Privacy policy
Last updated: November 4, 2026
Who we are
Bambini is a service for running nurseries and preschools. This page explains what happens to your data when your nursery uses Bambini — whether you are an owner, a staff member, a parent or a guardian.
Your nursery — not Bambini — is responsible for your child’s records. The nursery decides what is recorded and who may see it; Bambini processes those records on the nursery’s behalf.
What data we hold, and why
We collect what the nursery needs for care and billing, and no more. What that is depends on your role:
Owners and staff
- Your name and phone number (and work email if used), to sign you in and reach you.
- Your role, branch and rooms, to decide what you can see.
- The devices you are signed in on, so you can sign out of all of them.
- Your actions, written to the nursery’s audit log.
Parents and guardians
- Your name, phone number and relationship to the child, to reach you and show you your child’s day.
- The messages you exchange with the nursery.
- Your child’s invoices, your payments and the receipts.
- Your app settings, such as language and quiet hours.
Children
- Name, birth date, room and guardians, for care and attendance.
- Attendance and the day’s care entries: meals, naps, activities and the rest.
- Allergies and medical notes shared by the nursery, visible only to the staff who need them.
- Photos taken during the day, shared according to guardian consent — see below.
Where your data is stored
The database and files are stored on servers Bambini runs itself, and always travel encrypted.
Photos and files sit in private storage, reached only through short-lived links that expire within minutes — never public ones. Where a photo was taken is removed from the file.
We back up the database every night and keep the last seven nights.
Who else sees your data
We keep the list to the minimum a nursery needs. These are the companies involved today:
Vercel
Hosting the website and the dashboard, and counting public website visits without cookies.
MyFatoorah
Online payment processing. When you pay online the transaction runs through MyFatoorah; your card details stay with them and never reach us.
Unifonic
Sending SMS messages: sign-in codes, invitations, pay links and reminders. It receives the phone number and the message text.
Expo, Apple and Google push services
Delivering app notifications to your phone. They receive a device identifier and the notification itself, nothing else.
Wasal
Student transport, only for nurseries that use buses. It receives the student name and guardian phone number to track the bus.
Anthropic (Claude)
Translating messages between Arabic and English and drafting the daily report summary — see the AI section below.
The nursery directory
A nursery appears in the public directory only at its own request and after our review, with its name, city, ages, phone and description. The directory holds no data about children, families or staff. We use the requester's name and number to review the request and contact them about the listing and the Bambini software, and they are never shown publicly.
Website visit counts
We count visits to our public website pages with Vercel Web Analytics, which uses no cookies and does not identify you. Payment, application and enquiry pages are not measured, and neither is anything inside your account.
AI features
- Two features use AI today: translating a message written by you or the nursery, and drafting the short summary of the daily report.
- For translation, the text of that message is sent. For the daily summary, the day’s structured entries and the teacher’s notes are sent with the child’s first name only — no full names, no contact details, no photos.
- The provider is Anthropic (Claude). Your content is not used to train their models and is kept by them only for the limited period their service terms allow.
- The teacher can read and edit the daily summary before it is sent; otherwise it is sent at the time the nursery sets. In translation, the original message always stays visible.
- The nursery can turn AI off; the apps work without it.
How long we keep it
- A child’s care and attendance records are kept for two years after they leave the nursery by default; the nursery can set a different period.
- Financial records — invoices and payments — are kept for as long as the law requires.
- When you delete your account your name, phone and devices are removed; the nursery’s records stay — see the account deletion page.
Your rights
You can ask for a copy of your family’s data, for a correction, or for deletion; a parent can receive a full export including the records and the photos. The request goes to your nursery, which is responsible for the records — we help them behind the scenes.
If you are not sure how to ask, write to us from the support page and we will point you to the right person at your nursery.
Children’s data and photos
- A child’s photo is shared only with the guardians of the children in it, and only when the guardian has consented.
- Consent is given per child and can be withdrawn at any time — from that moment the child can no longer be tagged in new photos.
- Every read of medical data is written to the audit log the nursery’s owner can review.
- Children’s photos are never used in Bambini’s marketing without separate written consent.
How we protect it
- Each nursery’s data is isolated; one nursery can never read another’s.
- Everything is encrypted: in transit, at rest and in the backups.
- Sign-in is by a code sent to your phone; owners and admins add a second step from an authenticator app.
- Our team’s access to a nursery’s data happens only against a logged support ticket, and is recorded and visible to the owner.
Contact
A question about privacy? Write to us from the support page and we will answer.
Still stuck?