Bibzy is operated by Gushi Holdings sh.p.k., based in Tirana, Albania (the "data controller"). If you have any question about this policy or your information, contact us at privacy@bibzyapp.com.
Bibzy keeps your personal information on your own phone. The large majority of what you record — your due date, weekly tracking, an optional weight note, diary entries, photos, saved questions for your appointments, and how you're feeling — is stored encrypted on your device. We do not upload, read, store, or sell it.
There are a small number of clearly-described exceptions where limited information is sent to our servers. They are listed in sections 4 and 5. Outside of those, your information does not leave your device.
The following is kept encrypted on your device and stays under your control. You can export it or delete it at any time from within the app:
Because this information is stored only on your device, we cannot access it, and it is removed when you delete it or uninstall the app. Some features process this information locally on your phone to work — for example, your keepsake film decrypts your photos in your phone's memory to play them, and reminders use local notifications. This processing happens entirely on your device; the information is not sent to us.
A limited set of information is handled on our backend so the app can function:
Our backend is provided by Supabase and is processed in the European Union. Information sent to our servers is protected by access controls and encrypted in transit.
Bibzy can turn your photos and diary entries into a keepsake film. By default, this film is created and played entirely on your device — your photos never leave your phone to make it.
Separately, you may choose to create a shareable video you can download and post. This is entirely optional and asks for your explicit consent each time. If, and only if, you opt in:
The video is produced using our own processing service hosted on Google Cloud, in the European Union (europe-west1). Your photos are never used to train any system and are never shared with advertisers.
Bibzy is a private space, and we treat it that way. To understand which features are helpful and to improve the app, we may collect basic, anonymous usage information — for example, which features are used and whether something is working as intended.
This never includes your diary entries, your photos, your health information, or the content of your feedback. We do not use analytics for advertising, and we do not sell your information to anyone.
Bibzy can send you gentle reminders — for example, letting you know a walk timer has finished. These are local notifications generated on your device. We don't use them for marketing, and they don't send your personal information to us.
When you search for a food, the words you type are sent to public nutrition databases (the U.S. Department of Agriculture's FoodData Central and Open Food Facts) so we can show you nutrition information. Only your search term is sent — not your account, your logs, or any health information.
We use a small number of trusted providers that process data on our behalf, under contract:
We do not sell your personal information to anyone.
Under the GDPR you have the right to:
We take the protection of your information seriously. Data on your device is stored encrypted, and information sent to our servers is encrypted in transit. No method of storage or transmission is completely secure, but we use appropriate technical and organisational measures to protect your information.
If a data breach occurs that is likely to affect your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will inform affected users where required by law.
Bibzy is intended for adults and is not for anyone under 18. We do not knowingly collect information from anyone under 18.
We may update this policy from time to time. If we make a material change, we will notify you within the app and update the date at the top of this policy.
For any question about this policy, or to exercise your rights, contact us at privacy@bibzyapp.com — Gushi Holdings sh.p.k., Tirana, Albania.