: hosting, file storage, build sandboxes, chat sessions, and connected-account tokens.
  • Turso: our database.
  • Clerk: accounts and sign-in, with Cloudflare for bot protection.
  • Anthropic: the AI models that power the bots and your apps. Your messages, attachments and the information bots read are sent to Anthropic to generate replies, under terms that don't allow them to train their models on it.
  • Exa, through Vercel's AI Gateway: web searches the bots make for you.
• Services you connect, when you ask a bot or an app to act there, such as sending an email or posting to Slack.
• Legal reasons, when we believe in good faith it's required by law, or needed to protect the rights, safety or property of our users, the public or Bambii.
• Business transfers, if Bambii is involved in a merger, acquisition or sale of assets. We would tell you before your information became subject to a different policy.
• With your consent, in any other case.

• Chats are kept until you delete them. Builder chats end after 30 days; we keep the text of a chat whose session has ended so you can still read it and continue it, until you delete the chat.
• Apps, including every version's code and build, are kept until you delete them.
• Usage records (how many messages, builds and AI requests you used each day, and what they cost) are kept until you delete your account, to enforce usage limits. Short-term counters that stop runaway requests are cleared out regularly.
• Records of sent emails and posts, used to prevent sending the same thing twice, are deleted after about 7 days.
• Logs are kept for our hosting provider's retention period.
• Deleting your account erases your chats, apps, settings and usage records from our systems, and disconnects your connected accounts. App data on a Mac stays on that Mac until you remove the app or Bambii there.

• Delete any chat or app, or your whole account, in the app (Settings → Account).
• Download a copy of your chats, apps, settings and usage in Settings → Account.
• Disconnect Slack, Google or Notion at any time in Settings → Connections, or from that service.
• Update your name, email and sign-in methods in your account settings.

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your information, and to object to or restrict how we use it. To make a request, email privacy@bambii.ai. We'll respond within 30 days, and we may need to verify your identity first. You can also complain to your local data protection authority.

We protect your information with measures such as encryption in transit, access controls, isolated sandboxes for building apps, and confirmations before bots send or post anything. No system is perfectly secure, though, and we can't guarantee the security of your information.

AI bots can make mistakes, misunderstand a request, or be misled by content they read, such as a crafted email or message. Review what a bot drafts or proposes to send before you approve it.

We and our service providers process information in the United States and India, and possibly other countries where their facilities are. These countries may have different data protection laws from yours; where required, we rely on appropriate safeguards for these transfers.

You must be at least 18 to use the Service. It isn't intended for children, and we don't knowingly collect their information. If you believe a child has given us information, email us and we'll delete it.

The Service links to and works with services we don't control, such as Slack, Google and Notion. Their own privacy policies apply to how they handle your information.

Questions or requests about this policy or your information: privacy@bambii.ai.