Privacy Policy

1. Introduction

Welcome to Bahasa Ibu's Privacy Policy. Your privacy is fundamental to our mission. This policy explains how we collect, use, protect, and share your information.

Our Commitment:

We believe data contributors deserve complete transparency about how their information is handled. We design privacy protection into every feature, not as an afterthought.

What This Covers:

• What information we collect
• How we use it
• How we protect it
• Your rights and choices
• How to contact us

Language: This policy is available in English and Bahasa Indonesia. The Bahasa Indonesia version prevails in case of conflict.

2. Information We Collect

2.1 Information You Provide

Account Registration:

• Full name
• Email address
• Phone number
• Region/city of residence

Payment Information, if payment features are enabled for you:

• E-wallet account details (GoPay phone number/ID)
• Bank account information (if applicable)
• Tax identification number (for earnings above threshold)

Additional Profile Information, if requested for a program or feature:

• Education level
• Household information (for program customization)
• Areas of expertise or interest

Contributed Content:

• Text submissions in Indonesian languages
• Voice recordings and audio messages you choose to submit
• Transcripts, interpretations, corrections, assistant responses, and related metadata generated from text or audio contributions
• Language and domain selections
• Notes or context you provide with submissions

2.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Time spent on platform
• Submission history and patterns
• Device type and operating system
• IP address and request metadata in security and operations logs
• Browser type and language settings

App Performance Data:

• Bandwidth and connectivity quality
• App crashes or errors
• Load times and technical issues

Location Data (Approximate Only):

• City/region level location (never precise GPS)
• Used for account profile, program operations, eligibility, localization, or support

2.3 Information We DO NOT Collect

We never collect:

• Precise GPS coordinates
• Content of your personal messages outside of what you explicitly submit
• Browsing history outside our platform
• Contact lists or phone contents
• Microphone audio unless you choose to record and submit a voice message
• Financial information beyond payment or payout account details when payment features apply

3. How We Use Your Information

3.1 Primary Uses

To Provide Our Service:

• Process your contributions
• Record, upload, store, transcribe, interpret, and respond to voice messages when you use voice input
• Calculate and distribute payments
• Provide technical support
• Send important service notifications

To Improve Quality:

• Train validation algorithms
• Improve platform usability
• Identify technical issues
• Develop new features

To Ensure Safety and Compliance:

• Prevent fraud and abuse
• Verify eligibility
• Comply with legal obligations
• Enforce our Terms of Service

To Communicate With You:

• Respond to your inquiries
• Send payment notifications
• Provide training and educational content
• Share community updates (you can opt out)

3.2 Research and Development

Aggregate Analysis:

We analyze contributor data in aggregate (never individually) to:

• Measure program impact
• Publish research on data empowerment models
• Report to funders and partners
• Improve our methodology

Academic Research:

Anonymized, aggregate data may be shared with research partners to study digital literacy, economic empowerment, and ethical AI development.

4. How We Handle Your Contributed Content

This is the most important section. Here's what happens to text, audio, transcripts, and related language data you submit:

4.1 Immediate Processing

Step 1: Private Storage and Automated Sanitization

Submitted text, chat, audio, transcripts, and related records may be stored privately first so the service can operate, validate, and process them. Before material is used in datasets or shared externally, automated systems scan for and remove or mask:

• Names of people
• Phone numbers
• Email addresses
• Physical addresses
• ID numbers (KTP, SIM, etc.)
• Bank account numbers
• Specific dates (beyond year)
• Company names (when identifying)
• Any other identifying information

Step 2: Manual Review

Human reviewers check for:

• Quality and authenticity
• Any PII that automated systems missed
• Compliance with content guidelines
• Appropriate language classification

Step 3: Dataset Preparation

Before data enters training or research datasets:

• Direct account identifiers are removed where they are not needed for the approved dataset purpose
• Content may be assigned a dataset identifier
• Only approved metadata, such as language, domain, region, quality, or review status, is retained
• Dataset exports are reviewed before partner sharing or open release

4.2 What This Means

Operational records may remain linked: Some private operational records can remain linked to your account for service, audit, payment, quality, safety, support, or legal purposes.

Dataset records are de-identified before approved use: We remove or mask direct identifiers before dataset use or external sharing, but we do not describe this process as irreversible unless a specific export has been reviewed and approved on that basis.

Withdrawal can have limits: You may request review, deletion, redaction, or suppression, but some accepted, paid, exported, safety, audit, or legally required records may be retained or handled through a review process.

