Privacy policy
Last updated: October 16, 2026
Who we are
Bambini is a service for running nurseries and preschools. This page explains what happens to your data when your nursery uses Bambini — whether you are an owner, a staff member, a parent or a guardian.
Your nursery — not Bambini — is responsible for your child’s records. The nursery decides what is recorded and who may see it; Bambini processes those records on the nursery’s behalf.
What data we hold, and why
We collect what the nursery needs for care and billing, and no more. What that is depends on your role:
Owners and staff
- Your name and phone number (and work email if used), to sign you in and reach you.
- Your role, branch and rooms, to decide what you can see.
- The devices you are signed in on, so you can sign out of all of them.
- Your actions, written to the nursery’s audit log.
Parents and guardians
- Your name, phone number and relationship to the child, to reach you and show you your child’s day.
- The messages you exchange with the nursery.
- Your child’s invoices, your payments and the receipts.
- Your app settings, such as language and quiet hours.
Children
- Name, birth date, room and guardians, for care and attendance.
- Attendance and the day’s care entries: meals, naps, activities and the rest.
- Allergies and medical notes shared by the nursery, visible only to the staff who need them.
- Photos taken during the day, shared according to guardian consent — see below.
Where your data is stored
Your data is stored with Amazon Web Services in a cloud region in the Gulf, and always travels encrypted.
Photos and files sit in private storage, reached only through short-lived links that expire within minutes — never public ones. Where a photo was taken is removed from the file.
We keep encrypted backups: point-in-time recovery for the last 14 days, and daily snapshots kept for 35 days.
Who else sees your data
We keep the list to the minimum a nursery needs. These are the companies involved today:
Amazon Web Services (AWS)
Hosting, databases, storage and backups, in a cloud region in the Gulf.
MyFatoorah
Online payment processing. When you pay by KNET or card the transaction runs through MyFatoorah; your card details stay with them and never reach us.
Unifonic
Sending SMS messages: sign-in codes, invitations, pay links and reminders. It receives the phone number and the message text.
Expo, Apple and Google push services
Delivering app notifications to your phone. They receive a device identifier and the notification itself, nothing else.
Wasal
Student transport, only for nurseries that use buses. It receives the student name and guardian phone number to track the bus.
Anthropic (Claude)
Translating messages between Arabic and English and drafting the daily report summary — see the AI section below.
AI features
- Two features use AI today: translating a message written by you or the nursery, and drafting the short summary of the daily report.
- For translation, the text of that message is sent. For the daily summary, the day’s structured entries and the teacher’s notes are sent with the child’s first name only — no full names, no contact details, no photos.
- The provider is Anthropic (Claude). Your content is not used to train their models and is kept by them only for the limited period their service terms allow.
- The teacher can read and edit the daily summary before it is sent; otherwise it is sent at the time the nursery sets. In translation, the original message always stays visible.
- The nursery can turn AI off; the apps work without it.
How long we keep it
- A child’s care and attendance records are kept for two years after they leave the nursery by default; the nursery can set a different period.
- Financial records — invoices and payments — are kept for as long as the law requires.
- When you delete your account your name, phone and devices are removed; the nursery’s records stay — see the account deletion page.
Your rights
You can ask for a copy of your family’s data, for a correction, or for deletion; a parent can receive a full export including the records and the photos. The request goes to your nursery, which is responsible for the records — we help them behind the scenes.
If you are not sure how to ask, write to us from the support page and we will point you to the right person at your nursery.
Children’s data and photos
- A child’s photo is shared only with the guardians of the children in it, and only when the guardian has consented.
- Consent is given per child and can be withdrawn at any time — from that moment the child can no longer be tagged in new photos.
- Every read of medical data is written to the audit log the nursery’s owner can review.
- Children’s photos are never used in Bambini’s marketing without separate written consent.
How we protect it
- Each nursery’s data is isolated; one nursery can never read another’s.
- Everything is encrypted: in transit, at rest and in the backups.
- Sign-in is by a code sent to your phone; owners and admins add a second step from an authenticator app.
- Our team’s access to a nursery’s data happens only against a logged support ticket, and is recorded and visible to the owner.
Contact
A question about privacy? Write to us from the support page and we will answer.
Still stuck?