Privacy Policy

Welcome to Cibe, a mobile application developed and operated by Intevion, Inc. ("Cibe," "we," "our," or "us"). Cibe is an AI-powered personal communication coach designed to help you communicate better with the people that matter to you.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Cibe mobile application, our website at cibe.app, and related services (together, the "App"). By using the App, you agree to this Privacy Policy.

Intevion, Inc. is responsible for the personal information described in this Privacy Policy (the "controller" where that term applies under your local law).

• Company: Intevion, Inc.
• Address: 74 E Glenwood Ave Unit #5930, Smyrna, DE 19977, United States
• Email: dummy@cibe.app

We do not knowingly collect personal information from anyone under 18. Users must not submit photos or create profiles of persons under 18. If we learn that we have collected personal information from or about a minor in violation of this policy, we will delete that information as required by applicable law.

4.1 Information you provide

• Account information: when you sign in through Apple Sign In or Google Sign In, we process the authentication token provided by Apple or Google, your unique account identifier and, where technically required, certain account information provided by the authentication provider (such as your email address). We do not offer registration with a username and password.
• Invitations and waitlist: while the App is invitation-only, we process invitation codes and, where applicable, waitlist registration information and push notification preferences to manage onboarding and capacity.
• About Me: an optional self-description you may provide to personalize Cibe's communication tips. This personalization data is currently stored locally on your device and incorporated into prompts to generate more tailored outputs.
• Chats and prompts: questions you submit, your conversation history, and AI-generated responses. Conversations are stored on our servers so the App can work. Stored conversations contain neither photos nor real names — the names you assign to people in your Circle stay on your device, and requests and stored conversations use placeholders instead.
• Feedback: ratings, reports, support messages, and optional comments. If you request a reply, we store your email address solely for this purpose.
• User notes: notes or labels you voluntarily create inside the App.
• Photo permission confirmation: when you add a person to your Circle, you confirm that you have the necessary rights and permissions to use the submitted photos. We record this confirmation but do not store the photos themselves.

4.2 Information collected automatically

• Server log data: when you use the App or visit our website, our servers temporarily record technical data such as IP address, date and time of the request, content of the request (page or endpoint), access status/HTTP status code, amount of data transferred, referring page, browser type and version, operating system, language settings, host name, and device identifiers.
• Application logs: to ensure proper operation, stability, and security of the App and to enable troubleshooting, we temporarily store application logs on our servers. These logs may include the content of requests and responses exchanged with the App; where personal names are contained in such content, they are replaced by placeholders before storage.
• Device and app data: device type, operating system, app version, language, and basic technical identifiers.
• Diagnostics: crash reports, performance logs, and debugging information.
• Subscription status: active, canceled, expired, and product tier information provided by the app store.

4.3 Information we do not collect or store

• Saved or stored copies of the photos you submit — photos are processed only transiently to generate a description and are never stored (see Section 5).
• The names you assign to people in your Circle — names stay on your device, are not transmitted to or stored by us, and are never sent to our AI provider.
• Payment card numbers.
• Biometric identifiers or facial recognition templates used to uniquely identify a person.

When you add a person to your Circle, you submit a photo for analysis. To analyze it, the photo is transmitted only transiently through our servers to our AI provider, which returns a text-based description of facial features. That description is what powers the communication insights.

• Photos are never stored by us. They are processed only transiently to generate the description and are not retained after processing.
• The names you assign to people are never sent to the AI provider and are not stored on our servers — requests and stored conversations use placeholders.
• Photos are analyzed only to generate descriptive text. We do not perform facial recognition and do not attempt to identify any individual.
• We do not create or store biometric identifiers or facial recognition templates for the purpose of uniquely identifying any person, and we do not use photos to detect or infer emotions or protected characteristics.

Because privacy law can treat face-related data differently across jurisdictions, we describe our practices conservatively. If our processing practices materially change, we will update this policy before those changes take effect.

• To provide, operate, maintain, and secure the App, including authentication and account management.
• To administer invitations, waitlists, and onboarding while the App is invitation-only.
• To generate AI-powered communication insights, coaching tips, and chat responses.
• To personalize your experience based on your optional "About Me" description.
• To save conversation history and user-created content when you choose to retain it.
• To process subscriptions and enable premium features.
• To improve app quality, reliability, and safety, including troubleshooting and error analysis.
• To detect fraud, abuse, misuse, or violations of our Terms.
• To communicate with you about support, updates, and account matters.
• To comply with legal obligations and protect rights and safety.

Cibe offers an optional feature that allows your conversation history to be used to train, test, and improve the App's AI features over time.

