Privacyverklaring & Gebruiksvoorwaarden

Who we are

Babon is operated by Babon Innovations B.V. (Amsterdamsestraatweg 199, Utrecht, KvK 97969486). Contact: support@babon.eu.

What Babon does

Babon extracts clinical movement measurements (joint angles, gait parameters, symmetry) from an uploaded video and makes the results available to you in the app.

We do not keep the video, in any configuration. It is deleted as soon as the analysis succeeds. If the analysis fails, the upload is kept so we can look at it by hand and retry it, and it is deleted thirty days after upload at the latest. What is kept is the measurements.

Babon runs in three configurations, and your account is set to one of them at creation. They differ in who uses them and who is responsible for the people filmed, not in what happens to the video:

• Educational: students and lecturers in movement-sciences programmes, learning movement analysis. The student reviews the analysis through the measurements and the 3D skeleton viewer. Lecturers (docent role) can additionally upload video from their own device; for such an upload the lecturer is the controller responsible for the lawful basis of the persons filmed, typically the informed consent of the participating students, and Babon Innovations B.V. is the processor. Recordings of patient care do not belong here; they belong in the clinical configuration.
• Research: academic researchers who want measurements for a cohort.
• Clinical: physiotherapy practices, as part of patient care. Open to Dutch physiotherapists and rehabilitation physicians, and activated only after manual review and approval by our team.

The educational and research configurations are used only under a processor agreement with the institution: nothing is processed for an institution until its own agreement is signed.

What Babon is not

Babon is a measurement instrument. It produces numbers and a quality tier; it does not diagnose, does not advise treatment, and is not a medical device. Every clinical judgement is yours, and the responsibility for it stays with you and with the practice or institution you work for. If a measurement looks wrong, treat it as wrong.

What we collect

• Account data: email, password hash (never plaintext), role, profile fields you supply at register (name, organisation, function, country, optional practice URL); and if you enable two-factor authentication an encrypted authenticator-app secret.
• Uploaded video and the derived measurements computed from it.
• Optional free-text labels you attach to a run (e.g. a patient name or treatment tag). Optional, your choice.
• Operational logs: request timestamps, IP addresses, user-agent strings, HTTP status codes.
• Support history: for each email address, the steps of signing up and setting up two-factor authentication, and each request our server refused, with the time, the kind of refusal, the IP address and the browser. We keep it so we can see what went wrong when you ask us for help. It never holds what you typed.
• Help requests: when you ask for help, the message you write, the email address you type and your last steps in the app (the pages you opened and the refusals you met), cleared of addresses and links.

What we don't collect

• No behavioural tracking, no advertising IDs, no third-party analytics SDKs.
• No location, microphone, contacts, calendar, or photo-library access.

Where the data lives

Application data is hosted on Scaleway in Paris, France (fr-par). Transactional email is delivered through Scaleway Transactional Email, also in Paris. Everything stays in the European Union. Data is encrypted in transit (TLS) and at rest: object storage server-side (AES-256) and the database volumes with encryption at rest enabled.

Video is only ever held in object storage. The measurements computed from it are written to separate databases, which contain no video. Object storage has versioning switched off, so there is no recycle bin and no earlier version of a file: a deleted object is gone at once and cannot be restored, by us or by anyone else, and there is deliberately no backup of it. The databases do have daily encrypted backups inside the same EU region; because they hold no video, no recording can come back through a backup.

How long we keep it

The same in every configuration, educational, research and clinical:

• Video, raw and processed: deleted as soon as the analysis succeeds. We do not retain video.
• An upload whose analysis failed: kept so we can look at the run by hand and retry it, and deleted automatically thirty days after upload at the latest. Deleting the run removes it immediately.
• Measurements in your account: kept while the run exists in the account (educational), or for the duration set in the research or processor contract (typically up to ten years for research; the clinical duration is set by the practice's own retention rules). Deleting a run removes its measurements, and deleting your account removes all of them.
• Measurements contributed to the research database: not removed by deleting a run, and not removed by deleting your account. Deleting your account destroys the key that links them to you, and from that moment they are anonymous and stay. See "Sharing and research use" below.
• Account data: kept while the account is active.
• Operational logs: platform logs are kept 7 days, database engine logs 30 days, and login and audit records 90 days.
• Help requests (your message, the address you type and your last steps in the app) and the support history kept for your address: 90 days.

Who can see it

Only you and people you explicitly share runs with can access your analyses through the application. Babon Innovations staff with production-infrastructure access can, in principle, read any data stored in the application; access is limited to a small technical team and is used for troubleshooting and incident response. All access is logged: ours through the hosting provider and our own working processes, and anyone else's only through an application account.

