Effective Date: May 10, 2026

1. Introduction

ChibyooFlow ("the App") is developed by Chibyoo ("we", "us", "our"). This Privacy Policy explains what data we collect, how we use it, and what rights you have as a user.

2. Data We Collect

2.1 Data You Enter Yourself

• Financial data: accounts, transactions, budgets, categories, tags, scheduled payments, goals
• Profile name and avatar (optional)
• Currency and exchange rate preferences

2.2 Data We Do NOT Collect

• We do not sell, share, or use your financial data for advertising purposes
• We do not use advertising identifiers (IDFA or similar)
• We do not have access to your financial data stored locally or in iCloud
• Limited anonymous diagnostic data may be collected if you opt in, as described in Section 8

3. Where Your Data Is Stored

All financial data is stored locally on your device and synchronized via iCloud (CloudKit Private Database) exclusively between your personal devices. Data in iCloud is encrypted and accessible only to you. We have no access to your iCloud data.

Exchange rates are fetched from the public API exchangerate.host. Only a rate request is sent — no personal data is transmitted.

4. Device Features We Access

Data from these features is never transmitted to third-party servers and is not used for tracking or advertising.

5. Broker API Data

When you connect broker accounts (T-Bank Investments, Binance, Bybit), API keys are stored in your device's secure Keychain. Connections to broker APIs are made directly from your device. We never see or store your API keys or trading data.

6. Security

• Your financial data is protected by iCloud encryption
• PIN code is stored in Keychain in hashed form, never in plain text
• Diagnostic data (if enabled) is transmitted to our server encrypted using AES-256-GCM

7. Children

The App is not intended for users under the age of 17 and does not knowingly collect data from children.

8. Diagnostic Reports

If you opt in (Settings → About → "Error Reports"), the App may collect anonymous diagnostic data using two systems:

Firebase Crashlytics (Google) collects:

• Device model and iOS version
• App version and build number
• Stack trace at the time of crash

ChibyooFlow Diagnostics (our own server at chibyoo.com) collects:

• Device model, iOS version, app version, country code, language, time zone
• An anonymous installation identifier — a random UUID stored in your device's Keychain, not linked to your name, Apple ID, or any personal identity
• Anonymous counters: number of accounts, transactions, budgets, etc. — no amounts, names, or notes are ever included
• Technical app logs sanitized of all financial data

Diagnostic data is transmitted encrypted (AES-256-GCM) and retained for no more than 90 days. It is never shared with third parties and never used for advertising.

You can disable all diagnostic collection at any time in Settings → About → "Error Reports". When disabled, no data is sent to either system.

9. Deleting Your Data

You can delete all your data at any time in Settings → Data → "Delete All Data". This permanently removes all financial records from the App and from iCloud.

To remove the App entirely, delete it from your device — all local data will be removed automatically.

To remove iCloud data: go to iOS Settings → [your name] → iCloud → Manage Storage → ChibyooFlow → Delete Data.

For any data deletion requests, contact us at support@chibyoo.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at chibyoo.com/chibyooflow-privacy. The effective date at the top of this page will reflect the most recent update.

11. Contact Us

For privacy-related questions: support@chibyoo.com