Updated: 2026-10-02 · 2026-10-02.2
1. Developer and Data Controller
FANG GUOHAO, individual developer. Privacy: privacy@baiboki.com. Support: support@baiboki.com. Website: https://baiboki.com.
This policy applies to Baibo Translate and related services. Offline features require no account. Purchased credits and hosted AI require sign-in. Accounts and app-specific credit ledgers sync through the server; translation history and personal information cards do not automatically sync.
2. Data kept on your device
- Preferences such as language, brightness, and tool order;
- Content and history you create in translation, temporary lists, travel notes and photos, Today Hide, and learning conversations;
- Your communication profile, universal information cards, and correction glossary. Free users may use them too. The app reads relevant entries only when you start a translation or AI task. You can edit or delete them;
- Reminder times, advance-reminder settings, and local-notification identifiers. The current app uses local notifications and badges and does not obtain a remote push token;
- AI provider name, endpoint, model, and key that you configure. Android keys are AES-GCM encrypted with Android Keystore support in no-backup app-private storage; iOS keys use device-only Keychain without cloud synchronization. Keys are deleted with their provider.
3. Camera, microphone, and sensors
- Camera: used only after you start photo translation, menu scanning, image chat in Today Hide, or the flashlight. On-device OCR recognizes a crop or the full image when no crop is selected. A crop or full image is sent only when you choose AI vision;
- Microphone: used only for Quick Conversation speech, Scene speech, Noise Light, or Lab Sound Shaping. Sound Shaping creates a spectrum pattern on-device and does not save raw audio. Your system speech service may process speech online under its own policy;
- Motion, orientation, ambient-light, and touch sensors support local tools and Lab interactions. The developer does not collect those readings.
4. Network features and third parties
- OFFLINE: translation text is processed on-device; Google ML Kit downloads only the language pair you request. Offline translation sends neither your communication profile, glossary, nor translation text;
- A BYOK Provider is actively selected by you and connected directly from the device over HTTPS. Entered text, selected context, AI images, travel queries, or summary instructions are sent to that Provider without passing through Baibo Translate servers;
- When you enable a communication profile, the app reads only entries relevant to the current task on-device and does not automatically attach or transmit the entire profile. The send disclosure identifies the applicable data range;
- Baibo Translate does not store your third-party API key, but remains responsible for the app-side transmission flow, prominent notice, safeguards, and user authorization. The Provider processes received data under its own policy;
- Before the first send to each Provider, the app identifies its name, Host, purpose, data types, privacy policy, and possible overseas processing. A changed Base URL requires new consent;
- You may withdraw sending consent for each Provider. Withdrawal deletes its consent fingerprint and blocks sending until you consent again, but does not delete the local API key;
- Baibo Translate_HOSTED: after AI credits, Pro trial credits, or a future subscription launches, prompts, selected context, or images you submit may pass through api.baiboki.com to a Baibo Translate-selected AI provider. Your personal provider key is never sent to Baibo Translate. Disabled paid entries do not charge you.
5. Retention and security
Local content remains until you delete it, clear app data, or uninstall. Temporary camera files are managed by the app or system cache. The production app disables cleartext HTTP and app-data backup. BYOK requests do not follow redirects, preventing credentials from being forwarded to another host. App-private storage, Android Keystore (Android), device-only Keychain (iOS), and HTTPS reduce risk, but no system is perfectly secure.
The current Hosted AI server design does not write prompts, images, or model output into the usage ledger. It records request ID, capability, route, model, usage, cost, status, and error code. A downstream AI Provider may still process or retain requests under its policy; actual Providers, regions, and retention will be listed before production launch. Purchase and credit records are retained as needed for restoration, duplicate-grant prevention, fraud, refund/revocation, disputes, and law. An expired trial claim remains recorded to prevent another claim.
6. Your controls and account
- Delete local history, withdraw connected-feature or provider consent, or revoke camera and microphone permission in device settings.
- The account is shared with Baiboki. Servers process email, password hashes, sign-in sessions, purchase verification data, and app-specific balances, usage and transfer records. Passwords are not stored in plaintext.
- Delete the account in the app or website. This disables sign-in and credit access in both apps. Financial records are retained as necessary.
7. Children
Baibo Translate is not directed to children. Young users should use it with a guardian and should not submit names, addresses, school, health, or financial information to an AI provider.
8. Changes and contact
We update this policy when features, SDKs, or data practices change and will highlight material changes. Privacy requests may be sent to privacy@baiboki.com and support requests to support@baiboki.com.
Benefits and AI allowance rules
Baibo Pro: one-time US$19.99. 1000 credits: US$1.69. No subscription; purchased credits do not require Pro. Google Play sales are not open yet.
The first Pro purchase grants 500 credits valid for 90 days. Purchased credits have no expiry. Valid gifts are used first; your own API spends no Baibo credits. Baibo Translate and Baiboki share sign-in but keep separate balances. The website allows one purchased-credit transfer per Hong Kong calendar month, both directions combined, with no fee. Gifts cannot be transferred.

