Privacy Policy | My Site

Bambin respects and cares about your privacy. This Privacy Policy (“Policy”) describes the information we process about you on behalf of your nursery and how we use, process, disclose and protect that information. We also explain how we support your nursery in handling your data protection rights.

Bambin by Tech Dojo Consulting SARL, registered address: 4/6 Av. Albert II zone f, 98000 Monaco, Principality of Monaco (“Bambin”, “we”, “us”, “our”) provides the Bambin Services, meaning the Bambin early childhood communication platform and related products, applications and services.

For the purposes of this Policy, Bambin always acts as a data processor on behalf of nurseries and childcare providers that use Bambin (“Nurseries”). Each Nursery is the data controller and is legally responsible for determining why and how your personal data is processed. Bambin processes personal data only on the documented instructions of the Nursery, in accordance with a Data Processing Agreement (DPA), Law n°1.565 (Monaco), APDP regulations, and, where relevant, applicable EU GDPR principles.

This Policy describes how Bambin processes personal data on behalf of Nurseries when they use the Bambin Services. For full details of the legal basis and purposes of processing, please refer to your Nursery’s privacy notice or contact them directly.

This Privacy Policy applies when your data is processed through Bambin

This Policy applies when your Nursery uses the Bambin platform and, as part of that use, your data is processed through Bambin, for example when:

You use the Bambin app or web portal as a parent/guardian or authorised family member;
You use the Bambin platform as nursery staff;
Your Nursery uses Bambin to send you communications, photos, attendance records or other updates;
Your Nursery uses Bambin to manage educational communication or documentation involving your child.

Bambin may also process limited technical and support-related data when you interact with the platform (e.g. login credentials, logs, device data), strictly for the purpose of providing the Bambin Services to your Nursery.

Important:

Your Nursery (not Bambin) decides what data is entered into Bambin, for which purposes, and on which legal bases.
This Policy only covers processing activities that Bambin carries out as a processor on behalf of the Nursery.

If you want information about why your data is processed, on what legal basis, or how long your Nursery keeps your data overall, please refer to your Nursery’s own privacy policy.

Using the Bambin Services

If your organisation (Nursery) is a Bambin customer and you have a login (e.g. nursery staff), we refer to you as an “authorised staff user.”

If you are a parent, guardian, or family member of a child attending a childcare facility using Bambin, and you have a login, we refer to you as an “authorised end-user.”

In both cases, Bambin processes your personal data solely on behalf of and under the instructions of your Nursery, which is the data controller.

All child-related data and communication data entered by Nurseries or authorised end-users into the Bambin Services is processed exclusively for the Nursery, in line with the DPA and the Nursery’s documented instructions.

This Policy does not replace your Nursery’s own privacy notice. For details of your rights, legal bases for processing, and the full description of processing purposes, please refer to your Nursery’s privacy documentation or contact them directly.

Data We Collect and How We Collect It

The data processed through Bambin depends on how your Nursery chooses to use the Bambin Services. Most information is provided directly by your Nursery or by you (e.g. through the app). Some data is collected automatically to keep the platform secure and functioning correctly.

Bambin does not process any highly sensitive data beyond what is strictly necessary for educational communication, and then only as instructed by your Nursery.

Data Your Nursery or You Provide via Bambin

On behalf of your Nursery, Bambin processes data that may include:

When your Nursery or you (as an authorised user) use Bambin to:

Create or manage parent accounts
Create or manage child profiles
Exchange messages, photos or updates between parents and staff
Record attendance or daily notes
Participate in surveys/events/webinars related to Bambin (as organised by your Nursery)
Request technical support related to the platform

In such cases, Bambin may process, on behalf of your Nursery:

First name, last name, email address, phone number
Relationship to the child (e.g. parent, guardian, authorised family member)
Child’s profile data as entered by your Nursery (e.g. name, date of birth, group/class, attendance records)
Photos, messages and documentation shared via the Bambin app
Support conversation content (which may contain personal data if shared)
Technical identifiers related to your user account (user ID, nursery ID, role)

All of this information is entered and controlled by the Nursery; Bambin processes it only under the Nursery’s instructions.

