Privacy Policy

Account data: Username, email address (optional), and a bcrypt-hashed password. Your role (Gent or Hottie) is recorded at registration.

Profile data: Display name, bio, photos, services offered, pricing, Dubai zone (Zone D1 – Zone D12), area, and preferences you choose to share.

Verification media: Live photo, live voice sample, and a short live gesture video captured during verification. These are reviewed by a human moderator and deleted immediately after the review decision is recorded. We do not retain verification media on an ongoing basis.

Device and connection data: IP address, device fingerprint (a hash derived from device characteristics — not a unique tracker), browser, user agent, and session timestamps. Used for fraud prevention and security.

Location data: GPS coordinates are captured only at the moment of verification (to confirm the user is physically in Dubai). Location is not tracked on an ongoing basis.

Transaction data: Credit purchase records, unlock records, and partner earning records (if you are a partner). BaeBe does not store full card numbers — payments are made in cryptocurrency via certified third-party processors.

Under applicable data protection laws, we process your personal data on the following legal bases:

• Consent — for non-essential cookies, push notifications, and any optional processing you explicitly agree to.
• Contract — to provide the Service you requested, including account creation, verification, unlocking contact details, and credit purchases.
• Legal obligation — to retain financial transaction records and to comply with lawful requests from competent authorities.
• Legitimate interest — for fraud prevention, security (device fingerprinting, IP logging), service improvement, and moderation of user-generated content.

You may withdraw consent for non-essential processing at any time without affecting the lawfulness of processing carried out before withdrawal.

Your verification media (live photo, live voice sample, live gesture video) is used solely for identity verification. It is:

• Reviewed by a human moderator (the founder or an authorised reviewer)
• Deleted immediately after the review decision is recorded — we do not retain verification media on an ongoing basis
• Never displayed on your public profile
• Never shared with other users or third parties
• Never used to train any automated system

Biometric data (such as face embeddings) derived from verification media, where generated, is also deleted alongside the source media after the review decision.

Active accounts: Account and profile data is retained for the lifetime of your account.

Verification media: Deleted immediately after the review decision is recorded. Not retained.

Deleted accounts: When you delete your account, your profile, photos, ratings, transactions, and verification records are removed within 30 days. Anonymised transaction records may be retained for financial compliance.

Transaction records: Retained for a minimum of 10 years for financial-compliance purposes under applicable law, in an anonymised form once your account is deleted.

Device fingerprint and IP data: Retained for 12 months for fraud prevention, then automatically purged.

Under applicable data protection laws, you have the following rights:

• Information & access — Request information about and a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate personal data
• Erasure — Request deletion of your personal data
• Restriction — Request that we restrict processing of your data in certain circumstances
• Objection — Object to processing based on legitimate interest or for direct marketing
• Data portability — Receive your data in a structured, machine-readable format (JSON)
• Withdrawal of consent — Withdraw consent for non-essential processing at any time

To exercise any of these rights, visit our Data Request page or contact us via Telegram support. We will respond within 30 days.

We do not sell your data. We never have, and we never will.

We share data only with the following categories of processors, strictly to operate the Service:

• Telegram — for media storage (your profile photos and verification media live in a private Telegram channel) and for the BaeBe Telegram miniapp. Telegram’s privacy policy applies to data they process.
• Database provider — stores account, profile, and transaction data on EU servers (see Section 7).
• Hosting provider — serves the web application and runs API routes from Frankfurt, Germany.

We may disclose data to law enforcement or regulatory authorities where required by applicable law, or to protect the rights, property, or safety of BaeBe, our users, or others.

Your data is stored on servers located in the EU:

• Database: Hosted in Dublin, Ireland (EU)
• Application hosting: Served from Frankfurt, Germany (EU)
• Media storage: Telegram — server locations determined by Telegram’s infrastructure

Transfers to processors in the EU are made under appropriate safeguards under applicable data protection law, including Standard Contractual Clauses where required. Any transfer to a jurisdiction without an adequacy decision or equivalent safeguards is subject to additional protective measures under applicable law.

BaeBe is designed to comply with applicable data protection laws and applicable criminal law. Our data practices align with the following core principles:

• Lawfulness
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Transparency

For any privacy-related questions, to exercise your data rights, or to make a complaint about how we handle your data:

Data protection contact: Telegram @BaeBe Support

In-app: Use the support form inside the BaeBe app.

We will acknowledge your request within 7 days and respond substantively within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the competent data protection authority in the operator’s jurisdiction.

You can download a copy of your data or permanently delete your account directly from our Data Request page. No need to wait for support — both actions are available instantly when you are logged in.