Obaveštenje o privatnosti

Verzija 2026-10-01 · na snazi od 11. oktobra 2026.

Bebicino je aplikacija u kojoj roditelji i drugi negovatelji zajedno vode dnevnik nege bebe: hranjenje, spavanje, pelene, lekove i podsetnike. Ovde objašnjavamo koje podatke aplikacija obrađuje, zašto, gde se čuvaju, koliko dugo i koja prava imate. Obaveštenje se odnosi na aplikaciju Bebicino i na sajt bebicino.com.

Podatke obrađujemo u skladu sa Zakonom o zaštiti podataka o ličnosti Republike Srbije i, kada se primenjuje, Opštom uredbom EU o zaštiti podataka (GDPR).

1. Ko obrađuje podatke

Rukovalac podacima je Protocode, Srbija. Za pitanja o privatnosti i za ostvarivanje prava pišite na privacy@bebicino.com.

2. Koje podatke obrađujemo

• Nalog: adresa e-pošte, identifikator naloga kod Apple-a ili Google-a ako se prijavljujete preko njih, ime koje prikazujete i podešavanja (jezik, tema, jedinice). Jezik čuvamo i uz nalog, da bi e-pošta sa kodom za prijavu stigla na vašem jeziku.
• Saglasnost: verzija dokumenata koje ste prihvatili i vreme prihvatanja.
• Porodica: naziv porodice, vremenska zona, uloge članova, imena koja članovi koriste u porodici i podaci o pozivima.
• Dete: ime ili nadimak, datum rođenja, izabrana boja i kategorije koje pratite. Ne tražimo pol, prezime, fotografiju ni bilo kakav identifikacioni broj.
• Zapisi o nezi: hranjenje, spavanje, pelene (uključujući opis stolice, ako ga unesete) i beleške, sa podatkom o tome ko je i kada uneo zapis.
• Lekovi: nazivi, uputstva o doziranju koja sami unesete, rasporedi i zabeležene doze.
• Istorija izmena: prethodne vrednosti zapisa, ko ih je promenio i kada. Služi za usklađivanje izmena sa više uređaja i za podršku.
• Dijagnostika grešaka: model uređaja, verzija operativnog sistema i aplikacije i tehnički opis greške. Ne sadrži imena, podatke o detetu, adrese e-pošte ni sadržaj zapisa.
• Statistika korišćenja, samo ako je uključite: nasumični identifikator instalacije, pseudonimna oznaka porodice, nazivi događaja i zbirni brojevi (na primer „1–5 hranjenja dnevno”). Nikada ne sadrži imena, datume rođenja, beleške, lekove, vrednosti zapisa ni vreme pojedinačnih zapisa o nezi.
• Podaci na telefonu: aplikacija čuva kopiju podataka vaše porodice na telefonu, da bi radila i bez interneta.

Ne prikupljamo lokaciju, kontakte, fotografije, zvuk sa mikrofona, reklamne identifikatore ni podatke iz aplikacija Apple Health i Health Connect. Aplikacija nema oglase. Podatke ne prodajemo i ne delimo ih sa oglašivačima.

3. Podaci o deci i zdravlju

Zapise o hranjenju, spavanju, pelenama i lekovima i beleške smatramo podacima o zdravlju, koji uživaju posebnu zaštitu. Obrađujemo ih samo uz vaš izričit pristanak, koji dajete pre nego što napravite porodicu ili joj se pridružite. Pristankom potvrđujete i da ste roditelj ili staratelj dece koju dodajete, ili da imate njihovu dozvolu.

Podatke o deci ne koristimo za profilisanje, automatizovano odlučivanje ni marketing. Aplikaciju koriste odrasli; nije namenjena deci.

4. Svrha i pravni osnov

• Pružanje usluge (nalog, prijava, porodica, sinhronizacija, e-pošta sa kodom za prijavu): izvršenje ugovora, odnosno Uslova korišćenja.
• Podaci o zdravlju dece: vaš izričit pristanak.
• Zapis o saglasnosti: zakonska obaveza da možemo dokazati da je pristanak dat.
• Dijagnostika grešaka: legitimni interes da aplikacija radi pouzdano.
• Statistika korišćenja: vaš pristanak. Isključena je dok je ne uključite, a možete je isključiti u svakom trenutku u Podešavanjima.

