Privacy Policy for Kibun

1. Introduction

Kibun ("we," "us," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

Please read this Privacy Policy carefully. By downloading or using Kibun, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 Mood Entries and Notes

• Mood selections from check-ins (up to 4 times daily)
• Optional text notes accompanying mood entries
• Timestamps of when moods were logged
• Automated sentiment analysis of notes (positive, neutral, negative)

2.2 User Profile Information

During onboarding, you may provide:

• Personal Information: Name, age range, gender (optional), timezone
• Work Information: Employment type, work environment (remote/in-office/hybrid)
• Physical Information: Exercise frequency, average sleep hours
• Social Information: Relationship status, social circle size
• Wellness Information: Self-reported stress level, wellness goals, general well-being context

2.3 Technical Information

• Push notification tokens
• Device type and operating system version
• App version and usage analytics
• User authentication identifiers (if you create an account)

2.4 Subscription Information

• Subscription status and type
• Trial or active subscription dates
• Purchase history (managed by RevenueCat)

3. How We Use Your Information

• Core Functionality: To provide mood tracking, analysis, and insight generation
• AI Analysis: To generate personalized weekly, monthly, and annual reports about your mood patterns. The AI sees only mood labels, check-in slots, dates, and your onboarding profile — never the raw text of your notes.
• Notifications: To send push notifications for mood check-in reminders and report delivery
• Service Improvement: To analyze trends, fix bugs, and improve app features
• Subscription Management: To manage your subscription status and provide premium features
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage and Security

• Backend Infrastructure: If you create an account, your mood entries and profile data are stored on Supabase servers (which provide encryption at rest at the disk level via the underlying cloud provider).
• Local Storage: When you use Kibun anonymously — or for offline access on a registered account — mood entries are cached on your device using your operating system's standard app storage. Authentication tokens are kept in the platform secure store (iOS Keychain / Android Keystore).
• Encryption in transit: All network traffic between the app and our servers is encrypted with TLS 1.2 or higher.
• Access Control: Only authorized personnel can access your data, strictly limited to providing and improving the service.

Note: While we implement comprehensive security measures, no system is 100% secure. We cannot guarantee absolute protection against all potential security breaches.

5. Data Retention

• Mood entries are retained indefinitely in your account for historical analysis and insights.
• Profile information is retained while your account is active.
• If you delete your account, all associated data is permanently deleted within 30 days.
• Push notification tokens are retained only as long as needed to deliver notifications.

6. Third-Party Services

Kibun integrates with the following third-party services:

• Supabase (supabase.com): Backend database and authentication. Supabase Privacy Policy
• RevenueCat (revenuecat.com): Subscription and in-app purchase management. RevenueCat Privacy Policy
• OpenAI: Used to generate Pro AI insights, journaling prompts, and weekly/monthly/annual reports. Mood labels, check-in slots, dates, and your onboarding profile context may be sent to OpenAI. Raw note text is never sent. OpenAI processes this data as a sub-processor under their Enterprise Privacy commitments and does not use it to train models. OpenAI Privacy Policy
• Expo (expo.dev): Platform for push notifications and app hosting. Expo Privacy Policy
• Vexo (vexo.co): Privacy-first product analytics. Collects anonymized usage data — screen views, session duration, anonymized tap coordinates for heatmaps, country, app version, and your Supabase user identifier — so we can understand how the app is used and improve it. Vexo never receives the content of your mood entries, notes, journal responses, name, email, or any onboarding profile data. Vexo is GDPR compliant and does not sell data. Vexo Privacy Policy

These services have their own privacy policies. We encourage you to review them to understand how they handle your information.

7. Your Rights and Choices

• Access: You can access, review, and export your mood data and profile information from within the app.
• Correction: You can update your profile information at any time through account settings.
• Deletion: You can delete individual mood entries or your entire account. Account deletion removes all associated data.
• Notification Preferences: You can customize push notification settings in your device settings and within the app.
• Data Portability: You can export your mood history in a standard format upon request.

To exercise these rights, contact us at the email address provided at the end of this policy.

8. Sensitive Personal Information

Kibun may collect information related to wellness and self-reflection. We treat this information with the highest level of confidentiality and security. This information is NOT used for purposes beyond providing the service or generating personalized insights. We will never:

• Sell or share your wellness information with third parties for marketing purposes
• Use your wellness data to discriminate against you
• Share your data with insurance companies or employers without your explicit consent

9. Medical Disclaimer

Kibun is not a medical app and does not provide medical advice, diagnosis, treatment, or prevention of any condition.

Kibun is designed for personal wellness, self-reflection, and mood tracking only. The mood insights, patterns, and reports generated by Kibun are for informational purposes and personal awareness only. They should not be interpreted as medical diagnoses or clinical recommendations.

If you are experiencing a mental health crisis, suicidal thoughts, or need urgent support, please contact local emergency services or a licensed mental health professional immediately. Kibun is not equipped to handle emergencies.

By using Kibun, you acknowledge that:

• Kibun is a wellness tool, not a medical device or clinical service
• You will not rely on Kibun as a substitute for professional medical or mental health care
• You are responsible for seeking appropriate professional care if needed

10. Children's Privacy

Kibun is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children under 13. If we discover that we have collected information from a child under 13, we will delete that information promptly. If you believe a child has provided us with information, please contact us immediately.

11. International Data Transfers

Your data may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws different from your home country. By using Kibun, you consent to your data being transferred internationally. We will transfer data only to countries that provide adequate safeguards for your information.

12. Legal Basis for Processing (GDPR Compliance)

If you are in the European Union or other jurisdictions with data protection regulations, we process your data based on:

• Contractual Necessity: To provide the service you've requested (mood tracking and analysis)
• Legitimate Interest: To improve and secure the app, and to provide customer support
• Consent: For processing sensitive personal data (health information)

You have the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

13. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law. Notifications will be sent to the email address associated with your account within a reasonable timeframe.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Your continued use of Kibun after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed.

15. Contact Us

If you have questions about this Privacy Policy, concerns about your data, or wish to exercise your rights, please contact us:

• Email: privacy@kibun.app
• App Support: Inside the app, navigate to Settings → Help & Support

We will respond to your inquiry within 30 days.

© 2026 Kibun. All rights reserved.