Private context deserves precise language.

1. Who this policy covers

Giubilo is operated by ZeroEntropy Lab Private Limited (“Giubilo,” “we,” “us,” or “our”). This policy covers the Giubilo mobile application, its account-backed services, and Giubilo’s public support and policy pages. Giubilo is for adults.

Giubilo supports reflection, coaching, and spoken rehearsal for real-world relationships. It is not a dating marketplace, therapy, medical care, emergency support, or a substitute for professional advice.

2. Information we process

Account and authentication

If you choose account-backed continuity, we process your email address, authentication identifiers, session information, and security events needed to send a one-time code, verify the session, prevent abuse, and restore your encrypted account data. A real name is not required.

Connection, Practice, and preference content

We process the text and structured context you choose to provide, including connection pseudonyms, observations, interpretations, questions, preparation, transcripts, debriefs, scenarios, preferences, and memory choices. Signed-in cloud content is stored as encrypted account documents. You control what becomes durable context.

Voice and selected images

When you deliberately start voice entry, coaching, or rehearsal, microphone audio is transmitted for realtime speech and AI processing. Giubilo does not retain raw session audio by default. Transcripts, reviewed summaries, or debriefs may be saved when the product flow says they will be saved. If you deliberately select screenshots, the chosen images and extracted text are processed for that request; unrelated images are not accessed automatically, and raw screenshots are not added to account memory by default.

Device and service identifiers

Signed-out AI access uses a device-scoped anonymous authorization identity. Billing uses a separate random device billing principal and proof-of-possession secret. We process request identifiers, security hashes, coarse service timestamps, rate-limit events, and limited diagnostic information needed to operate and protect the service.

Purchases and usage

Apple and RevenueCat provide subscription, product, renewal, entitlement, and purchase-status information. Giubilo stores privacy-minimized entitlement and live-usage records, including one-way transaction digests used to prevent replay. We do not receive your full payment-card details from Apple.

Support

If you contact support, we process your email address and the information you include. Do not send passwords, one-time codes, full intimate transcripts, or information about another person that is not needed to resolve the issue.

3. Why we use information

• Provide account continuity, encrypted sync, recovery, coaching, rehearsal, saved context, and support.
• Process speech, generate responses, and create user-requested summaries or feedback.
• Verify purchases, restore access, meter live usage, and prevent duplicate or fraudulent grants.
• Secure the service, enforce rate limits, investigate failures, and protect users and infrastructure.
• Meet legal obligations and enforce the Terms of Use.

Giubilo does not sell personal information, run third-party advertising, or use intimate relationship content for cross-app tracking. Product analytics is not enabled in the current release configuration. If that changes, this policy and in-product disclosures must be updated before collection begins.

4. Account and device storage are different

Signed out

Connections and Practice are stored only in protected storage on that physical device. Removing the app, erasing the device, or losing access to it may make signed-out work unrecoverable. Anonymous service authorization does not enable cloud history.

Signed in

Account-backed Connections, Practice, and preferences are encrypted before durable server storage. Signing out hides that account workspace and returns the app to its separate signed-out device workspace. Signing back into the same account restores the account-backed workspace.

5. Service providers

We use providers only for defined service functions. Depending on the feature used, information may be processed by:

• Supabase for authentication and account data storage.
• Resend for authentication email delivery.
• Railway for Giubilo’s secure gateway hosting.
• OpenAI for AI, realtime voice, transcription, and response generation.
• Apple for App Store distribution, purchases, and subscription management.
• RevenueCat for purchase and entitlement synchronization.
• Cloudflare for delivery and security of public web pages.

These providers may process information in countries other than yours under their contracts and applicable transfer safeguards. Provider processing and retention can differ by service and configuration; Giubilo’s own deletion action cannot erase records another provider must retain independently for security, transaction, or legal reasons.

6. Retention and deletion

• Account content: retained while the account exists or until you delete the relevant content or account.
• Signed-out content: remains on the device until you delete it, remove the app, or erase the device.
• Raw audio: not retained by Giubilo by default after the realtime request. Provider safety or abuse-monitoring retention may still apply under the configured provider terms.
• Selected screenshots: not retained by Giubilo as durable account memory by default; reviewed extracted text may be saved when you approve it.
• Authentication email: delivery providers may retain delivery metadata for their configured operational window.
• Billing and security records: privacy-minimized transaction, entitlement, fraud-prevention, and audit records may be retained as needed for legal obligations, dispute handling, security, and financial integrity.
• Backups: deleted data may remain temporarily in restricted backups until those backups age out, unless retention is required by law.

We do not keep intimate content merely because it might be useful later. Service providers may retain limited operational, abuse-prevention, transaction, or backup records under their applicable terms and legal obligations.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information and to appeal a privacy decision. You may also withdraw optional consent without affecting earlier lawful processing.

• Review, correct, archive, or permanently delete individual Connections and memories in Giubilo.
• Sign out without deleting account-backed history or cancelling an App Store subscription.
• Delete the entire Giubilo account from Profile → Delete account, directly below Sign out.
• Manage or cancel Apple subscriptions in your Apple account settings.
• Contact support for access, export, correction, deletion, or a privacy question.

We may need to verify that a request concerns your account. We will not ask for your one-time code or password by email.

8. Security and limits

Giubilo uses transport encryption, encrypted account documents, protected device storage, tenant-scoped authorization, privacy-minimized identifiers, rate limits, and restricted server credentials. No system is perfectly secure. Please use a protected device, keep access codes private, and contact us if you suspect unauthorized access.

Do not submit unnecessary third-party personal data. Share only material you are authorized to process, especially workplace communications or screenshots.

9. Contact and changes

Email support@zeroentropylab.com with the subject “Giubilo privacy request.” We may update this policy when the product, providers, or law changes. Material changes will be dated and communicated as required.