5. Ko vidi podatke

Članovi porodice vide zapise o deci kojima imaju pristup, uz ime osobe koja je zapis unela. Administratori pozivaju i uklanjaju članove i biraju im uloge: administrator, negovatelj (sva deca) ili ograničeni negovatelj (samo izabrana deca; lekove vidi samo ako mu to administrator dozvoli). Poziv je jednokratni kod koji sami delite; aplikacija ne šalje pozive umesto vas.

Pružaoci usluga obrađuju podatke za nas, samo da bi aplikacija radila:

• Supabase: baza podataka, prijava i serverske funkcije. Svi podaci sa servera. Evropska unija.
• PowerSync (JourneyApps): sinhronizacija između uređaja. Podaci porodice. Evropska unija.
• Sentry: dijagnostika grešaka. Samo tehnički podaci. Evropska unija.
• PostHog: statistika korišćenja, samo uz vaš pristanak. Pseudonimni događaji. Evropska unija.
• Pružalac usluge slanja e-pošte: slanje kodova za prijavu. Adresa e-pošte.
• Expo: isporuka ažuriranja aplikacije. Zahtev za ažuriranje sadrži podatke o uređaju i verziji aplikacije, bez vaših zapisa.
• Cloudflare: isporuka sajta bebicino.com.

Apple i Google obrađuju podatke kao samostalni rukovaoci kada se prijavljujete preko njih i kada aplikaciju preuzimate iz njihovih prodavnica, prema sopstvenim pravilima privatnosti.

Podatke iz aplikacije čuvamo u Evropskoj uniji. Srbija smatra da države članice EU pružaju primeren nivo zaštite podataka. Za prenos u druge zemlje koristimo mere zaštite koje zakon propisuje.

6. Koliko dugo čuvamo podatke

• Nalog, porodica, deca i zapisi: dok ih vi ili administrator porodice ne obrišete. Neaktivne naloge ne brišemo automatski.
• Obrisani zapisi i njihova istorija: 30 dana, zatim se trajno brišu.
• Obrisano dete: može se vratiti 30 dana, zatim se trajno briše.
• Obrisana porodica: briše se odmah, a u rezervnim kopijama ostaje do njihovog isteka.
• Pozivi: 30 dana nakon što isteknu, budu prihvaćeni ili opozvani.
• Pokušaji unosa koda poziva (zaštita od zloupotrebe): 24 sata.
• Dijagnostika grešaka: 90 dana.
• Statistika korišćenja: 12 meseci.
• Evidencija o slanju e-pošte: do 30 dana.
• Rezervne kopije: do 30 dana.
• Podaci na telefonu: do odjave, do uklanjanja iz porodice (kada se telefon poveže na internet) ili do brisanja aplikacije.

Brisanje naloga. Kada obrišete nalog, brišemo profil, podešavanja i podatke za prijavu. Porodice u kojima ste jedini član brišu se sa svim podacima. U porodicama sa drugim članovima zapisi koje ste uneli ostaju deo zajedničkog dnevnika, vaše ime se briše, a zapisi prikazuju „Bivši član”. Ako ste jedini administrator porodice koja ima i druge članove, prvo nekog drugog postavite za administratora ili obrišite porodicu.

Uklanjanje iz porodice. Kada vas administrator ukloni iz porodice, zapisi koje ste uneli ostaju u njoj, uz vaše ime i oznaku „bivši član”, dok porodica postoji ili dok ne obrišete nalog.

7. Telefon bez interneta i zaključan ekran

Kada administrator ukloni člana ili kada se odjavite na svim uređajima, drugi telefon gubi pristup tek kada se sledeći put poveže na internet. Telefon koji je sve vreme van mreže do tada prikazuje podatke koje je već imao. Zato telefon zaštitite zaključavanjem ekrana.

Podsetnici se prikazuju na zaključanom ekranu. Ako ne želite da se tu vide imena i detalji, uključite diskretna obaveštenja: tada se prikazuje samo „Podsetnik”.

8. Vaša prava

Imate pravo na pristup podacima, ispravku, brisanje, ograničenje obrade, prenosivost i prigovor, kao i pravo da povučete pristanak. Povlačenje pristanka ne utiče na zakonitost obrade pre povlačenja.

