Privacy Policy

Bamba is a technology startup building AI-powered products. Our flagship product is Lunar, an AI educational platform accessible at bambalunar.app. This Privacy Policy applies to all Bamba products and services. Contact: contact@bambalunar.app.

• Account data: Name, email address, and profile photo when you sign in with Google OAuth or create an account with email and password.
• Usage data: Chat messages, session history, learning progress, and concept trees you generate within Lunar.
• Files you upload: PDFs, images, and documents you share in sessions for AI analysis. These are processed in memory and not permanently stored on our servers unless explicitly saved to your library.
• Technical data: IP address, browser type, device type, and usage analytics collected via Firebase Analytics. We do not sell this data.

• →Provide, operate, and improve our products and services.
• →Personalize your learning experience — concept trees, history, and suggestions are tied to your account.
• →Process AI queries on your behalf by sending relevant context to our AI providers (Azure OpenAI, Azure AI Foundry, Google Cloud AI, AWS AI Services). We do not share your personal identity with these providers.
• →Send important service communications (account changes, security alerts). We do not send marketing emails without consent.
• →Analyze aggregate usage to improve product quality. We do not profile individual users for advertising.

User data is stored in Google Firebase Firestore (Cloud Firestore), hosted in the United States. We use Firebase Authentication for identity management. Server infrastructure runs on Google Cloud Run.

We apply standard security practices: HTTPS for all data in transit, Firebase security rules to restrict database access, and no plaintext storage of passwords (handled by Firebase Auth). We cannot guarantee absolute security and recommend using a strong, unique password.

We use the following third-party services to operate Bamba products: Google Firebase (auth, database, hosting), Google Cloud (compute), Microsoft Azure (AI inference), Amazon Web Services (AI services). Each provider has their own privacy policy. We do not integrate advertising networks, social trackers, or data brokers.

Your account data and chat history are retained as long as your account is active. You may request deletion of your account and associated data at any time by emailing contact@bambalunar.app. Deletion requests are processed within 30 days.

• →Access the personal data we hold about you.
• →Request correction of inaccurate data.
• →Request deletion of your account and data.
• →Export your chat history and concept trees.
• →Withdraw consent at any time by closing your account.

Bamba products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us at contact@bambalunar.app and we will delete it promptly.

We may update this policy as our products evolve. Material changes will be communicated via email or a notice on the platform. The date at the top of this page reflects the most recent revision. Continued use after changes constitutes acceptance.

Questions about this policy? Email us at contact@bambalunar.app.