Privacy
Privacy Policy — ChibyooFlow
Effective Date: May 10, 2026
1. Introduction
ChibyooFlow ("the App") is developed by Chibyoo ("we", "us", "our"). This Privacy Policy explains what data we collect, how we use it, and what rights you have as a user.
2. Data We Collect
2.1 Data You Enter Yourself
- Financial data: accounts, transactions, budgets, categories, tags, scheduled payments, goals
- Profile name and avatar (optional)
- Currency and exchange rate preferences
2.2 Data We Do NOT Collect
- We do not collect or share any personal data with third parties
- We do not use advertising identifiers
- We do not track your behavior in the App
- We do not have access to your financial data
3. Where Your Data Is Stored
All data is stored locally on your device and synchronized via iCloud (CloudKit Private Database) exclusively between your personal devices. Data in iCloud is encrypted and accessible only to you. We have no access to your iCloud data.
Exchange rates are fetched from the public API exchangerate.host. Only a rate request is sent — no personal data is transmitted.
4. Device Features We Access
| Feature | Purpose |
|---|---|
| Face ID / Touch ID | App unlock |
| Notifications | Reminders for scheduled payments |
| Camera / Photos | Attaching receipts to transactions (optional) |
| Location | Attaching location to transactions (optional) |
We do not transmit data from these features to any third-party servers.
5. Broker API Data
When you connect broker accounts (T-Bank Investments, Binance, Bybit), API keys are stored in your device's secure Keychain. Connections to broker APIs are made directly from your device. We never see or store your API keys or trading data.
6. Security
- Your data is protected by iCloud encryption
- PIN code is stored in Keychain in hashed form, never in plain text
7. Children
The App is not intended for users under the age of 17 and does not knowingly collect data from children.
8. Reports & Diagnostics
If you opt in, the App uses Sentry (sentry.io) to collect
anonymous crash reports and diagnostic data. This includes:
- Device model and iOS version
- App version
- Stack trace at the time of crash
- Sequence of actions leading to the crash
No financial data, account names, or transaction details
are ever included in crash reports. You can opt out at any
time in Settings → About.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at chibyoo.com/privacy. The effective date at the top of this page will reflect the most recent update.
10. Contact Us
For privacy-related questions: support@chibyoo.com