1. Overview
The short version: choobi is a personal reflection app. We do not sell your data. We collect only what's needed to run the service. We do not use your data for advertising. Guest mode stores everything on your device only. You can delete your account and all associated data at any time.
2. Who we are
choobi is operated by Lintio Limited ("we," "us," or "our"). If you have questions about this policy, you can reach us at info@lintio.org.
4. How we use your information
We use your information only to:
- Provide, operate, and improve the choobi app and its features
- Generate AI responses to your chat messages (via OpenAI; see Section 6)
- Sync your data across devices (for registered users)
- Send you account-related emails (e.g. email verification, password reset)
- Send optional push notifications you have enabled (e.g. daily check-in reminders)
- Detect and respond to safety concerns (crisis keyword detection triggers in-app resource links only)
- Analyse anonymised, aggregated usage to improve the product
We do not use your data for advertising, profiling for third-party purposes, or any automated decision-making with legal or significant effects.
5. How we share information
We do not sell your personal data. We share your information only in these limited circumstances:
- OpenAI: Your chat messages are sent to OpenAI's API to generate AI responses. OpenAI processes this data under their API Data Usage Policy. OpenAI does not use API data to train their models by default.
- Supabase: We use Supabase for authentication and database storage. Data is stored in encrypted form on Supabase's infrastructure (hosted on AWS).
- Open-Meteo: If you grant location permission, your approximate coordinates are sent to Open-Meteo's free weather API to retrieve weather data. This API does not require or store personal data.
- Legal requirements: We may disclose information if required by law, court order, or to protect the safety of users or the public.
- Business transfer: If the choobi app is acquired or merges with another company, your data may be transferred. We will notify you and you will have the option to delete your account.
6. AI and your conversations
choobi uses OpenAI's language model API to power the AI companion. When you send a chat message:
- Your message, recent conversation context, and an optional memory summary are sent to OpenAI's servers to generate a response.
- OpenAI processes this under their API terms. By default, OpenAI does not use API inputs/outputs to train models.
- We do not permanently store full conversation history on our servers beyond what's needed for the rolling context window. Conversations are also saved locally on your device via AsyncStorage.
- Safety keywords in your messages (e.g. phrases suggesting a crisis) trigger in-app resource links only; no human review is triggered.
Important: Do not share sensitive personal information (e.g. financial details, passwords, third-party confidential information) in chat messages. While data is encrypted in transit, AI conversations should not be treated as confidential legal or medical communications.
7. Data storage and security
- Data for registered users is stored on Supabase (AWS infrastructure) with encryption at rest and in transit (TLS).
- Passwords are never stored in plain text; Supabase uses bcrypt hashing.
- API communications are secured with JWT tokens that expire and are refreshed automatically.
- Guest data is stored only in your device's local AsyncStorage, which is sandboxed to the app.
- We retain your data for as long as your account is active. When you delete your account, all server-side data (journal entries, conversations, mood logs, goals, memories) is permanently deleted within 30 days.
8. Your rights and choices
You have the following rights over your data:
- Access: Export all your data at any time using the "Export My Data" feature in Settings or the Drawer Menu.
- Correction: Edit your journal entries, memories, and goals directly in the app.
- Deletion: Delete individual entries at any time. Delete your entire account (and all associated data) from Settings → Account Actions → Delete Account. You can also email us at info@lintio.org to request deletion.
- Portability: Use the Export feature to download your data in JSON format.
- Notification control: Adjust or disable push notifications at any time from Settings → Notifications.
- Location: Revoke location permission from your device settings at any time.
If you are in the European Union or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
9. Children's privacy
choobi is not intended for use by children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected such information, please contact us at info@lintio.org and we will delete it promptly.
10. International users
choobi is operated from and data is stored in infrastructure based in the United States (via Supabase/AWS). If you access choobi from outside the United States, your data will be transferred to and processed in the United States. By using choobi, you consent to this transfer.
We comply with applicable data protection laws, including GDPR for EU/UK users and CCPA for California residents.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify registered users via email or an in-app notice. Continued use of choobi after a policy change constitutes your acceptance of the updated policy.