Short version: Your journal entries, mood notes, streaks, and saved affirmations are stored on your device: we never see them. We use a small set of third-party services (RevenueCat for purchases, Sentry for crash reports, PostHog for anonymous product analytics). No ads, no data sales, no account required.
1. Who We Are
Kibomi is a mobile application developed and operated by Bidispot (contact: support@ludimini.com). This policy explains what information we collect, how it is used, and the rights you have over it.
2. What Data We Collect
We collect as little data as possible. Here is the full breakdown:
| Data Type | What It Is | Where It Goes | Why |
|---|---|---|---|
| Purchase records | Subscription receipts and one-time purchases | RevenueCat (third party) | To verify your Kibomi Pro subscription status |
| Anonymous device ID | A randomly generated identifier with no link to your real identity | RevenueCat, PostHog | To associate purchases and product events with a device without an account |
| Crash & performance data | Stack traces, device model, OS version, app version at the moment of an error | Sentry (third party) | To identify and fix bugs and performance issues |
| Anonymous product events | Which screens are viewed, the mood category you log (e.g. "calm", "happy"), whether you completed onboarding or continued a streak: never the text of your journal entries, affirmations, or notes | PostHog, EU cloud (third party) | To understand which features are useful and improve the app |
3. What We Do NOT Collect
- Your name, email address, or any directly identifying information
- The text of your journal entries, custom mood notes, or saved affirmations: these stay on your device only
- Your location, contacts, camera, microphone, or photo library
- Your health or fitness data via Apple Health, Google Fit, or any health platform
- Browsing history or behaviour outside the app
- Any data for advertising, ad targeting, or third-party profiling
4. How Your Data Is Stored On Your Device
Sensitive personal data, including your mood history, journal entries and streak dates,
and your relationship history with each companion, is encrypted at rest using the iOS
Keychain, via expo-secure-store.
Non-sensitive preferences, including the companion you have selected, the skin you have equipped, the app icon you have chosen, and which badges you have earned, are stored in standard local storage on your device.
None of this on-device data is transmitted to us or any third party. Kibomi has no user-facing in-app reset. Deleting the app removes its app-container data, but iOS may keep encrypted Keychain items as a protected recovery record. Reinstalling on the same device can therefore restore your mornings and journal. We cannot access or recover any of this local data.
5. Third-Party Services
RevenueCat
We use RevenueCat to process and validate in-app purchases and subscriptions. RevenueCat receives an anonymous device identifier and your purchase records. No personal information (name, email, etc.) is transmitted. RevenueCat's privacy policy is available at revenuecat.com/privacy.
Sentry
We use Sentry for crash reporting and performance monitoring. Sentry receives anonymised technical data (device model, OS version, app version, stack traces). No journal text, affirmation content, or personal identifiers are included in crash reports. In production builds we sample performance traces at 20%. Sentry's privacy policy is available at sentry.io/privacy.
PostHog (EU cloud)
In production builds, we use PostHog hosted on its EU cloud (eu.posthog.com)
to capture anonymous product-usage events such as screen views, the mood category you log,
whether you started or completed onboarding, and streak progression. PostHog never
receives the text of your journal entries, affirmations, mood notes, or any free-form
content you write. Events are tied to an anonymous device identifier, not to a name or
email. PostHog's privacy policy is available at
posthog.com/privacy.
After a successful purchase, the anonymous identifier RevenueCat assigns to your device may also be set as your PostHog distinct ID so that purchase events and product events can be correlated. This identifier is not your name, email, or any directly identifying value.
6. In-App Purchases
Kibomi offers optional paid subscriptions (Kibomi Pro) and a one-time lifetime purchase. All payments are processed by Apple through the App Store. We do not receive or store your payment card information. Apple's payment privacy policy applies to all transactions.
7. Children's Privacy
Kibomi is rated 4+ and is designed to be suitable for all ages. We do not knowingly collect personal information from children under the age of 13 (or under 16 for users in the European Union). Kibomi requires no account creation and stores no journal or mood content on our servers. As with any app, we recommend parental supervision for younger children.
8. Your Rights (GDPR, EU Users)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access: You can request a copy of any data associated with your anonymous device identifier.
- Right to erasure: You can request deletion of any data associated with your anonymous device identifier.
- Right to object: You can object to the processing of your data for crash analytics or product analytics.
- Right to data portability: You can export your whole journal with Save a copy, which sends a JSON file to your phone's share sheet.
To exercise any of these rights, please contact us at support@ludimini.com. We will respond within 30 days.
The legal basis for processing the limited data we do collect is our legitimate interest in maintaining a stable, functional, and improving app (crash reporting and product analytics) and contract performance (subscription management).
9. Data Retention
Crash report data is retained by Sentry for up to 90 days. Anonymous product analytics events are retained by PostHog according to its standard retention policy. Purchase records are retained by RevenueCat for as long as necessary to manage your subscription, then deleted in accordance with their retention policy. On-device data is retained by your device until the app or operating system removes it. On iOS, protected recovery data in Keychain may remain after deletion and return when Kibomi is reinstalled.
10. Security
We take security seriously. Sensitive on-device data is encrypted at rest using the iOS Keychain. All network communication uses HTTPS/TLS. We do not log personal data to the console in production builds.
11. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will display an in-app notice. Continued use of the app after changes take effect constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions about this privacy policy or how your data is handled, please contact:
Bidispot
Email: support@ludimini.com