Većinu prava ostvarujete direktno u aplikaciji:

• sve zapise vidite i menjate u aplikaciji;
• zapise, dete, porodicu i nalog brišete u aplikaciji, a nalog u Podešavanjima › Nalog i podaci;
• podatke izvozite u datoteku (JSON) opcijom „Izvezi podatke” (administratori i negovatelji, za decu kojoj imaju pun pristup);
• pristanak za podatke o zdravlju povlačite brisanjem podataka porodice ili naloga, a pristanak za statistiku korišćenja isključivanjem te opcije u Podešavanjima.

Za sve ostale zahteve pišite na privacy@bebicino.com. Odgovaramo najkasnije u roku od 30 dana. Da bismo proverili da je zahtev vaš, možemo zatražiti da nam pišete sa adrese e-pošte vašeg naloga. Prava dece ostvaruju njihovi roditelji ili staratelji, preko administratora porodice ili na istoj adresi.

Pritužbu možete podneti Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti (www.poverenik.rs). Ako živite u Evropskoj uniji, možete se obratiti i nadzornom organu u svojoj zemlji.

9. Bezbednost

Sve veze sa serverima su šifrovane. Sesija prijave čuva se u zaštićenom skladištu telefona, a podaci na serverima šifrovani su u mirovanju. Lozinke ne postoje: prijavljujete se kodom poslatim e-poštom ili preko Apple-a ili Google-a. Ako dođe do povrede bezbednosti podataka, obavestićemo nadležni organ i vas onako kako zakon propisuje.

10. Aplikacija ne daje medicinske savete

Bebicino beleži ono što unesete i podseća vas u vreme koje ste sami podesili. Ne postavlja dijagnoze, ne tumači zapise, ne računa doze i ne preporučuje lečenje. Za pitanja o zdravlju deteta obratite se lekaru.

11. Sajt bebicino.com

Sajt ne koristi kolačiće, analitiku ni spoljne skripte. Cloudflare, koji isporučuje sajt, obrađuje tehničke podatke o zahtevima, kao što je IP adresa, radi isporuke stranica i zaštite od napada.

12. Izmene obaveštenja

Verzija i datum ovog obaveštenja nalaze se na vrhu stranice. Kada ga značajno izmenimo, aplikacija će vas pri sledećem pokretanju zamoliti da pregledate i prihvatite novu verziju.

Privacy notice

Version 2026-10-01 · effective 11 October 2026

Bebicino is an app in which parents and other caregivers keep a shared baby care journal: feeding, sleep, diapers, medication, and reminders. This notice explains what data the app processes, why, where it is stored, for how long, and what rights you have. It covers the Bebicino app and the bebicino.com website.

We process data in line with the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who processes your data

The data controller is Protocode, Serbia. For privacy questions and to exercise your rights, write to privacy@bebicino.com.

2. What data we process

• Account: email address, your Apple or Google account identifier if you sign in with them, the name you display, and your settings (language, theme, units). We also store the language with your account so that sign-in code emails arrive in your language.
• Consent: the version of the documents you accepted and when you accepted them.
• Family: family name, time zone, member roles, the names members use in the family, and invitation details.
• Child: name or nickname, date of birth, a chosen color, and the categories you track. We don't ask for sex, surname, photo, or any identification number.
• Care records: feeding, sleep, diapers (including stool details, if you enter them), and notes, with who entered each record and when.
• Medication: names, dosage instructions you enter yourself, schedules, and recorded doses.
• Change history: previous values of records, who changed them, and when. Used to reconcile changes from several devices and for support.
• Error diagnostics: device model, operating system and app version, and a technical description of the error. They contain no names, child data, email addresses, or record contents.
• Usage statistics, only if you turn them on: a random install identifier, a pseudonymous family reference, event names, and aggregated counts (for example “1–5 feedings a day”). They never contain names, dates of birth, notes, medication, record values, or the times of individual care events.
• Data on your phone: the app keeps a copy of your family's data on the phone so it works without an internet connection.

We don't collect location, contacts, photos, microphone audio, advertising identifiers, or data from Apple Health or Health Connect. The app has no ads. We don't sell data or share it with advertisers.

3. Children's data and health data

We treat feeding, sleep, diaper, and medication records and notes as health data, which has special protection. We process it only with your explicit consent, which you give before you create or join a family. By consenting you also confirm that you are a parent or legal guardian of the children you add, or that you have their permission.

We don't use children's data for profiling, automated decisions, or marketing. The app is used by adults and is not directed at children.