4.3 Chat and Audio Data on chat.baibu.id

The Baibu chat product requires explicit consent before use. If you choose to enable chat, your chat conversations may be used for AI training, evaluation, safety, research, and product improvement under the privacy, sanitization, and de-identification principles described in this policy.

• Chat access is available only after you opt in to training and product-improvement use
• Chat data may include typed messages, voice recordings, audio artifacts, transcripts, interpretations, assistant responses, corrections, and related technical metadata
• When you use voice input, Baibu stores the submitted audio privately and uses automated systems and service providers to interpret it so the chat can respond
• Authorized staff may review chat conversations, audio artifacts, transcripts, and model outputs for operations, quality, safety, annotation, and support
• We attempt to remove personally identifiable information from chat material before training or external sharing
• Chat records and linked audio artifacts may be retained indefinitely under Baibu policy and applicable law
• You may separately request account deletion
• If you withdraw chat consent later, access to the chat product is removed

5. How We Share Information

5.1 We NEVER Sell Personal Information

We do not and will never sell, rent, or trade your personal information (name, email, phone, etc.) to third parties.

5.2 Sharing of Sanitized or De-Identified Data

With AI Research Partners:

• Sanitized or de-identified language datasets
• Used for training AI models
• Subject to data usage agreements
• Agreements prohibit attempts to re-identify contributors

With Academic Researchers:

• Aggregate statistics about program participation
• Sanitized or de-identified datasets for linguistic research
• Published research papers (no personal information)

Open Source Datasets:

• A portion of contributed data will be released as open-source datasets
• Content must be reviewed and de-identified before release
• Released under appropriate open data licenses

5.3 Sharing of Personal Information

We only share personal information when:

Service Providers:

• Payment processors (to send your earnings)
• Cloud hosting providers (with strict security requirements)
• Customer support tools
• All providers are contractually bound to protect your data

Legal Requirements:

• When required by Indonesian law
• To comply with valid legal processes (court orders, subpoenas)
• To protect rights, safety, or property
• To investigate fraud or security issues

With Your Consent:

• When you explicitly authorize sharing
• For features you choose to use (e.g., social sharing)
• For chat-specific training, audio processing, and product-improvement use after explicit in-product consent

Business Transfers:

• If Bahasa Ibu is acquired or merged, your data may transfer to the successor entity
• You'll be notified and can choose to close your account

6. Data Security

6.1 Technical Safeguards

Encryption:

• Production traffic is protected with HTTPS/TLS
• Production databases and private object-storage buckets use cloud-provider encryption at rest
• Submitted chat audio is stored in private storage and is not exposed through public media URLs
• Payment or payout information, where used, is handled through approved operational workflows

Access Controls:

• Personal data accessible only to authorized staff on need-to-know basis
• Administrative access is limited to approved staff accounts
• Access reviews and MFA requirements are maintained through internal security processes

Infrastructure:

• Data stored on secure cloud servers with redundancy
• Regular security updates and patches
• Backup, monitoring, and incident-detection controls are reviewed as part of operational security

Separation of Data:

• Personal account information stored separately from contributed content
• Dataset exports are prepared separately from account-linked operational records
• Payment or payout information receives additional access controls where payment features apply

6.2 Organizational Safeguards

• Staff access is limited to authorized operational roles
• Security training, incident-response procedures, and external reviews are maintained or added as the program scales

6.3 Your Role in Security

Please:

• Keep your password confidential
• Use a strong, unique password
• Log out on shared devices
• Report suspicious activity immediately
• Enable two-factor authentication if available

7. Data Retention

7.1 Account Information

While Your Account Is Active:

• We retain all account information
• Contribution history and earnings records maintained

After Account Closure:

• Account identifiers are handled through Baibu's staff-reviewed account-removal process, subject to applicable law and safety, payment, audit, and operational requirements
• Payment or payout records, where applicable, are retained as required by law and accounting obligations
• Sanitized or de-identified contributed content may remain in datasets under the limits described in this policy

7.2 Contributed Content

Pre-Anonymization:

• Raw submissions, including chat text and audio where enabled, are retained while needed for service operation, validation, quality review, safety, support, research, and model improvement
• Baibu's default retention policy is indefinite retention for user submissions and chats, subject to Baibu policy and applicable law

Dataset Use:

• Sanitized or de-identified records may be retained as part of research datasets
• Used for AI training and development
• May be shared with partners or released open-source only after approved review

Chat and Audio Contributions:

