Introduction

Your privacy and the protection of your baby’s data are of utmost importance to us. This Privacy Notice outlines how we collect, use, share, and protect your personal information when you use our services.

1. Data Collection

In summary: We collect various types of data to provide, manage, and improve our services. This includes information directly from you and data generated through your interactions with our services.

• Account Data: This includes information you provide when creating and managing your account, such as your email and password. This data is fundamental for setting up and maintaining your user profile, allowing us to deliver the service to you.
• Cry Translation Service Data: We collect audio recordings of your baby’s cries to provide our translation and interpretation services. This data is essential fto or the core functionality of our service. With your consent, we may also collect additional information, such as your baby’s gender and birthdate, to enhance the accuracy of the service.
• Service Usage Data: This includes data generated through your interactions with our services, such as account auth authentication tokens and details about how you use the service. This data is crucial for optimizing your experience, improving our offerings, and ensuring the security of your account and our platform.
• Subscription Data: This data pertains to your service subscription, including information processed by our third-party payment processors, such as subscription status and order details. It ensures that we can manage your subscription effectively and provide continuous service.
• Technical Data: We collect technical information necessary for the operation of our services, such as your device’s IP address and device ID. This data ensures the secure and correct functioning of our service.

2. Data Usage

In summary: We process your data to provide our services, communicate with you, comply with legal obligations, and enhance our offerings.

• Service Provision: We use your data to provide and manage our services in accordance with our Terms and Conditions. This includes creating and managing your account, processing your baby’s cries for translation, and ensuring that our services function as intended.
• Marketing Communications: With your consent, we may use your contact information to send you updates and news about our services. You can opt-out of these communications at any time through the settings in the app or by contacting us directly.
• Customer Feedback: We may process your data to send surveys and gather feedback on our services. This helps us understand your experience and improve the quality of our offerings. This processing is based on our legitimate interest in providing and enhancing our services.
• Legal Compliance: We process your data as necessary to comply with legal obligations, such as responding to law enforcement requests or fulfilling regulatory requirements. This includes sharing your data with authorities when required by law.
• Service Improvement: With your consent, we may use data, including your baby’s cry recordings, to improve our technology and develop better tools for parents. This data helps us refine our services and make them more effective for all users.

3. Data Sharing

In summary: We share your data only with trusted partners when necessary to provide our services, comply with legal obligations, or with your consent. We ensure that any third parties who receive your data uphold the same standards of privacy and security.

• Service Providers: We may share your data with third-party service providers who assist us in delivering our services, such as cloud hosting and technical support providers. These service providers act as data processors on our behalf, and we ensure that they adhere to strict data protection agreements.
• Legal Authorities: Your data may be shared with public authorities, law enforcement, or regulatory bodies if required by law or if we have a good faith belief that such disclosure is necessary to comply with legal obligations, protect our rights, or ensure the safety of our users.
• Zoundream Affiliates: For internal administrative purposes, your data may be shared with other companies within the Zoundream group (affiliates ). We ensure that all Zoundream affiliates maintain the same level of data protection as outlined in this privacy policy.
• International Data Transfers: If any of our service providers or affiliates are located outside your jurisdiction, we will take appropriate measures to ensure that your data is protected. This includes implementing safeguards such as Standard Contractual Clauses or ensuring that the third party is located in a country with adequate data protection laws.

4. Managing Your Rights

In summary: You have several rights regarding your personal data, which allow you to control how your data is used and processed. We are committed to facilitating the exercise of your rights in accordance with applicable laws.

You have the following rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you. This enables you to verify how your data is being used and to ensure it is being processed lawfully.
• Right to Rectification: If you believe that any of your personal data is inaccurate or incomplete, you have the right to request its correction or update. This ensures that we maintain accurate and up-to-date information about you.
• Right to Deletion (Right to be Forgotten): You can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or if you withdraw your consent. This right may be subject to certain legal exceptions.
• Right to Restriction of Processing: You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or if the processing is unlawful, but you do not wish for the data to be deleted.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Additionally, you can request that we transfer this data to another data controller, where technically feasible.
• Right to Object: You can object to the processing of your personal data when we are relying on legitimate interests as the legal basis for processing. This includes the right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

California Residents' Rights

In addition, California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know the categories of personal information we collect, the sources of that information, the purposes for which it is collected, and the categories of third parties with whom we share personal information.
• Right to Delete: You can request the deletion of your personal information, subject to certain legal exceptions.
• Right to Opt-Out of the Sale of Personal Information: While we do not sell personal information, California residents have the right to opt-out of the sale of their personal data.
• Non-Discrimination: You have the right not to be discriminated against for exercising any of your privacy rights under the CCPA. This means that we will not deny you goods or services, charge you different prices, or provide a different level or quality of service because you exercised your privacy rights.

