Volver al inicio

Privacy Policy

Last updated: June 24, 2026

Resumen en español

Sabinitty (operada por S.R. Arguello Durán, handelsnaam Sabinitty, KVK 42008591) trata tus datos para ofrecerte la app de embarazo y crianza. Los datos de salud solo con tu consentimiento explícito. No vendemos tus datos. Puedes acceder, corregir o borrar tu cuenta en Ajustes. Contacto: privacy@sabinitty.com.

Samenvatting (Nederlands)

Sabinitty wordt beheerd door S.R. Arguello Durán (handelsnaam Sabinitty, KVK 42008591). Gezondheidsgegevens verwerken we alleen met jouw uitdrukkelijke toestemming. We verkopen je gegevens niet. Je kunt je gegevens inzien, corrigeren of je account verwijderen via Instellingen. Contact: privacy@sabinitty.com.

This Privacy Policy explains how S.R. Arguello Durán, trading as Sabinitty(formerly marketed as Pikkakola), a sole proprietorship (eenmanszaak) registered in Almere, the Netherlands, collects, uses, and protects your personal data when you use our pregnancy and family wellness application.

We are committed to complying with the European General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the Dutch Uitvoeringswet AVG (UAVG).

1. Data Controller

S.R. Arguello Durán (trading as Sabinitty)
KvK-nummer: 42008591
P.S. Gerbrandypad 24, 1314 NL, Almere, the Netherlands
BTW-identificatienummer: NL584683741B01 (KOR — vrijgesteld van btw waar van toepassing)
Contact: privacy@sabinitty.com

2. Data We Collect

CategoryDataLawful Basis (GDPR Art. 6)
Account DataName, email address, hashed passwordContract performance (Art. 6(1)(b))
Payment DataProcessed by Stripe. We do NOT store card numbers.Contract performance (Art. 6(1)(b))
Usage DataGeneration counts, feature usage, login timestampsLegitimate interest (Art. 6(1)(f))
Your ContentJournal entries, letters, photos, milestones and notes you createContract performance (Art. 6(1)(b))
Health Data (special category)Pregnancy tracking, appointments, symptoms, weight, blood pressure, baby logsExplicit consent (Art. 6(1)(a) + Art. 9(2)(a)) — requested in-app before health features
AI InteractionsMessages you send to the "Sabi" companion (may include health-related questions)Consent + contract (Art. 6(1)(a)/(b)); health context under Art. 9 where applicable

3. How We Use Your Data

We do NOT sell your data. We do NOT use your data for third-party advertising. We do NOT share your health or family data with other users.

4. Data Processors (Sub-processors)

ProcessorPurposeLocationDPA
Supabase Inc.Database, authenticationEU (Frankfurt)Standard DPA available
Vercel Inc.Hosting, CDNEU regions where configuredStandard DPA available
Stripe Inc.Payment processingEU/US (EU data residency available)Standard DPA available
Resend Inc.Transactional email (signup, password reset)EU/USStandard DPA available
Google (Gemini API)AI companion "Sabi" — only when you send a messageEU/USGoogle Cloud / AI terms + SCCs

For US-based processors, data transfers are protected under the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs). We maintain Data Processing Agreements with each processor listed above. Processor list last reviewed: June 2026.

5. AI Features & Health Data Sent to Google

When you use Sabi, the text of your message (and limited session context) is sent to Google's Gemini API to generate a reply. Do not include information you are not comfortable sharing with our AI processor.We do not use your health logs for advertising or to train public models. Google's processing is governed by their API terms and our DPA/SCCs. Sabi outputs are informational only — always consult your doctor or midwife.

6. Data Retention

7. Your Rights (GDPR Articles 15-22)

You have the right to:

We respond to all data subject requests within 30 days as required by GDPR.

8. Cookies

We use essential cookies required for authentication and session management (Supabase auth tokens). Any non-essential analytics cookies will be used only with your consent, which you can give or refuse via our cookie banner. We do not currently load third-party advertising trackers.

9. Security & Personal Data Breaches

If a personal data breach is likely to result in a risk to your rights, we will notify the Dutch Autoriteit Persoonsgegevens within 72 hours where required by GDPR Art. 33, and affected users without undue delay when required by Art. 34. Report security concerns to privacy@sabinitty.com.

10. AI Features (EU AI Act transparency)

Optional AI features (e.g. the "Sabi" companion) are clearly labelled as AI-generated assistance. Outputs are informational only and do not replace professional medical advice. You remain responsible for your decisions.

11. Children's Privacy

Our services are not directed at children under 16. Parents enter baby/child data as controller-of-record; we minimise such data and never expose it to other users. If we become aware of unlawful collection from children under 16, we will delete the data immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

14. Contact

For any privacy-related questions or to exercise your rights, contact: privacy@sabinitty.com