Bibalove

Privacy Policy

Effective date: 29 October 2026

Bibalove is a private space for two partners to share compliments, letters, date ideas and the dates that matter to them. This policy explains what information Bibalove collects, why, who it is shared with, how long it is kept, and the choices you have.

It applies to the Bibalove apps for iOS and Android (com.bibazavr.bibalove) and the web version at bibalove.expo.app.

1. Who we are

Bibalove is developed and operated by IP LEBEDEV, an individual entrepreneur registered in the Republic of Kazakhstan, trading as Bibazavr ("we", "us"). IP LEBEDEV is the controller (operator) of the personal data described in this policy.

IP LEBEDEV
34 Ulitsa Abdullinykh, kv. 30
Almaty, 050000, Kazakhstan
hello@bibazavr.fyi

2. Information we collect

Account information

To create an account you provide, or authorise us to receive:

• your email address and a password, if you sign up with email; or
• your name and email address, if you use Sign in with Google or Sign in with Apple. If you choose Apple's "Hide My Email", we only see the relay address Apple gives us.

Sign-in is handled by Firebase Authentication (Google). We never receive your Google or Apple password, and email passwords are stored by Firebase in hashed form only.

Relationship content

Once you pair with a partner using an invite code, the app stores what the two of you create together, scoped to your couple:

• your display names and the date you got together;
• compliments you send and receive;
• letters you write, including sealed letters and the dates they open;
• dates and reminders you add, and the date ideas and compliments you save;
• suggestions you submit for the shared date-idea and compliment catalogues (we review them before they appear to anyone);
• which optional features (compliments, reminders, dates, letters, streak) your couple has switched on.

This content can be read only by the two members of your couple.

Device information

For each device you sign in on, we store a small record (a random device ID created by the app, a label such as "iPhone / iPad", platform, OS and app version, and when it was first linked and last active). It powers the Us → Linked devices screen so you can see and sign out your devices. It is not an advertising identifier and is not used to track you.

Usage analytics

Unless you turn analytics off, the app sends usage events to Google Analytics for Firebase:

• screens you open, and actions such as signing up or in (and with which method), creating or joining a couple, sending a compliment or letter, adding a date, submitting a suggestion, changing theme or language, and deleting your account. Events carry small details such as a compliment's tone or whether a letter was sealed, but never the text of your compliments or letters, your names or your email;
• your account's random user ID, so events from one account can be counted together;
• data the Google Analytics SDK collects automatically: an app-instance identifier, device model, OS and app version, language, app opens and session length, and approximate location (country or region) derived from your IP address.

The app does not collect the advertising identifier on either platform (IDFA on iOS, advertising ID on Android) and does not track you across other companies' apps or websites. On the web version, Google Analytics may use cookies or browser storage for the same purpose while analytics is on.

Notifications

Reminders (for example, "a letter just opened") are scheduled locally through your device's operating system. We don't collect a push-notification token and don't send notifications from a server.

Emails you send us

If you contact us, we receive your email address and whatever you include in your message.

What we don't collect

Bibalove does not request access to your location, contacts, camera, photo library or microphone, and does not include any advertising SDK.

3. How and why we use it

We don't sell your information, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.

4. Third parties

Your partner. Anything you create in your shared couple space is, by design, visible to the partner you're paired with.

Service providers process data on our behalf, only to run the app:

Google's handling of this data is described at policies.google.com/privacy and firebase.google.com/support/privacy; Apple's at apple.com/legal/privacy; Expo's at expo.dev/privacy.

We don't use any other analytics, advertising or crash-reporting service. We may disclose information if the law requires it, or where necessary to protect the rights, safety or property of our users or others.

5. How long we keep it

• Account information — until you delete your account.
• Relationship content — while your couple exists. If you delete your account and your partner keeps theirs, the shared content stays available to your partner. It is deleted when the last member of the couple deletes their account.
• Device records — until you unlink the device or delete your account.
• Suggestions — until you delete your account. If we accept a suggestion, a copy is added to the shared catalogue without your name or account attached.
• Usage analytics — kept by Google Analytics for no longer than 14 months, then deleted automatically.
• Emails to us — as long as needed to deal with your request and meet legal obligations.

6. Deleting your account

You can delete your account at any time in Us → Account → Delete account, in any version of the app. If you can't access the app, email hello@bibazavr.fyi. The account deletion page explains exactly what is deleted and how long it takes.

7. Your rights

Depending on where you live (including under the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" and, for people in the EU, UK or EEA, the GDPR), you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate data;
• delete your data;
• restrict or object to certain processing, including analytics;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent;
• complain to your local data protection authority.

Many of these you can do directly in the app: edit your profile, unlink devices, switch off analytics or delete your account. For anything else, email hello@bibazavr.fyi. We'll reply within 30 days and may ask you to confirm you own the account first.

8. Security

Data is encrypted in transit (HTTPS/TLS) and stored on Google Firebase's access-controlled infrastructure. Database security rules limit reading and writing to your own couple's data, so no couple can read another couple's compliments, letters or dates. No system is perfectly secure, but we use industry-standard practices to protect your information.

9. International transfers

We operate from Kazakhstan, and our service providers run infrastructure in several countries, including the United States. Your information may therefore be processed outside your country. Where the law requires it, we rely on our providers' safeguards for these transfers, such as Standard Contractual Clauses.

10. Children

Bibalove is made for couples and is not directed at children. We don't knowingly collect information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We'll change the effective date at the top, and for significant changes we'll also let you know in the app.

12. Contact

Questions about this policy or your data? Email hello@bibazavr.fyi or write to IP LEBEDEV, 34 Ulitsa Abdullinykh, kv. 30, Almaty, 050000, Kazakhstan.