1. Overview
The short version: choobi is a personal reflection app. We do not sell your data. We collect only what's needed to run the service. We do not use your data for advertising. Your personal content — journal entries, memories, moods, goals, and conversations — is encrypted before being stored. You can delete your account and all associated data at any time.
2. Who we are
choobi is operated by Lintio Limited ("we," "us," or "our"). If you have questions about this policy, you can reach us at info@lintio.org.
4. How we use your information
We use your information only to:
- Provide, operate, and improve the choobi app and its features
- Generate AI responses to your chat messages (via OpenAI; see Section 6)
- Sync your data across devices (for registered users)
- Send you account-related emails (e.g. email verification, password reset)
- Send optional push notifications you have enabled (e.g. daily check-in reminders)
- Detect and respond to safety concerns (crisis keyword detection triggers in-app resource links and a minimal backend safety event without storing the message text)
- Analyse anonymised, aggregated usage to improve the product
We do not use your data for advertising, profiling for third-party purposes, or any automated decision-making with legal or significant effects.
5. How we share information
We do not sell your personal data. We share your information only in these limited circumstances:
- OpenAI: Your chat messages, and when you use AI-powered features (see Section 6), portions of your journal and mood data, are sent to OpenAI's API. OpenAI processes this under their API Data Usage Policy. OpenAI does not use API data to train their models by default, and retains API inputs and outputs for up to 30 days for safety monitoring before deletion.
- Supabase: We use Supabase for authentication and cloud storage. Your personal content is stored encrypted on Supabase's infrastructure (hosted on AWS). Supabase also stores an encrypted backup of your encryption key to enable cross-device recovery (see Section 7).
- RevenueCat: We use RevenueCat to manage subscriptions, entitlement status, purchase validation, and restore-purchase flows. RevenueCat receives purchase and app user identifiers needed to provide Choobi Plus access.
- Sentry: We use Sentry for crash reporting and error monitoring. Crash reports contain device information and stack traces. We configure Sentry to minimise inclusion of personal data in reports.
- Open-Meteo: If you grant location permission, your approximate coordinates are sent to Open-Meteo's free weather API to retrieve weather data. This API does not require or store personal data.
- Legal requirements: We may disclose information if required by law, court order, or to protect the safety of users or the public.
- Business transfer: If the choobi app is acquired or merges with another company, your data may be transferred. We will notify you and you will have the option to delete your account.
6. AI and your conversations
choobi uses OpenAI's language model API to power AI features. Before choobi sends your personal content to OpenAI, the app asks for your permission in-app. Here is exactly what is sent to OpenAI for each feature:
6.1 AI companion chat
- Your message, recent conversation context, and an optional memory summary (facts the companion has learned about you) are sent to OpenAI to generate a response.
- Conversation history is stored on our servers to maintain context across sessions. Messages are encrypted at rest using AES-256 before being stored in our database.
- Safety keywords in your messages (e.g. phrases suggesting a crisis) trigger in-app resource links and a minimal backend safety event. The safety event records non-content metadata only, not the message text, and no human review is triggered.
6.2 Reflection Analysis
- When you tap "Run Analysis," your device decrypts your recent journal entries (up to 15), recent conversation excerpts, and a mood summary, and sends this content to our servers, which forward it to OpenAI to generate your reflection insights.
- This content is not stored on our servers. It is processed in memory for the duration of the request and then discarded.
- OpenAI retains API inputs and outputs for up to 30 days for safety monitoring before deletion, and does not use them to train models by default.
6.3 Daily home screen message
- To personalise your daily message, your device sends your most recent journal entry titles and excerpts (up to 5) to our servers, which forward them to OpenAI. This content is not stored on our servers and is discarded after the response is generated.
Important: When you use Reflection Analysis or the daily message feature, portions of your journal and mood content leave your device and are processed by OpenAI. If you do not want any journal content sent to OpenAI, you can use the app without these features — your journal data will remain encrypted on your device and in our database. Do not include financial details, passwords, or other highly sensitive information in journal entries if you plan to use AI features.
We require our third-party service providers to protect personal data using safeguards appropriate to the nature of the data they process and to use it only to provide their services to choobi.
7. Data storage and security
- Encryption: Your personal content — including journal entries, memories, mood notes, goals, and conversations — is encrypted before being stored. Journal entries, memories, mood notes, and goals are encrypted on your device before leaving it. Conversation messages are encrypted at rest on our servers using AES-256. Our database does not hold readable text for any personal content.
- Encryption keys: Your encryption key is stored in your device's secure system storage (iOS Keychain or Android Keystore). To allow you to access your data when you switch devices or reinstall the app, an encrypted backup of your key is stored securely on our servers.
- Transit: All communication between your device and our servers is encrypted in transit using TLS (HTTPS).
- Authentication: API access uses short-lived JWT tokens that expire and refresh automatically.
- Retention and deletion: We retain your data for as long as your account is active. When you delete your account, all server-side personal data and your encryption key backup are permanently deleted immediately. Anonymised crash reports and usage metrics are retained separately and are not linked to your account.
8. Your rights and choices
You have the following rights over your data:
- Access: Export all your data at any time using the "Export My Data" feature in Settings or the Drawer Menu. Export files contain your saved app data in decrypted JSON form, so store and share them carefully.
- Correction: Edit your journal entries, memories, and goals directly in the app.
- Deletion: Delete individual entries at any time. Delete your entire account (and all associated data) from Settings → Account Actions → Delete Account. You can also email us at info@lintio.org to request deletion.
- Portability: Use the Export feature to download your data in JSON format.
- Notification control: Adjust or disable push notifications at any time from Settings → Notifications.
- Location: Revoke location permission from your device settings at any time.
If you are in the European Union or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
9. Children's privacy
choobi is not intended for use by children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected such information, please contact us at info@lintio.org and we will delete it promptly.
10. International users
choobi is operated from and data is stored in infrastructure based in the United States (via Supabase/AWS). If you access choobi from outside the United States, your data will be transferred to and processed in the United States. By using choobi, you consent to this transfer.
We comply with applicable data protection laws, including GDPR for EU/UK users and CCPA for California residents.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify registered users via email or an in-app notice. Continued use of choobi after a policy change constitutes your acceptance of the updated policy.