Demo version. Not a substitute for a doctor. Please don't enter personal details.

Privacy Policy

2026-11-01

This is a demo built for an entrepreneurship class. This document is a draft and has not been reviewed by a lawyer.

What we collect

Account: nickname, email, your password in hashed form, age group, who you use Baji for, language and plan.

Profile photo: optional, and only you can see it. You don't need to upload a photo of your face.

Period tracker: the dates you log. Consultants can't see them, and they aren't in the admin panel.

Chats: the messages you write to consultants. These may include health information.

Orders: recipient name, phone, address, courier note and the products ordered.

Why we use it

To run your account, connect you with a consultant, apply plan limits and process orders. We don't sell your data, use it for advertising or hand it over to train AI.

Who sees it

The consultant you choose sees the chat, your nickname, age group and who you use Baji for. They don't see your email, and in an anonymous chat they don't see your nickname either. Project team members with technical access to the server can also see the data.

In this demo, anyone can open the demo consultant accounts, so others can read what is written to them. Don't enter real details.

Cookies and browser storage

We use one session cookie to keep you logged in, which lasts 28 days. Your cart is kept in your browser's storage. There are no advertising or analytics cookies.

How long we keep it

Data is kept until you delete your account. The database will be deleted when this demo closes.

Children

Teenagers are our main readers, so we ask for little data and don't require a real name. Users under 14 may only create an account with a parent's or guardian's permission. A parent can ask for their child's account to be deleted.

Your rights

You can see your data, correct it and ask for it to be deleted. The button on the Account page permanently deletes your account, chats and orders.

Security

Connections use HTTPS, passwords are never stored in plain text and the session cookie can't be read by scripts on the site. No system is completely secure.

Contact

Official contact details will appear here before the service launches.