Do not enter real patient names or other identifying information in the optional free-text label fields. The field is encrypted at rest with a separate key (AES-GCM-256, managed in a secret store), but it remains a free-text field: use pseudonyms, not real names. A future EPD integration will replace the free-text workflow entirely, under a processor agreement signed per clinic.

Sharing and research use

We do not sell, and will not sell, your raw video or any identifying information. Uploaded video is only ever stored and processed on our own hosting infrastructure; it does not pass through the email provider or any other processor. The only third parties involved are the strictly necessary ones needed to run the service: Scaleway, for both hosting and transactional email (account verification, password reset, admin notifications), and Cloudflare, for the bot check on our public forms. Both sit under GDPR Article 28 processor agreements. Email messages contain a recipient address and a short link, nothing more; no video and no derived measurements leave Babon over email. The full processor list is available on request.

De-identified measurements (joint-angle time series and gait parameters) may be contributed to a research database which Babon intends to license to academic and industrial research partners. The video is deleted after analysis and never enters that database. On the research record the account email is blanked and any free-text label you entered is replaced by the task label, and the infrastructure holding the record is EU-only. For as long as your account exists we treat these measurements as de-identified rather than anonymous: a technical key still links the research record back to the original recording internally, and use of that link is restricted to the same small technical team that administers production. When your account is deleted that key is destroyed. From that moment nothing links the record to you, it is anonymous and outside the GDPR, and it stays in the database. The legal basis for the period in which it is still de-identified is our legitimate interest in improving and validating movement analysis (GDPR Art. 6(1)(f)).

Institutional deployments (education, research, clinical) may carve out their data from this use in their own processor agreement. You can object at any time by emailing us, and we switch it off for your account. Objection takes effect immediately for future recordings. Measurements already contributed can still be found and removed while your account exists, because that key is what lets us find them: email support@babon.eu and we handle the request under your rights below. Once your account is deleted the key is gone, so those measurements can no longer be traced to you or picked out one by one, by us or by anyone else, and they cannot be removed. If you want them removed, ask us before you delete your account.

Your rights (GDPR / AVG)

You can request a copy of your data (Art. 15), correction (Art. 16), deletion (Art. 17), an export (Art. 20), or restriction of / objection to processing (Art. 18, 21). Email support@babon.eu and we reply within 30 days. In-app you can already delete any run, change your password, download a JSON export of your account data (art. 20), and delete your account (art. 17, with what stays and what goes shown to you before you confirm; the research-database measurements described above are made anonymous rather than deleted). Anything else, your address, an objection to the research use, a copy of the access log we keep, goes through that address and we act on it. Disagree with our response? Lodge a complaint with the Dutch data-protection authority (autoriteitpersoonsgegevens.nl).

Data-breach handling

If we become aware of a personal-data breach that is likely to risk your rights, we notify affected users without undue delay and, where required, the Dutch data-protection authority within 72 hours (GDPR Art. 33 and 34).

Cookies and third-party resources

The web application uses strictly necessary authentication cookies only (an HttpOnly access token and refresh token), and during an outage a one-minute counter that stops the waiting page from reloading forever; it holds a number, no identifier. No tracking, advertising, or analytics cookies, so no consent banner is required under the ePrivacy Directive and Dutch Telecommunicatiewet art. 11.7a. Fonts are served from our own infrastructure; no font request goes to a third party.

The four public submission forms (register, password-reset, and the two partnership-intake forms) load Cloudflare Turnstile (challenges.cloudflare.com) to verify that the submission comes from a real visitor and not an automated bot. When the widget loads, Cloudflare receives your IP and user-agent and runs a short challenge in your browser; Cloudflare states publicly that Turnstile does not use cookies or fingerprinting and is GDPR-compliant. The challenge token is then sent with your form data so our backend can confirm the visitor passed. If you cannot run JavaScript or if the widget fails, you can still reach us by emailing joey.kardolus@babon.eu directly.

Mobile app permissions

The Babon mobile app requests only the camera permission, to record the video you upload. It does not request the microphone, location, photo library, contacts, or any other device content. A recording never reaches your photo library and is never handed to another app. It is held inside the app only while it uploads and is released as soon as the server confirms receipt; if the upload fails it is kept so you can retry, and closing the app discards it. On both iPhone and Android it stays in the app's working memory and is never written to storage at all.

Users under 18

Babon is a professional tool and is not intended for self-service use by people under 18. Where a minor is filmed in an educational or clinical context, the supervising professional or institution is the controller of the resulting data.

Changes to this policy

Updates are published at app.babon.eu/privacy. We notify active account holders by email of material changes. Minor wording changes may be made without separate notification.

Babon Innovations B.V. · Utrecht, Nederland · KvK 97969486. Vragen kunnen in het Nederlands worden gestuurd naar support@babon.eu.