• Chat messages, voice recordings, audio artifacts, transcripts, assistant responses, and related metadata may be retained indefinitely by default
• Stored audio is treated as private data and is not made publicly playable in the product
• Deletion requests are reviewed through the support process and handled according to Baibu policy and applicable law

7.3 Technical Data

• Security, usage, and error logs are retained only as needed for operations, safety, debugging, and legal obligations
• Log retention and scrubbing controls are maintained through operational policy and vendor settings

8. Your Rights and Choices

8.1 Access and Correction

You Have the Right To:

• Access your personal account information
• Download your contribution history
• Correct inaccurate information
• Update your preferences

How to Exercise:

Email support@baibu.id or use in-app account settings.

8.2 Account Deletion

You Can:

• Close your account at any time
• Submit an authenticated account-deletion request through account settings or the external web page

What Happens:

• Account access is disabled immediately for a signed-in request
• Staff targets completion of account removal within 30 days after submission
• Payment or payout records are retained as required by law where applicable
• Sanitized or de-identified contributions may remain in datasets under this policy

8.3 Marketing Communications

You Can:

• Opt out of promotional emails (unsubscribe link in every email)
• Opt out of SMS marketing
• Customize notification preferences in app settings

You Cannot Opt Out Of:

• Transactional emails (payment notifications, account security alerts)
• Critical service announcements

8.4 Data Portability

You can request:

• A copy of your account information (JSON or CSV format)
• Your contribution history
• Your earnings records

Requests are handled after verification within the timeframe required by applicable law and our operational process.

8.5 Object to Processing

In some cases, you may object to how we use your information. Contact us to discuss specific concerns.

9. Children's Privacy

Bahasa Ibu is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a child has provided information to us, please contact us immediately so we can delete it.

10. International Data Transfers

Your data is primarily stored in Indonesia. If transferred internationally for processing (e.g., cloud services), we ensure:

• Adequate protection under Indonesian law
• Appropriate safeguards (standard contractual clauses)
• Compliance with local regulations

11. Cookies and Tracking

11.1 What We Use

Essential Cookies:

• Required for platform functionality
• Session management and authentication
• Cannot be disabled

Analytics Cookies:

• Understand how platform is used
• Identify technical issues
• Improve user experience
• You can opt out in settings

We Do NOT Use:

• Third-party advertising cookies
• Cross-site tracking
• Social media tracking pixels (beyond explicit share buttons)

11.2 Your Choices

Most browsers allow you to control cookies through settings. Note that disabling essential cookies will prevent platform use.

12. Third-Party Links

Our platform may contain links to external websites (e.g., partner organizations, educational resources). We're not responsible for their privacy practices. Please review their policies before sharing information.

13. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes via:

• Email to your registered address
• In-app notification
• Prominent notice on our website

Changes take effect after notice as stated in the updated policy, unless legal requirements dictate otherwise.

Your Options:

• Continue using the platform (constitutes acceptance)
• Close your account if you disagree with changes
• Contact us with concerns before changes take effect

14. Your Legal Rights (Indonesian Data Protection)

Under Indonesian data protection regulations, you have rights including:

• Right to information about data processing
• Right to access your personal data
• Right to correct inaccurate data
• Right to request account deletion and the end of processing, subject to applicable limitations
• Right to restrict processing
• Right to object to certain processing
• Right to lodge complaints with supervisory authorities

Exercising Rights:

Contact us using the information below. We will verify the request and respond within the timeframe required by applicable law and our operational process.

15. Contact Us

Privacy Questions or Concerns:

Email: support@baibu.id

To Exercise Your Rights:

Email: support@baibu.id

Subject Line: "Data Rights Request - [Your Name]"

Include: Your registered email and specific request

For Security Issues:

Email: support@baibu.id

Report: Suspected data breaches or security vulnerabilities

General Support:

Email: support@baibu.id

In-App: Support chat feature

16. Consent and Acknowledgment

By using Bahasa Ibu, you acknowledge:

• You've read and understood this Privacy Policy
• You consent to the collection and use of information as described
• You understand how contributed content is stored, sanitized, de-identified, and reviewed
• You agree to the sharing of sanitized or de-identified data with partners where permitted by this policy
• You understand that withdrawal, deletion, redaction, or suppression requests may be limited after content is accepted, paid, exported, or otherwise retained for safety, audit, operational, or legal reasons

For those requiring formal consent documentation: We can provide signed consent forms. Contact support@baibu.id.

Effective Date: June 3, 2026