Legal

PRIVACY
POLICY

Effective Date: January 1, 2025
Last Updated: January 1, 2025
Entity: KIBU Global Ventures LLC

Contents

  1. Who We Are
  2. What Data We Collect
  3. How We Use Your Data
  4. Third-Party Services
  5. Cookies & Tracking
  6. Data Retention
  7. Your Rights (GDPR & CCPA)
  8. Children's Privacy
  9. International Transfers
  10. Security
  11. Changes to This Policy
  12. Contact Us

Plain English summary: We collect only what we need to run our apps. We do not sell your personal data. Ever. You can request deletion of your data at any time by emailing support@kibuglobal.com.

01 Who We Are

KIBU Global Ventures LLC ("KIBU," "we," "us," or "our") is a veteran-owned limited liability company registered in the State of Oklahoma, USA. We operate the following products and services:

This Privacy Policy applies to all of the above. By using any KIBU product, you agree to the collection and use of information described in this policy.

Data Controller

For users in the European Union and European Economic Area, KIBU Global Ventures LLC is the data controller responsible for your personal data. Our representative contact for GDPR purposes is: support@kibuglobal.com

02 What Data We Collect

Data you provide directly

Data TypeSourcePurpose
Name, email addressGoogle Sign-In (OAuth)Account creation, authentication
Profile photoGoogle account (optional)Display in app UI
Contact form submissionskibuglobal.com contact formCustomer support, inquiries
Payment informationStripe (TransitionCommand)Purchase processing — we never see raw card data

Data collected automatically

Data TypeSourcePurpose
Device GPS coordinatesBrowser geolocation API (Going Out)Show nearby events and calculate distances — never stored server-side
Saved events listUser interaction (Going Out)Sync saved events across devices via Firestore
App usage dataFirebase Analytics (optional)Understand feature usage to improve products
IP address, browser typeServer logs / CloudflareSecurity, abuse prevention, CDN routing

Data we do NOT collect

03 How We Use Your Data

We use the data we collect for the following purposes, each grounded in a lawful basis under GDPR:

PurposeLegal Basis (GDPR)
Providing and operating our appsContract performance
Processing TransitionCommand purchasesContract performance
Authenticating your account via Google Sign-InContract performance
Syncing your saved events across devicesContract performance
Responding to support and contact form inquiriesLegitimate interests
Improving our products through usage analyticsLegitimate interests
Displaying location-relevant event resultsConsent (you grant GPS permission)
Serving relevant advertisements (Going Out)Consent (AdSense consent banner)
Complying with legal obligationsLegal obligation

04 Third-Party Services

We use the following third-party services to operate our products. Each has their own privacy policy:

Google Firebase (Authentication + Firestore)

Used for Google Sign-In authentication and storing saved events data. Firebase is operated by Google LLC. Data is stored in the europe-west3 (Frankfurt) region. Firebase Privacy Policy →

Google Maps Platform

Used in Going Out to display maps and provide directions. When you use the map screen, your approximate location is shared with Google Maps API to render the map. Google Privacy Policy →

Stripe

Used to process one-time payments for TransitionCommand. KIBU never receives or stores your raw payment card data — all financial information is handled directly by Stripe's PCI-DSS compliant systems. Stripe Privacy Policy →

Cloudflare

Our websites and apps are hosted and delivered via Cloudflare's global CDN. Cloudflare processes IP addresses and request metadata for security and performance purposes. Cloudflare Privacy Policy →

Formspree

Used to process contact form submissions on kibuglobal.com. When you submit a contact form, your name, email, and message are transmitted to Formspree and forwarded to our support email. Formspree Privacy Policy →

Google AdSense (Going Out only)

Going Out is a free app supported by advertising. Google AdSense may set cookies and collect data about your browsing behavior to serve relevant ads. You will be presented with a consent banner on first use in compliance with GDPR. Google Ads Privacy →

Wikimedia Commons / Wikipedia API

Going Out fetches publicly available photos and descriptions from Wikipedia and Wikimedia Commons to display alongside event listings. No personal data is sent to Wikimedia in this process.

05 Cookies & Tracking

We use the following types of cookies and local storage:

TypePurposeCan opt out?
Essential (localStorage)Storing your base location preference and app settingsNo — required for app function
Authentication (Firebase)Keeping you signed inNo — required to use account features
Analytics (Firebase Analytics)Understanding how features are usedYes — email us to opt out
Advertising (Google AdSense)Serving relevant ads in Going OutYes — consent banner on first visit

We do not use cross-site tracking cookies or share cookie data with advertisers beyond what Google AdSense requires for ad delivery.

06 Data Retention

07 Your Rights

Depending on your location, you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, email support@kibuglobal.com with the subject line "Data Rights Request." We will respond within 30 days. EU/EEA residents also have the right to lodge a complaint with their local data protection authority.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights. To submit a CCPA request, email support@kibuglobal.com.

08 Children's Privacy

Our products are not directed at children under the age of 13, or under 16 in the European Union. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@kibuglobal.com and we will delete it promptly.

09 International Data Transfers

KIBU Global Ventures LLC is based in the United States. Our Firebase data is stored in the EU (Frankfurt, europe-west3). Some service providers (Stripe, Formspree, Cloudflare) process data in the United States and other countries.

For users in the EU/EEA, transfers to the United States are covered by Standard Contractual Clauses (SCCs) as required under GDPR. Our third-party providers (Google, Stripe, Cloudflare) maintain EU-US data transfer compliance under their respective frameworks.

10 Security

We implement industry-standard security measures including:

No system is 100% secure. In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by applicable law, including within 72 hours under GDPR.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or in-app notification. Your continued use of KIBU products after changes take effect constitutes acceptance of the updated policy.

12 Contact Us

For any privacy-related questions, data rights requests, or concerns:

We aim to respond to all privacy inquiries within 5 business days and data rights requests within 30 days.