4. Purposes and legal bases

• Providing the service (account, sign-in, family, sync, sign-in code emails): performance of a contract, the Terms of Service.
• Children's health data: your explicit consent.
• Consent record: our legal obligation to be able to show that consent was given.
• Error diagnostics: our legitimate interest in keeping the app reliable.
• Usage statistics: your consent. They stay off until you turn them on, and you can turn them off in Settings at any time.

5. Who sees your data

Family members see records about the children they have access to, with the name of the person who entered each record. Administrators invite and remove members and choose their roles: administrator, caregiver (all children), or limited caregiver (selected children only; sees medication only if an administrator allows it). An invitation is a single-use code that you share yourself; the app doesn't send invitations for you.

Service providers process data on our behalf, only to run the app:

• Supabase: database, sign-in, and server functions. All server data. European Union.
• PowerSync (JourneyApps): sync between devices. Family data. European Union.
• Sentry: error diagnostics. Technical data only. European Union.
• PostHog: usage statistics, only with your consent. Pseudonymous events. European Union.
• Email delivery provider: sends sign-in codes. Email address.
• Expo: delivers app updates. Update requests contain device and app version details, not your records.
• Cloudflare: serves the bebicino.com website.

Apple and Google process data as independent controllers when you sign in with them and when you download the app from their stores, under their own privacy policies.

We store app data in the European Union. Serbia recognizes EU member states as providing an adequate level of data protection. For transfers to other countries we use the safeguards the law requires.

6. How long we keep data

• Account, family, children, and records: until you or a family administrator delete them. We don't delete inactive accounts automatically.
• Deleted records and their history: 30 days, then permanently deleted.
• Deleted child: can be restored for 30 days, then permanently deleted.
• Deleted family: deleted immediately; remains in backups until they expire.
• Invitations: 30 days after they expire, are accepted, or are revoked.
• Invitation code attempts (abuse protection): 24 hours.
• Error diagnostics: 90 days.
• Usage statistics: 12 months.
• Email delivery logs: up to 30 days.
• Backups: up to 30 days.
• Data on your phone: until you sign out, are removed from the family (once the phone connects to the internet), or uninstall the app.

Deleting your account. When you delete your account, we delete your profile, settings, and sign-in identity. Families in which you are the only member are deleted with all their data. In families with other members, the records you entered stay in the shared journal, your name is erased, and the records show “Former member”. If you are the only administrator of a family with other members, make someone else an administrator or delete that family first.

Being removed from a family. When an administrator removes you from a family, the records you entered stay in it, with your name marked “former member”, for as long as the family exists or until you delete your account.

7. Offline phones and the lock screen

When an administrator removes a member, or when you sign out on all devices, another phone loses access only the next time it connects to the internet. Until then, a phone that stays offline keeps showing the data it already has. Protect your phone with a screen lock.

Reminders appear on the lock screen. If you don't want names and details shown there, turn on discreet notifications, which show only “Reminder”.

8. Your rights

You have the right to access, rectify, and erase your data, to restrict processing, to data portability, and to object, as well as the right to withdraw consent. Withdrawing consent doesn't affect processing that took place before.

You can exercise most of these rights directly in the app:

• you can see and edit all records in the app;
• you can delete records, children, families, and your account in the app, the account in Settings › Account & data;
• you can export data to a file (JSON) with “Export data” (administrators and caregivers, for children they have full access to);
• you withdraw consent for health data by deleting the family's data or your account, and consent for usage statistics by turning them off in Settings.

For any other request, write to privacy@bebicino.com. We reply within 30 days. To confirm that a request is yours, we may ask you to write from your account's email address. Children's rights are exercised by their parents or legal guardians, through the family's administrators or at the same address.

You can lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs). If you live in the European Union, you can also contact the supervisory authority in your country.

9. Security

All connections to our servers are encrypted. Your sign-in session is kept in the phone's protected storage, and data on the servers is encrypted at rest. There are no passwords: you sign in with a code sent by email, or with Apple or Google. If a personal data breach occurs, we will notify the competent authority and you as the law requires.

10. The app gives no medical advice

Bebicino records what you enter and reminds you at times you set yourself. It doesn't diagnose, interpret records, calculate doses, or recommend treatment. For questions about your child's health, talk to a doctor.

11. The bebicino.com website

The website uses no cookies, analytics, or third-party scripts. Cloudflare, which serves the website, processes technical request data such as IP addresses to deliver pages and protect against attacks.

12. Changes to this notice

The version and date of this notice are at the top of the page. When we change it materially, the app will ask you to review and accept the new version the next time you open it.