• Where you have opted in, we use your conversation history to create a derived dataset for AI training. This dataset does not contain profile or account identifiers. Names are replaced with placeholders, and photos, email addresses, and gender information are not included.
• Your original conversation history remains unchanged and is deleted in accordance with the retention periods in Section 14.
• We take appropriate technical and organizational measures so that data used for AI training is processed in line with data minimization principles and, where reasonably possible, in pseudonymized or aggregated form.
• You may withdraw your opt-in at any time with effect for the future through the App settings. Withdrawal does not affect processing carried out before withdrawal, and it does not apply to information already incorporated into the AI in a form that can no longer be attributed to you.
• Please only include personal information about other people where you are authorized to do so and, where required, have obtained the necessary consent.

For EU/EEA users: the legal basis for this processing is your explicit consent under Article 6(1)(a) GDPR (see Section 18).

You may voluntarily provide feedback on AI-generated outputs, for example by submitting ratings or comments through the App. We process this feedback to evaluate, improve, and further develop the quality, accuracy, and performance of our AI services and the user experience.

Providing feedback is voluntary. Please do not include personal information about other people in your feedback unless you are authorized to do so and, where required, have obtained the necessary consent.

Cibe allows you to share a "Vibe Summary" – an AI-generated communication profile – via the native iOS/Android share sheet (e.g., WhatsApp, iMessage, or other platforms).

• Before your first share, you will be shown a confirmation reminding you that you are responsible for ensuring you have permission to share the profile.
• Cibe cannot see which profiles you share and takes no responsibility for shared content.
• Shared content is AI-generated for personal entertainment only, was created exclusively for you and your situation, and is not intended for a general audience.
• Shared profiles may include a photo if you choose to include one. You confirm that you have permission to share any photo you include.
• You must not share profiles of persons under 18, and you take full responsibility for shared content.

To operate the App, we engage third-party service providers that process information on our behalf. We have concluded data processing agreements with these providers and share only the minimum data reasonably necessary for the requested function. Our providers currently include:

• DigitalOcean, LLC (USA): cloud infrastructure and hosting — server infrastructure, IP addresses, technical logs, and application data as configured by us.
• OpenRouter (Helicone, Inc., USA): AI model routing platform — prompts, model requests, API metadata, and technical logs, depending on configuration.
• OpenAI, L.L.C. (USA): AI model provider — prompts, submitted content, API metadata, and technical logs.
• Anthropic, PBC (USA): AI model provider — prompts, submitted content, API metadata, and technical logs.
• Google (Ireland/USA): AI model provider (Gemini), Google Sign-In, and web font integration on our website — prompts and submitted content (Gemini), authentication data (Sign-In), IP address and device/browser information (Fonts).
• Apple Distribution International Ltd. (Ireland/USA): Sign in with Apple and push notifications (if used) — Apple ID identifier, device token, and technical metadata.
• App store operators (Apple App Store, Google Play): distribution, billing, and subscription management.

• Photos are shared with our AI provider solely and transiently to generate a text-based description and are never stored by us.
• The names you assign to people in your Circle are never shared with any AI provider — requests use placeholders instead.
• We do not share with these providers information that would tell them who is in your Circle.

You may subscribe to our newsletter to receive updates about Cibe and our offers. To subscribe, we require your email address. After registration, you will receive a confirmation email ("double opt-in"). Your email address is stored on our systems or those of our email service provider for this purpose.

You may unsubscribe at any time by using the unsubscribe link included in each newsletter or by contacting us. Upon unsubscribing, we will remove your email address from the recipient list, unless you have expressly consented to further use or we are legally entitled to continue using it as described in this Privacy Policy. If we obtained your email address in connection with a purchase and you have not objected, we may also send you occasional information about similar Cibe products or services; you may object to this at any time free of charge.

Premium purchases are processed by the relevant app store provider. We do not receive or store full payment card details.

• We receive status information necessary to manage premium access.
• Free plan: up to 2 new people additions and up to 5 new Cibe answers per day.
• Premium plan: up to 1,000 Cibe answers and up to 100 new people additions per month. Additional quota is available for purchase at the price displayed in the App.
• Subscription management, billing, and refunds are handled through your app store account, except where applicable law requires otherwise.

• Service providers: with vendors that process information on our behalf (see Section 10).
• Professional advisors: with our attorneys, accountants, and business advisors in their capacity as advisors to us, where necessary.
• Legal compliance: when required by law, regulation, subpoena, court order, or valid governmental request.
• Protection of rights: to investigate fraud, abuse, security incidents, or violations of our Terms.
• Business transfers: in connection with a merger, financing, acquisition, sale of assets, or similar transaction.

We store personal information only for as long as necessary for the respective processing purpose and limit the storage period to the minimum required, unless a longer retention period is required by law. The following retention periods apply:

• Account data: retained until your account is permanently deleted.
• Conversation history: deleted seven (7) days after permanent deletion of your account.
• Deleted Circle profiles: remain recoverable on your device for thirty (30) days before being permanently deleted, unless you permanently remove them earlier. Once permanently deleted, we delete all data associated with the profile on our side, such as its technical identifier.
• Photos: processed only transiently and never stored.
• Application logs: stored until the associated account is deleted and deleted no later than seven (7) days thereafter.
• Server logs: retained for thirty (30) days, unless a longer retention period is required for security or legal purposes.

