Privacy Notice

Controller and contact

Nibbii is the controller for the personal data described here. Contact hello@nibbii.pet.

Data the app can use

Depending on your choices, Nibbii can handle pet state, memories, selected chats, profile and activity context, and App-aware context. When App-aware is on, Now Playing automatically collects the current track title, artist, and album from the active player. Artwork stays local. If AI is enabled, bounded title, artist, and album text may be sent to the selected AI service for comments. Turning App-aware off stops collection and clears Now Playing data from the app. Private iCloud memory sync is optional and off by default. When enabled, distilled long-term memories sync through your private iCloud database. Recent raw chats and the rolling moment log stay on this Mac. Optional location/weather uses Open-Meteo. Crash reports can include technical diagnostics and an install identifier. Account, device, licence, and purchase records support the service.

Why we use it

We process account, device, licence and service data to perform our contract; security, limited service operations and necessary payment proofs for legitimate interests in correct fulfilment and preventing duplicate or reversed benefits; consent for optional cloud features and crash reporting; and legal obligations for records where applicable. We assess the necessity, privacy impact and alternatives for payment-proof retention; a refund or dispute is not treated as an allegation of fraud.

Recipients and transfers

Service providers may include Stripe (billing), Cloudflare (hosting and API protection), Resend (support mail), Apple (sign-in and optional private iCloud sync), Venice (optional cloud AI), Open-Meteo (optional weather), and providers involved in downloads and updates. Some providers may process data outside the UK. The appropriate transfer mechanism and safeguards must be confirmed provider-by-provider before relying on them; request current details from support.

Retention and deletion

We retain data only for as long as needed for the stated purpose, security, support, and legal/accounting obligations. Local data remains on your Mac until you remove it or use app controls. Deleting an in-app account or its data does not cancel a Stripe subscription or refund a payment. Cancel billing separately first.

We keep minimal payment proofs after account deletion: purchase, charge, refund, dispute and delivery-event identifiers, together with the limited amount, paid-period, processing and reversal state needed to fulfil a purchase once. These proofs contain no account, customer, email, device, licence-key, pet, chat or memory fields. The identifiers remain potentially re-identifiable through providers or other information; they are not anonymous. They are not used for advertising or profiling.

We retain these proofs only while a purchase can affect access, value, restoration, reversal handling or prevention of duplicate benefits. Lifetime Pro and non-expiring Sparks, including top-ups and Lifetime bonuses, can make this retention potentially indefinite. An expired subscription allowance does not by itself make its payment proof unnecessary. We reassess necessity at least every 12 months through manual review, and earlier when circumstances change or you make a rights request; this is not an automatic deletion deadline. Proofs must be deleted when no longer necessary, unless a separately justified legal obligation or live legal claim requires retention. Before operational deletion, we must verify a way to prevent re-creation without allowing an old purchase to grant access or credit again; this is not a blanket reason to refuse a valid erasure request.

Contact hello@nibbii.pet to request access, correction or erasure of payment proofs, or to object to their use. We assess requests case-by-case and explain any specific grounds for continued retention and your complaint rights. Technical inconvenience or a generic fraud-prevention claim is not an automatic reason to refuse. Account deletion does not amount to consent to additional retention; the minimal proof exception does not preserve your account or guarantee restoration of a deleted account.

We also retain minimal notification identifiers, times and processing markers for signed sign-in and credential-change notifications, including after account deletion, to prevent repeated security actions. These are separate security replay records, not payment proof, and the identifiers can remain linkable. Lifetime retention does not justify keeping them. We review their shortest necessary replay-protection period separately, at least every 12 months and when circumstances change or you make a rights request. The current system has no automatic expiry for these records; we must delete them once no longer necessary using a verified safe process. The same case-by-case rights and contact route apply.

Your rights

You can request access, correction, erasure, restriction, objection, portability, or withdrawal of consent by contacting us. You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Children

Nibbii is strictly for people aged 13+. The app offers an optional birthday month and day for pet personalisation and birthday greetings. The field does not ask for a birth year and is not an age-verification check. If supplied, it is saved as a pet memory and may be included in context sent to your selected AI service when AI is enabled.

Changes

We may update these documents for product, legal, or operational changes. Material changes take effect on the stated effective date and will be posted here. See our Terms, Privacy, and Refund Policy.