Data Collected Automatically (Technical & Security Data)

To provide a secure and stable service to your Nursery, Bambin may automatically collect limited technical data, for example:

IP address, browser type and version, device type
Country / time zone
Pages or screens visited in the app and time spent
Links or features clicked, error logs, and performance metrics

This technical data is used exclusively to operate, secure and improve the Bambin platform on behalf of the Nursery and in accordance with the DPA. Where cookies or similar technologies are used (e.g. for the web interface), this is done in line with our Cookie Policy and the Nursery’s configuration.

Data Required to Use the Bambin Platform

When you use the Bambin Services as an authorised staff user or authorised end-user, Bambin processes, on behalf of your Nursery:

Login credentials (email + password) — solely to provide secure access
Session logs and security data — to protect accounts and detect suspicious activity
Platform usage statistics — anonymised or pseudonymised where possible, to support your Nursery and maintain service quality

Where you are an authorised staff user, Bambin may collect anonymised and/or pseudonymised usage analytics such as device information, platform activity logs and feature usage events, only to support the Nursery in operating and improving its use of the service.

Data from Third Parties

On behalf of your Nursery, Bambin may receive or process user-related information via:

Communication and collaboration tools used by your Nursery (e.g. for support or onboarding)
Integration tools chosen by the Nursery (if any)
Publicly available sources, where your Nursery has instructed us to verify or enrich contact details

All third-party processing is governed by contractual agreements and data protection safeguards. Bambin does not independently decide to enrich, sell or reuse your data for its own purposes under this Policy.

Why We Process Your Data (On Behalf of Your Nursery)

Because Bambin acts only as a data processor under this Policy, the purposes and legal bases for processing are determined by your Nursery. Typically, Nurseries use Bambin for:

Providing secure communication between staff and parents
Sharing information and updates about the child’s day
Managing attendance and group organisation
Documenting educational activities and communication
Enhancing parent engagement and operational efficiency

Bambin uses your data only to deliver these functions for the Nursery and only as permitted by the DPA and the Nursery’s documented instructions.

Examples of processing activities carried out by Bambin on behalf of the Nursery include:

Hosting and storing your Nursery’s data on secure infrastructure in Monaco
Displaying messages, photos and attendance records in the Bambin app
Enabling push notifications or email notifications configured by the Nursery
Maintaining logs and security controls to protect the Nursery’s data
Providing technical support and troubleshooting when requested by your Nursery or by you as an authorised user

If you would like to know the exact legal basis (e.g. consent, contract, legitimate interest) for each processing activity, please refer to your Nursery’s own privacy policy. As processor, Bambin relies on the Nursery to collect any required consents and to define the lawful basis.

AI-based Support Analytics (if used)

Bambin may use tools to review and analyse support conversations only to improve support quality and platform reliability. Where any personal data appears in support messages, it is processed strictly:

To generate non-identifiable insights and diagnostics
Under data minimisation and zero-retention (or short-retention) principles where applicable
In accordance with the DPA and instructions of the Nursery

Bambin does not use this data to profile children or parents, nor for independent marketing decisions under this Policy.

How We Share Your Data (As Processor)

Bambin may share or give access to your data solely in the following ways, and only on behalf of the Nursery:

Third-party service providers that host or support the Bambin platform (e.g. secure cloud hosting, monitoring, email delivery), all bound by data processing agreements and strict security requirements.
Legal authorities, if required by applicable law or following a lawful request, and in coordination with the Nursery where feasible.
Successors in a business transfer (e.g. merger or acquisition), in which case Bambin will ensure continuity of processor obligations and inform the Nursery so they can inform you where appropriate.

Bambin does not sell or rent personal data to any third party.

Any sharing or sub-processing is:

Limited to what is necessary to provide the Bambin Services to the Nursery
Governed by written contracts requiring equivalent or stronger protection of your data
Conducted in line with Law n°1.565, APDP guidance and the DPA with the Nursery

Data Transfers

All personal data for the Bambin platform is hosted exclusively in Monaco via Monaco Cloud, in line with APDP expectations for data localisation and sovereignty.

Where a sub-processor or service provider might involve infrastructure or support outside Monaco, this will only occur:

With prior notification or approval mechanisms agreed in the DPA with the Nursery; and
With appropriate contractual and technical safeguards in place.

At the time of this Policy, Bambin’s design goal is to ensure that production data processed for Nurseries remains within Monaco.

Data Retention

Bambin retains data only for as long as instructed by the Nursery and no longer than required to provide the Bambin Services.

In practice, this typically means:

Platform account data and content are kept for the duration of the Nursery’s contract with Bambin.
At the end of the contract, Bambin will, in accordance with the DPA and the Nursery’s instructions:
- Return data securely to the Nursery; and/or
- Delete data securely from Bambin systems within an agreed timeframe (e.g. 30 days), subject to any legal retention obligations.
Technical logs and security data may be retained for a limited period (for example, for security investigations and service integrity), after which they are anonymised or deleted, in line with the DPA.

If you wish to know how long your Nursery retains your data overall (within and outside Bambin), please check your Nursery’s privacy notice.

How We Protect Your Data

Bambin applies industry-standard and Monaco-appropriate safeguards to protect data processed on behalf of Nurseries, including:

Encryption in transit (e.g. HTTPS) and at rest where applicable
Secure authentication and password hashing
Role-based access control and audit logging
Network and application monitoring
Regular security reviews and incident response procedures

No system is completely immune to risk. If Bambin becomes aware of a personal data breach affecting data processed on behalf of a Nursery, we will:

Notify the Nursery without undue delay, in accordance with the DPA; and
Support the Nursery in fulfilling any legal obligations to inform authorities and affected individuals.

Use of Third-Party Providers

Bambin uses carefully selected third-party providers to help provide, secure and support the Bambin Services (for example, hosting infrastructure, error monitoring, secure contract signing, and communication tools).

These providers:

Act as sub-processors under the DPA with the Nursery
Are bound by strict contractual obligations of confidentiality, security and data protection
May only process personal data for the purpose of providing services to Bambin in support of the Nursery

An up-to-date list of sub-processors can be obtained by your Nursery, and you may request this from them or contact us via info@bambin.app, in which case we will coordinate with your Nursery.

Your Rights and Choices

Under Monaco Law n°1.565 and APDP regulations, you may have the following rights in relation to your personal data:

Right of access
Right to rectification
Right to deletion (erasure)
Right to restrict processing
Right to object to processing
Right to withdraw consent (where consent is used)

Because Bambin acts as a processor, you should generally exercise your rights directly with your Nursery, which is the data controller. Your Nursery will then instruct Bambin, where relevant, to assist in fulfilling your request (for example, by exporting or deleting data within the Bambin platform).

If you contact Bambin directly at info@bambin.app, we may:

Redirect you to your Nursery (as controller); and
Support the Nursery in handling your request, in line with our contractual obligations.

Data Protection Officer (if appointed)

If Bambin appoints a Data Protection Officer for processor activities, their details will be provided here and to the APDP, and your Nursery will be informed accordingly:

Délégué à la protection des données (DPD)
Name: _______________________________
Email: _______________________________

Contact and Complaints

If you have questions or concerns about how your data is processed within Bambin on behalf of your Nursery, you can:

First contact your Nursery, as the primary data controller; and/or
Contact Bambin at: info@bambin.app, in which case we will coordinate with your Nursery.

Children and Our Services

The Bambin platform is not directly accessible by children. Child accounts and profiles are created and managed only by Nurseries and/or parents/legal guardians.

Children do not log into Bambin in their own name. All access is mediated through authorised adult users.

Acceptance of this Policy
By accessing or using the Bambin platform (as an authorised end-user or authorised staff user), you acknowledge that your personal data may be processed through Bambin on behalf of your Nursery, in accordance with this Privacy Policy and the Data Processing Agreement in place between Bambin and your Nursery.
Your continued use of the platform constitutes acknowledgement of this Policy and the Nursery’s own privacy notice.
If you do not agree with this Policy, please contact your Nursery directly.

Changes to This Privacy Policy

We may update this Policy from time to time, for example to reflect:

Changes in the Bambin Services;
Updates in Monaco law or APDP guidance; or
New technical or organisational measures implemented by Bambin.

The latest version will always be available on this page, with the “Last update” date at the top.

For significant changes affecting how Bambin processes data on behalf of Nurseries, we will inform Nurseries (as controllers), so they can in turn inform their users where appropriate.