We may request additional information to verify deletion or access requests before acting on them.

The App enables users to upload photos and other information relating to other people and to create profiles about them. We receive such information exclusively from our users. Depending on what the user provides, it may include photos (processed only transiently and never stored), conversation content, AI-generated textual descriptions, and notes.

The purposes of processing, recipients, international transfers, retention periods, and available rights described in this Privacy Policy apply equally to information about people appearing in user-submitted content. Because we generally have no direct relationship with these individuals and hold no contact details for them (names stay on the user's device), we make this information publicly available through this Privacy Policy instead of providing individual notices.

If you believe that a Cibe user has submitted information relating to you, you may contact us at dummy@cibe.app to exercise the rights described in Sections 16–18, to the extent we can identify the relevant data.

Depending on where you live, you may have rights to access, delete, correct, or obtain a portable copy of certain personal information, and to appeal certain privacy decisions where applicable.

• Access / know what information we hold about you.
• Delete information, subject to legal exceptions.
• Correct inaccurate information.
• Obtain a portable copy where applicable.
• Withdraw your AI training opt-in at any time.
• Appeal a denial where applicable law provides that right.
• Freedom from unlawful discrimination for exercising privacy rights.

To exercise rights, contact us at dummy@cibe.app. We may ask for additional information to verify your identity before responding.

If you are a resident of California or another US state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, or Oregon), you may have rights to know, access, delete, correct, and obtain a portable copy of your personal information, and to appeal a denial of a request where your state's law provides that right.

Categories we may collect

• Identifiers: email address and account-related identifiers.
• Internet or electronic activity: app usage, chat history, diagnostics, log data, and interaction data.
• Inferences: AI-generated insights derived from your inputs and from photo-based descriptions.
• Commercial information: subscription status and purchase history information supplied by the app store.

We do not sell personal information, do not share personal information for cross-context behavioral advertising, and do not use or disclose sensitive personal information for purposes requiring a right to limit, as those terms are defined under applicable state law. We do not knowingly sell or share the personal information of anyone under 18. You may submit requests via dummy@cibe.app, including through an authorized agent where your state's law permits; we will verify requests and will not discriminate against you for exercising your rights.

If you are located in the European Union or European Economic Area, this section applies to you in addition to the rest of this Privacy Policy. The controller within the meaning of Article 4(7) GDPR is Intevion, Inc. (see Section 2).

Legal Bases for Processing

• Contract performance (Art. 6(1)(b) GDPR): account creation and management, providing profiles, AI features, chat functionality, and subscriptions.
• Legitimate interests (Art. 6(1)(f) GDPR): security, fraud prevention, log data, feedback processing, onboarding management, and app improvement.
• Legal obligation (Art. 6(1)(c) GDPR): where processing is required by applicable law.
• Consent (Art. 6(1)(a) GDPR): for AI training (Section 7) and the newsletter (Section 11). Consent is optional and can be withdrawn at any time with effect for the future.

Your GDPR Rights

• Access your personal data (Art. 15 GDPR).
• Rectify inaccurate personal data (Art. 16 GDPR).
• Erase your personal data ("right to be forgotten") (Art. 17 GDPR).
• Restrict processing of your personal data (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Object to processing based on Art. 6(1)(e) or (f) GDPR at any time, for reasons arising from your particular situation (Art. 21 GDPR). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
• Withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3) GDPR).
• Lodge a complaint with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, access controls, and monitoring.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your information is processed in the United States and may be processed in other countries where we or our service providers operate. These locations may have data protection laws that differ from those in your jurisdiction.

Cibe does not use automated decision-making, including profiling, that produces legal effects or similarly significant effects concerning a user or any other person within the meaning of Article 22 GDPR. AI-generated content is intended for personal entertainment and reflection only and is not scientifically validated. Always use your own judgment when interacting with others.

We maintain presences on social media platforms (such as LinkedIn, Instagram, Facebook, YouTube, and TikTok) to provide information about Cibe. When you visit these presences, the respective platform providers process your data (such as IP address and cookie data) under their own responsibility and privacy policies; the data may be transferred to countries outside your jurisdiction, in particular to the USA. Data processing may differ depending on whether you are logged in to the platform.

We only process the data you make available to us through these platforms (for example, when you contact us there), in line with the general principles of this Privacy Policy. For requests about data processed by the platforms themselves, please contact the respective provider directly — only the providers have full access to your data on their platforms. If you still need help, you can contact us.

Some browsers and platforms may offer a "Do Not Track" setting. Because there is not a consistent industry standard for these signals, the App does not currently respond to Do Not Track signals.

Due to the further development of the App and our services, or due to changed legal or regulatory requirements, we may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and provide notice through the App or by other reasonable means where required.

If you have any questions about the processing of your data, you can contact us at any time: