Privacy Policy

Version: 2026-04-15 · Placeholder — pending legal review
Contact: privacy@mykibo.co

This is placeholder copy that ships with the app until our external counsel reviews and finalises the production version. It is written plainly so you understand, today, exactly how we treat your data. The legally binding document will replace this page before public launch.

Who we are

Miraikibo (Colombia), operating the Kibo CFO application.
Contact: privacy@mykibo.co

What we collect

• Account: email, password hash (handled by Supabase Auth), display name.
• Financial: transactions, budgets, categories, payment methods, bank connections.
• AI inputs: receipt photos, voice dictation audio, chat prompts, uploaded files.
• Device: locale, user agent, IP address (for security logs and consent proof).

Legal basis

Performance of the contract (you asked us to run a finance tracker for you) and your explicit consent for AI processing, bank sync, marketing emails, and analytics.

Who we share with

We use third-party processors under data-processing agreements to deliver specific features. See the full list at /privacy/subprocessors.

Your rights

Under GDPR, LGPD, Colombia Ley 1581, CCPA, and equivalent regimes, you can: access a copy of your data, correct inaccuracies, delete your account, revoke consents, and lodge a complaint with your local data authority.

Exercise access and revocation in Settings → Privacy. For deletion, email privacy@mykibo.co.

Retention

We keep your data until you delete your account. Consent records are kept indefinitely after revocation as proof that you were asked and gave or withdrew permission.

International transfers

Our sub-processors operate from the US and EU. Transfers rely on the EU Standard Contractual Clauses and equivalent LGPD/Ley-1581 safeguards.

Changes

When we update this policy in a way that materially affects you, we will ask you to re-consent inside the app.

Last updated: 2026-04-15. This is placeholder text pending legal review. It reflects our actual practices but is not yet a legally binding contract.