Privacy Policy

Last updated: 2026-07-26

1. Data Controller

Baubiber
Switzerland
Email: hello@baubiber.com

2. Overview

We take the protection of your personal data very seriously. This privacy policy informs you about the personal data we collect, process, and use in connection with the Baubiber platform. Processing is carried out in accordance with the European General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP/nFADP).

3. Data Collected

We collect and process the following categories of personal data:

  • Account data: Name, email address, phone number, password (encrypted)
  • Project data: Descriptions of your renovation projects, material preferences, timelines
  • Photos and images: Photos you upload of your property for AI-powered analysis
  • Property details: Property type, size, location, and building information
  • Room measurements: LiDAR-based room measurements via your mobile camera (room type, size, fixtures)
  • Communication data: Messages between you and craftsmen through the platform
  • Voice data: User-initiated site-visit recordings, diary voice notes, voice-consultation audio, and resulting transcripts
  • Optional shift-reminder data: If you enable location-assisted reminders, your phone processes the assigned site's coordinates, scheduled shift times, and an enter/exit transition locally as described in Section 4b
  • Usage data: Device information, IP address, access times, app usage behavior

4. Purpose of Data Processing

Your data is used for the following purposes:

  • Providing and managing your user account
  • AI-powered matching between homeowners and craftsmen
  • Creating and managing project sketches and quotes
  • Communication between platform users
  • Improving our services and algorithms
  • Fulfilling legal obligations

4a. AI-Powered Analysis (Third-Party AI Service)

Baubiber uses Google Gemini AI (provided by Google LLC) to deliver core features of the platform. When you use these features, the following data is sent to Google Gemini for processing:

  • Photos you upload: Images of your property are sent to Google Gemini to detect issues (e.g. damage, wear) and analyze room conditions
  • Project descriptions: Text descriptions of your renovation needs are sent to generate tailored solution options and contractor reports
  • Property details: Property type, size, and location are sent to provide context-aware renovation recommendations and design visualizations
  • Voice recordings and site context: User-initiated site-visit recordings and diary voice notes, together with relevant dates, participant names, and attached site photos, are sent for transcription and structured extraction

This data is processed by Google Gemini AI for the following purposes:

  • Detecting issues and damage in your property photos
  • Generating renovation solution options and scope recommendations
  • Creating before/after design visualizations
  • Producing technical contractor reports with work items and material lists
  • Generating interior design moodboard images
  • Transcribing voice recordings and turning them into structured site notes, work items, and follow-up actions

Your explicit, provider-specific consent for AI data processing is obtained immediately before you first use the relevant feature. You may withdraw this consent at any time through the app settings. Google's data processing is governed byGoogle's Privacy Policyand their Data Processing Addendum.

4b. Optional Location-Assisted Shift Reminders

Organization members carrying out assigned site work, including owners or managers working in the field, may voluntarily enable location-assisted time reminders in the mobile app. The feature is off by default and requires background location and notification permissions. It uses one operating-system geofence for the site assigned to the current scheduled work block.

  • Limited period: The geofence is used from 30 minutes before the scheduled start until 60 minutes after the scheduled end. If a timer remains active, departure assistance may continue for up to four additional hours to support overtime. Events outside the permitted window are rejected.
  • On-device detection: The operating system reports an enter or exit transition to the app. Baubiber does not receive the worker's raw device coordinates, continuous location, movement trail, or a dismissed transition.
  • Short local retention: A pending transition is stored on that device for no more than two hours and is cleared when dismissed, disabled, signed out, or no longer applicable.
  • Worker confirmation: A transition only suggests an action. No server-side time record changes until the worker reviews and confirms the displayed time. The confirmed timer action and timestamp are then processed like a manual time action.
  • Voice remains optional: Confirming departure opens the work report, but does not start the microphone. A voice recording requires a separate worker action and the applicable permissions and AI consent.
  • Withdrawal and alternative: The worker can disable the feature at any time in the app settings. Manual time controls remain available.

When this feature is used in an employment relationship, the employer may be a separate data controller and is responsible for its own lawful basis, employee information, retention and access rules, and any required consultation with employee representatives. An in-app opt-in is not, by itself, proof that employee consent is freely given or that all employment-law requirements have been met.

5. Legal Basis

The processing of your data is based on the following legal grounds:

  • Contract performance (Art. 6 para. 1 lit. b GDPR): To provide our services
  • Consent (Art. 6 para. 1 lit. a GDPR): For AI-powered data processing by Google Gemini, LiDAR measurement, and marketing communications
  • Legitimate interest (Art. 6 para. 1 lit. f GDPR): To improve our platform and security

The appropriate legal basis for employee time and location-related processing depends on the employment relationship and applicable national law. Employers must determine and document that basis before deploying location-assisted reminders to employees.

6. Third-Party Service Providers

To provide our services, we work with the following third-party providers:

  • Google Gemini AI (Google LLC): AI-powered photo analysis, renovation recommendations, design visualizations, voice transcription, and structured site-report generation. Receives recordings, photos, project descriptions, and relevant site context as described in Section 4a
  • LiveKit: Secure real-time transport for optional Bobo voice consultations
  • Deepgram: Speech-to-text processing for optional Bobo voice consultations
  • OpenAI: Language processing and speech synthesis for optional Bobo voice consultations
  • Better Auth: Authentication and user management
  • Vercel: Website hosting and delivery
  • Tigris: Secure file storage for uploaded photos, documents, and user-initiated recordings
  • Resend: Transactional email delivery
  • Sentry: Error monitoring and crash reporting

All third-party providers are contractually obligated to comply with data protection regulations.

7. Data Storage and Deletion

Your personal data is stored only as long as necessary for the stated purposes or as required by legal retention obligations. After deleting your account, your data will be anonymized or deleted within 30 days, unless legal retention requirements apply.

Unconfirmed shift-reminder transitions are device-local and expire after no more than two hours. Confirmed time records follow the retention rules applicable to project, accounting, and employment records.

8. Your Rights

You have the following rights regarding your personal data:

  • Right of access: You may request information about the data we store
  • Right to rectification: You may request correction of inaccurate data
  • Right to erasure: You may request deletion of your data
  • Right to data portability: You may receive your data in a common format
  • Right to object: You may object to the processing of your data

To exercise your rights, please contact us at:hello@baubiber.com

9. Cookies and Tracking

Our website uses technically necessary cookies to ensure the functionality of the platform. Analytical cookies are only used with your explicit consent.

10. Contact

For questions about data protection, you can reach us at:
Email: hello@baubiber.com