BBMM Technologies
← All legal documents

Privacy Policy

Effective June 13, 2026 · Last updated June 13, 2026

This Privacy Policy describes how BBMM TECHNOLOGIES Inc. ("BBMM", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you visit bbmmtech.com (the "Site"), use our applications and products, including Flowo, TextPack, Pillow (collectively, the "Services"), or otherwise interact with us. We are committed to handling personal information responsibly and in accordance with the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA") and, where applicable, the EU and UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), and other applicable data-protection laws.

1. Who we are and how to contact us

BBMM TECHNOLOGIES Inc. is a company incorporated in the Province of Nova Scotia, Canada, and is the organization accountable for the personal information under its control. For the purposes of the GDPR, we act as the “controller” of personal information processed through the Site and, except where stated otherwise, through our Services.

You can reach our Privacy Officer with any question or request regarding this Policy or your personal information:

  • Email: hello@bbmmtech.com
  • Attention: Maksym Bardakh, Privacy Officer (President), BBMM TECHNOLOGIES Inc.
  • Mailing address: 1800 Argyle St, Unit 801, Halifax, Nova Scotia, B3J 3N8, Canada

2. The personal information we collect

Information you provide to us

We collect information you choose to give us — for example, when you contact us, sign up for early access or a newsletter, create an account in a product that offers one, or make a purchase. This may include your name, email address, the contents of your messages, and, where you transact, billing details processed by our payment providers.

Information collected automatically

When you use the Site or Services, we and our service providers may collect certain technical information automatically, including your IP address, device and browser type, operating system, language, referring pages, the pages and features you use, and the dates and times of access. This information is collected using cookies and similar technologies, as described in our Cookie Policy.

Information from third parties

We may receive limited information from service providers who help us operate our business, such as app distribution platforms (e.g., the Apple App Store), payment processors, and analytics providers. For example, when you purchase a product, our payment provider confirms the transaction without sharing your full payment card details with us.

Product data

Several of our products are designed to be local-first or to run offline, which means your content is stored on your device and does not reach our servers. Where a specific product processes personal information on our servers (for example, an optional cloud feature or account), the product's in-app disclosures describe what is collected and why.

We do not knowingly collect special categories of sensitive personal information (such as health, biometric, or precise geolocation data) unless a specific product feature requires it and you are clearly informed at the point of collection.

3. How we use personal information

We use personal information to:

  • Provide, operate, maintain, and improve the Site and Services;
  • Respond to your inquiries, requests, and support needs;
  • Process transactions and deliver licenses or purchases;
  • Send administrative and, where permitted, marketing communications;
  • Personalize and improve user experience and develop new features;
  • Monitor, secure, and protect the integrity of our Services and detect, prevent, and respond to fraud, abuse, and security incidents;
  • Comply with legal obligations and enforce our agreements.

Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) performance of a contract with you; (b) your consent (which you may withdraw at any time); (c) our legitimate interests in operating, securing, and improving our business, provided those interests are not overridden by your rights; and (d) compliance with a legal obligation.

4. Cookies and analytics

We use cookies and similar technologies to operate the Site, remember your preferences, and understand usage so we can improve. Where required by law, we request your consent before setting non-essential cookies. For full details and your choices, see our Cookie Policy.

5. Electronic communications (CASL)

If we send you commercial electronic messages, we do so in accordance with Canada's Anti-Spam Legislation (“CASL”). We will obtain consent where required, identify ourselves, and include a working unsubscribe mechanism in every commercial message. You can opt out of marketing emails at any time by using the unsubscribe link or by contacting us. Service and transactional messages (for example, purchase confirmations or security notices) are not promotional and may still be sent.

6. How we disclose personal information

We do not sell your personal information. We disclose personal information only in the following circumstances:

  • Service providers and processors: companies that perform services on our behalf — such as hosting, analytics, payment processing, app distribution, email delivery, and customer support — under contracts that require them to protect personal information and use it only for the services they provide to us;
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections;
  • Legal and safety: where required to comply with applicable law, legal process, or enforceable governmental request, or to protect the rights, property, or safety of BBMM, our users, or others;
  • With your direction or consent: where you ask us to share information or otherwise consent.

7. International transfers

We are based in Canada and use service providers that may store or process personal information in Canada, the United States, the European Economic Area, and other countries. These jurisdictions may have data-protection laws different from those in your country, and personal information may be accessible to courts, law enforcement, and authorities in those jurisdictions in accordance with their laws.

Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum, where applicable), or other lawful transfer mechanisms. You may contact us for more information about these safeguards.

8. Data retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with our legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. When personal information is no longer required, we securely delete or anonymize it.

9. How we protect personal information

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification, appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your privacy rights

Canada (PIPEDA)

Subject to limited exceptions, you have the right to access the personal information we hold about you and to request correction of inaccuracies. You may also withdraw consent, subject to legal or contractual restrictions and reasonable notice. To exercise these rights, contact our Privacy Officer.

EEA / UK (GDPR)

If you are in the EEA or the UK, you have the right to access, rectify, erase, restrict, or object to the processing of your personal information, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; the right to request deletion and correction; and the right to opt out of the “sale” or “sharing” of personal information and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights.

How to exercise your rights

Submit requests to hello@bbmmtech.com. We will verify your identity before responding and will reply within the timeframes required by applicable law. You may use an authorized agent where the law permits.

11. Children's privacy

The Site and Services are not directed to children under the age of 13 (or the higher minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

12. Automated decision-making

We do not use your personal information to make decisions that produce legal or similarly significant effects about you through solely automated means without human involvement.

13. Third-party links and services

The Site and Services may link to third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy practices.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

15. Contact us and complaints

If you have questions, requests, or complaints about this Policy or our handling of personal information, contact our Privacy Officer at hello@bbmmtech.com. We will investigate and respond to your concern.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or — if you are in the EEA or UK — your local data-protection supervisory authority.