Privacy

What we store

• The gift itself — the names, text, photos, audio and settings you put into it.
• A PIN, if you set one — hashed with argon2id. We cannot read it, recover it, or show it back to you. Only replace it.
• An account — anonymous by default. If you sign in at publish time we store the Google account id and email so you can find your gifts again.
• Opens and progress — a counter, and one row per scene reached. We store a hash of the browser's user-agent, not an IP address, and we do not set cookies on the gift page.
• Replies — anything the recipient writes or records back.
• Payments — the Razorpay order and payment ids. Card and UPI details never touch our servers.

Who can see it

You, and anyone you give the link to. Gift pages are markednoindexand send no referrer, so they do not appear in search results and do not leak to sites the recipient visits afterwards.

Photos and voice notes are served through links that expire after 24 hours. There is no permanent public URL for anything you upload.

Our staff do not read your gifts. Uploaded images pass an automated check for illegal content, and a gift can be disabled if it is reported.

How long we keep it

A published gift lives for the period you paid for — one year, or three on the keepsake tier — and you can extend it for free from your dashboard. Drafts you never publish are removed after twelve months of no activity.

Deleting it

Delete from your dashboard. It is immediate and it is permanent: every photo, voice note, reply and the record itself are erased, and the link returns a 404 straight away. We keep the payment record, because tax law requires it.

Where it lives

Firebase, in Google's Mumbai region (asia-south1). Payments are handled by Razorpay. Those are the only two companies that process your data on our behalf.

Getting in touch

Email hello@baabu.in for a copy of your data, a correction, or a deletion you cannot do yourself. We reply within seven days.