Privacy Policy

Last Updated: July 10, 2025

1. Introduction

This Privacy Policy explains how Baito ('we', 'our', or 'us') collects, uses, shares, and protects your personal information when you use our Service.

2. Information We Collect

We collect the following information:

• Personal identification information: Email address, first name, password.
• Work-related information: Shifts, job details, and hourly wage.
• JWT: We use JSON Web Tokens (JWTs) stored securely in the user's keychain to maintain sessions and enhance the user experience. The JWT contains the user's email and a unique identifier.

3. How We Use Your Information

We use the information we collect in the following ways:

• To provide and maintain our Service.
• To manage your account, including verifying your identity.
• To analyze usage and improve our Service.
• To communicate with you, including sending updates and security alerts.
• To manage in-app purchases and subscriptions through third-party services such as RevenueCat.

4. Data Sharing and Disclosure

We do not share your personal information with third parties except in the following circumstances:

• With your consent.
• To comply with legal obligations.
• To protect and defend our rights and property.

5. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Sensitive information such as passwords, hourly rates, and job titles are encrypted to ensure their protection. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Please note that no method of transmission over the internet or method of electronic storage is 100% secure or error free.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access and update your information.
• The right to delete your information.
• The right to object to processing or request restrictions.
• The right to data portability.

7. AI Schedule Import Functionality

By using the AI import schedule functionality, you acknowledge and consent that any uploaded files, including images and text, are sent to Google for processing through Google's Gemini API.

Uploaded files are used solely for extracting schedule information and are not retained by us after processing. However, Google may retain such data in accordance with their own privacy practices.

You may opt out of using the AI functionality and instead input your schedule manually. Please review AI-generated results carefully as we are not responsible for any errors or omissions.

For more information, please refer to Google Gemini's Privacy Policy.

8. Third-Party Services

We use trusted third-party services to deliver and support our app’s functionality:

• RevenueCat: Used for subscription management and in-app purchase processing. RevenueCat may collect anonymous user identifiers, purchase history, and subscription status. More info: RevenueCat Privacy Policy
• Google Gemini: See Section 7 for details on how Gemini is used for AI image processing.

9. Children's Online Privacy Protection Act (COPPA)

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so that we can delete such information.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the updated version on this page. If changes are significant, we will notify you within the app or via email.