Tibit is built to be calm and respectful, and that extends to your data. This policy explains what we collect, why, and the choices you have. We collect as little as we can to run the service well, and we never sell your personal information.
Who we are
Tibit (“Tibit,” “we,” “us,” or “our”) operates the Tibit mobile application and the website at tibit.ca (together, the “Service”). Tibit is based in Canada. For privacy questions, contact us at privacy@tibit.ca.
This policy is written with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) in mind, and we honour the rights described below for users everywhere, including those covered by the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).
Information we collect
Information you give us
- Account details. When you create an account, we collect your email address and a securely hashed password.
- Your preferences. During onboarding and in settings you tell us the topics you’re drawn to, your preferred reading depth and breadth, your goals, and the time you’d like a daily reminder.
- Reflections you write. Any notes or journal entries you choose to save are stored to your account so you can return to them.
- Support messages. If you email us or send feedback, we keep that correspondence.
Information created as you use Tibit
- Learning activity. Which idea you received each day, whether you revealed it, the value and difficulty ratings you give, and your streak and library history.
- Usage analytics. Aggregate events about how the app is used, such as finishing onboarding or revealing an idea. These are recorded in our own database (Supabase) to help us improve Tibit. We do not use a third-party analytics service.
- Subscription status. Whether you have an active trial or subscription, and related entitlement information.
- Device and diagnostic data. Basic technical information such as app version, device type, operating system, and crash or error logs that help us keep the app working.
Information from others
- Purchases. When you subscribe, your payment is processed by the Apple App Store, so we never see your card number. We use RevenueCat to confirm and manage your subscription status on our behalf.
How we use your information
- To provide the Service, including delivering your daily idea, saving your library, and syncing across sessions.
- To personalize your experience. Your interests, chosen depth, and your value/difficulty ratings feed a recommendation model that adjusts the topics and depth you’re shown over time.
- To manage your account, subscription, and free trial.
- To send the daily reminder you opted into (see below).
- To understand usage in aggregate and improve the product.
- To keep the Service secure, prevent abuse, and meet legal obligations.
Notifications
Your daily reminder is a local notification scheduled on your own device at the time you choose. It is not sent from our servers and does not require us to track you. You can turn reminders off in the app or in your device’s notification settings at any time.
How we share information
We do not sell your personal information. We share it only in these limited cases:
- Service providers who process data on our instructions, under contract. These currently include our database, authentication, and analytics host (Supabase), subscription management (RevenueCat), and the app store and payment processor (Apple).
- Legal reasons, if required by law, regulation, or valid legal process, or to protect the rights, safety, and security of our users and the Service.
- Business transfers. If Tibit is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We’ll notify you of any change in control or use of your personal information.
Where your data is processed
Our service providers may store and process your information on servers located outside your province or country, including in the United States. Where information is transferred across borders, it remains subject to this policy and to appropriate contractual safeguards. While data is held in another jurisdiction, it may be accessible to courts, law enforcement, and authorities under that jurisdiction’s laws.
How long we keep it
We keep your personal information for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations or to resolve disputes.
Your rights and choices
You can, at any time:
- Access the personal information we hold about you and ask for a copy.
- Correct inaccurate information. Most of it is editable directly in the app’s settings.
- Delete your account and associated personal information.
- Withdraw consent or object to certain processing, and opt out of analytics.
- Export your data in a portable format.
To make a request, email privacy@tibit.ca. We’ll respond within the timeframe required by applicable law. If you’re in the EU/UK or California, you have the specific rights granted under the GDPR and CCPA/CPRA respectively, including the right not to receive discriminatory treatment for exercising them. You also have the right to complain to your local data protection authority or, in Canada, to the Office of the Privacy Commissioner.
Security
We protect your information with measures appropriate to its sensitivity, including encryption in transit, hashed passwords, and access controls that limit who can reach your data. No method of transmission or storage is perfectly secure, but we work to safeguard your information and to respond promptly if an incident occurs.
Children’s privacy
Tibit is intended for a general adult audience and is not directed to children under 13 (or the minimum age of digital consent in your region). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Quotes and third-party content
Tibit presents ideas alongside quotations attributed to their authors and sources. These are provided for educational and reflective purposes; attribution does not imply any endorsement of Tibit by those authors or their estates.
Changes to this policy
We may update this policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Service after a change means you accept the updated policy.
Contact us
Questions, requests, or concerns? Email privacy@tibit.ca and we’ll be glad to help.
Placeholders to confirm before launch: the operating legal entity name and mailing address, and the contact mailbox above (set it up on the tibit.ca domain). This policy reflects Tibit’s current data practices. Please have it reviewed by legal counsel for your jurisdiction before you rely on it.