To exercise any of your rights, including managing optional consents, you can contact us directly through the app or at the addresses provided in Section 8: Contact Information. We will respond to your request in accordance with applicable laws. We may need to verify your identity before fulfilling your request, and some rights may be subject to limitations or exceptions under applicable laws.

5. Children's Privacy

In summary: We are dedicated to safeguarding children's privacy and ensuring that any data collected through our services is handled with the utmost care and transparency.

At Zoundream, cry recordings are collected through our connected devices solely to provide our translation services. These recordings are processed in real-time and are not stored unless you, as a parent or guardian, provide explicit consent for their retention and use to improve our technology. If you grant this consent, the recordings will be used only for enhancing our technology. You can withdraw your consent at any time or delete your account, at which time all associated data, including cry recordings, is either deleted or anonymized.

6. Data Retention

In summary: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

We retain your personal data for as long as your account remains active and as long as necessary to fulfill the purposes outlined in this Privacy Notice. This includes the time required to provide you with our services, meet our legal obligations, resolve disputes, and enforce our agreements.

Specifically:

• Account Data: We retain your account data for as long as your account is active. If you choose to deactivate your account or discontinue using our services, we will either delete your data or anonymize it so that it can no longer be linked back to you, except where we are required to retain certain data for legal or regulatory reasons.
• Cry Translation Service Data: Recordings of your baby's cries and any associated data are retained only as long as necessary for the translation service. If you have given consent for this data to be used to improve our technology, it will be stored securely until your account is deactivated or until you withdraw your consent. If you withdraw consent, we will either delete or anonymize the data, ensuring it cannot be traced back to you or your baby.
• Service Usage Data: Data generated from your interactions with our services is retained as long as necessary to ensure the functionality and security of our services. This data helps us improve our offerings and is kept for operational and legal purposes.
• Legal Obligations: In some cases, we are required to retain your data to comply with legal obligations, such as tax or accounting requirements, or to resolve disputes. In such instances, your data will be retained only for the period necessary to fulfill these obligations.

After the retention period expires, or when the data is no longer needed, we ensure that your personal data is securely deleted or anonymized, so it can no longer be associated with you.

7. Data Security Measures

In summary: We prioritize the security of your data and employ industry-leading measures to protect it from unauthorized access, disclosure, or alteration.

At Zoundream, we are committed to maintaining the highest standards of data security. We are ISO 27001 certified, which means we adhere to internationally recognized best practices for information security management. This certification reflects our ongoing efforts to ensure that your data is handled securely and responsibly.

We implement a range of security measures, including encryption, secure servers, and regular security audits. Our systems are continuously monitored for vulnerabilities, and we work to protect your data from unauthorized access or cyber-attacks. While we strive to ensure the highest level of security, no system can be entirely foolproof. Therefore, we encourage you to take precautions, such as using strong passwords and keeping your account information confidential.

8. Contact Information

If you have any inquiries or wish to exercise your privacy rights, you can reach out to us through the following contact details:

• Email: For general privacy inquiries or to exercise your rights, please contact us at [email protected]. We will respond to your request in accordance with applicable laws and ensure your concerns are addressed promptly.
• Mail: You can also contact us by mail at the following address:

Zoundream AG

SIP Basel Area AG

Lichtstrasse 35

4056 Basel, Switzerland

For any issues related to data protection, you can also contact our Data Protection Officer (DPO) directly at [email protected]. Our DPO is available to assist you with any detailed queries regarding data privacy and compliance matters.

9. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If significant changes are made, we will notify you through appropriate channels, such as within the app or by email. Your continued use of our services after any updates indicates your acceptance of the changes.

If you do not agree with the updated policy, you may discontinue using our services.

Version: 1.0

Date: August 30, 2024