Privacy Policy

What we collect

• Account info: a username and a password (stored as a salted hash, so we never see or store your actual password), or, if you use "Continue with Google," your Google account's name and email address.
• Content you post: videos you upload, captions, and a bio you add during onboarding.
• Activity: which videos you like, so that state can be shown back to you in your Profile.
• Comments and direct messages: what you write is stored so it can be shown to the people it's meant for. Site administrators can view comments and messages for moderation purposes (for example, responding to a report of abuse).
• A session cookie: a random token that keeps you logged in. It's not used for tracking or advertising, and no other cookies are set by this app.
• Calls and Live: when you start or join one, we store who was on it, when, and technical connection details needed to set the call up (see Calling and Live below), never the audio or video itself. Live also briefly records that you're waiting to be matched, and who you were matched with, only for as long as it takes to connect the call.
• Push notification token: if you allow notifications, a token identifying your browser or device so we can send them. It identifies your device, not you personally, and is deleted if you turn notifications off.
• Advertiser payments: if you buy an ad through Advertise on KIBHI, payment is handled entirely by Stripe's own hosted checkout. KIBHI never receives or stores your card number; we only get confirmation that payment succeeded, plus the advertiser name and email you enter on the form.

How we use it

To run the app: show you the feed, deliver comments and messages, connect calls, and show your own activity back to you. To keep accounts secure and enforce the Terms of Service, including responding to reports. For sponsored posts, to show an advertiser how their post performed. We don't build advertising profiles from your activity, and we don't use your data for any purpose beyond what's listed here and in What we don't do below.

Calling and Live

Video and voice calls, including Live matches, connect your device directly to the other person's using WebRTC, the same technology behind most browser-based calling. KIBHI's servers help the two devices find each other but never see or store the call's audio or video. A side effect of how that direct connection works: when possible, each side's approximate network location (IP address) becomes visible to the other, the same as most peer-to-peer calling apps. Ordinary calls (between you and someone you already have a relationship with, such as a follow or a message thread) allow this. Live is different: since it connects you with a stranger, its calls are routed entirely through a relay server instead, so neither side ever sees the other's IP address, at a small cost to call quality on a weak connection.

Where it's stored

Account and post data lives in a Postgres database hosted by Neon. Uploaded videos are stored and served by Cloudinary. Cloudflare provides the relay server calls and Live use to connect two devices, and Google Firebase delivers push notifications on our native apps. All are third-party infrastructure providers, not separate companies we share your data with for their own purposes. They host data or route a connection on our behalf, the same way any app relies on hosting and networking providers. Our infrastructure runs in the United States, so your data is processed and stored there regardless of where you use KIBHI from.

How long we keep it

We keep your account and content for as long as your account is active. Deleting a post removes it from the feed and your profile immediately, with the underlying file cleared out on our regular deletion cycle shortly after. Deleting your account deletes your data within a reasonable time, except where we're required to keep something longer, such as to investigate an open report of abuse or to comply with the law.

Sponsored posts

KIBHI shows occasional sponsored videos in the feed, clearly labeled "Sponsored." Viewing or tapping one is recorded as a view or click count, tied to the ad, not to your personal account, so an advertiser can see how their post performed.

Children's privacy

KIBHI is not directed to children under 13, and you must be at least 13 to create an account (see the Terms of Service). We don't knowingly collect data from anyone under 13. If we learn an account belongs to a child under 13, we'll delete it. If you believe a child under 13 has a KIBHI account, email the address below.

What we don't do

We don't sell your data, use third-party analytics or ad-tracking scripts, or share your information with anyone beyond the hosting providers above.

Your choices and rights

You can delete individual posts at any time. You can ask for a copy of your data, a correction to it, or to have your account and all associated data deleted entirely, by emailing the address below. California residents specifically have the right to know what personal information we collect and to request its deletion; as noted above, we don't sell personal information, so there's nothing to opt out of on that front. We won't treat you any differently for exercising any of these rights.

Changes to this policy

We may update this policy as the app changes. If we make a material change, we'll update the date at the top of this page. Continuing to use KIBHI after a change means you accept the update.

Contact

Questions about this policy: tafadzwatauro09@gmail.com