Bibi Privacy Policy
Last updated: October 13, 2026
Contact Us
To ask a question, share a comment or concern about this Privacy Policy or our privacy practices, or exercise your rights, please contact us at:
Email: dylanenzo231@icloud.com
We will review your request and respond within a reasonable time, in accordance with applicable law.
1. Introduction
Welcome to Bibi (“we”, “our”, or “us”), operated by TOTI, with developer and seller details also shown on its App Store product page. This Privacy Policy covers the current Bibi iOS app and information you separately send to us for support.
This policy describes the information handled by the app, the reasons for using it, its storage, and the choices available to you. Most account and social records stay in this app installation on your device. Apple processes App Store purchases. Separately, external providers may process requests when you load an external media URL, open a third-party link, or email support.
This policy does not grant blanket consent for unrelated processing. We obtain consent or device permission separately when a particular use requires it. If our practices change, we will revise the date above and, before new processing starts, provide any additional notice or obtain any renewed consent required.
2. Definitions
Personal Information
Information that identifies you, or can identify you directly or indirectly. Examples include your nickname, device identifiers, profile photo, limited contact details if you choose to supply them, and other information you provide.
Anonymous / Aggregated Information
Information that does not identify an individual, such as totals showing how many users access a feature or how frequently particular content is viewed.
Service Providers
Companies that handle information for us to deliver a specified service. Their processing must be restricted to authorized purposes and subject to appropriate data protection obligations. Independent providers, such as Apple when processing payments, manage their own records under their own policies. The providers relevant to this version are described in Section 5.
Third-Party Partners
External services used for supported functions, including App Store purchases, email correspondence, and any externally hosted media you access. Naming a third party does not imply that your full profile or private messages are provided to it.
3. Information We Collect
3.1 Information You Provide
Registration and Profile Information
You can register and sign in using an email address and password. Account records contain an internal identifier, email address, creation information, profile-completion status, and the version and date of the terms you accepted. Your profile may contain a display name, profile photo, cover, biography, country or region, public account identifier, and level. A new email or Apple account must add a profile photo and name before continuing. This release does not collect a birthday or determine your location through device location services.
For an email account, a salted password-verification value is stored in the iOS Keychain. Your plain-text password is not stored in the local account database. You can also sign in with Apple. Apple handles authorization and may share a name, email address, or private relay address with your consent. Bibi stores the Apple user identifier so a later sign-in on this device can return to the same account. Your Apple password is not shared with Bibi. An Apple account and an email account stay separate even when the email addresses match. App Store purchases are handled separately.
Profile and Content Information
Photos and videos you take or choose for a profile photo, profile or room cover, chat, game, feedback note, or support note, and videos you choose for a post, are copied to the app's private storage together with titles, descriptions, topic tags, comments, room details, and relevant dates. The New feed accepts video posts only. Standalone audio posts and standalone image posts are not published to that feed. A private message can include a photo or video you select. Bibi does not save selected media back to your photo library.
In Bibi, profile and content fields may be shown to accounts allowed by the app's visibility controls. Do not put sensitive information in fields intended to be visible to others.
Communication Information
Private conversations include conversation and sender identifiers, participants, message text, any attached photo or video, dates, and read status. Room messages are stored with the room, and the room screen shows recent messages from that room.
Reports remain on your device and record the reporting account, selected target, reason, and time. Feedback and Customer service entries store your account identifier, category, message, and date locally. If you email dylanenzo231@icloud.com directly, TOTI and the email services involved process your sender address, message, attachments, and delivery information to answer the inquiry. Send only information needed for the request, never passwords or full payment-card details.
Payment Information
App Store payments are processed by Apple. To deliver coins, Bibi receives the necessary product and verified transaction details, including a transaction identifier and an app account token linking the purchase to the initiating account. This token is provided to Apple for that purpose.
The local wallet records changes in coins, transaction identifiers, dates, and the reasons for credits and spending. Virtual items are recorded in the inventory. We do not receive full payment card numbers, bank login details, or Apple Account passwords. This version provides consumable coin packs and does not offer auto-renewing subscriptions.
3.2 Information We Collect Automatically
Account Activity and Preferences
Local records include follows, blocks, likes, hidden content, recent rooms, notification and message read status, supported preferences, check-ins, level progress, and markers for removed conversations. The app uses them to show activity and apply controls for each account. The current implementation does not transmit screen-view events or behavioral analytics to an analytics service.
Network Request Information
Built-in images and videos are bundled with the app and do not require a request to the original media provider during playback. If an external image or video URL is loaded, its host and delivery providers can receive your IP address, requested URL, request time, and standard connection information. Apple separately handles information necessary for App Store purchases under its policies. Media requests do not intentionally include your Bibi password, private messages, or complete profile.
No advertising network, cross-app tracking SDK, or separate crash-reporting or behavioral analytics service is integrated in this release. The app does not request the advertising identifier, contacts, health data, or permission to access device location.
Camera Microphone and Photos
You can use the camera or the system photo picker to choose a profile photo, a profile or room cover, a photo for a chat, game, feedback note, or support note, or a video for a post or chat. The picker returns only the items you select. Bibi also includes a photo-library purpose description for these choices. That description does not by itself grant access or start a full-library permission request, and Bibi does not save media back to your photo library.
Bibi requests the camera for profile photos, covers, photos in chats, games, feedback, and support, videos in posts and chats, and your video-call preview. It requests the microphone to record sound with a video, join a voice-room microphone seat, use the microphone control during a video call, and dictate a game message. Game dictation also requests speech recognition and uses on-device recognition where the device supports it. Dictated text stays editable and is saved only when you send it. Bibi does not save the microphone audio. Capture stops when you leave the screen or the app becomes inactive. Joining a voice-room seat places you in the seat shown in the room.
You may deny or withdraw camera, microphone, speech-recognition, or photo-library permissions in iOS Settings. The system picker separately lets you choose or cancel individual selections. A denied permission affects only the feature that depends on it. Withdrawing permission does not delete media previously copied into the app.
Local Storage and Caches
To reduce repeat downloads, the app caches supported images or network responses and remembers the active account and its settings. Some caches may be shared across the app. This version does not run a Bibi website cookie service or advertising-tracking service. Third-party websites you open independently may use their own technologies and privacy controls.
4. How We Use Your Information
Our use of your information is limited to legitimate purposes relating to the provision and improvement of Bibi.
4.1 Provide and Manage the Services
We use information for the features you request, including:
undefined Recognizing the signed-in account and displaying its profile and locally saved content.
undefined Applying content-visibility, mutual-follow, and blocking rules.
undefined Maintaining account-specific settings, activity, virtual items, and local notices.
undefined Verifying purchases, crediting the initiating account, and preventing duplicate credits.
undefined Responding to inquiries you send directly to our contact email.
Where the law requires a legal basis, processing must rely on one: delivering a service you request, obtaining consent where necessary, meeting a relevant legal obligation, or pursuing a legitimate interest in security and accurate transaction handling when that interest is not overridden by your rights. Device permission does not permit unrelated uses.
4.2 Personalize Your Experience
undefined Show content, users, and features that may be relevant to your interests
undefined Customize certain in-app recommendations or feeds
undefined Remember your settings and preferences (such as language, notification preferences)
We do not use your personal information for any purpose that is incompatible with those described in this Privacy Policy without your consent.
4.3 Diagnose Issues and Improve Features
Information you voluntarily provide in a support request may help us investigate the reported issue and improve the feature involved. The current app does not transmit behavioral analytics, screen-view histories, or crash telemetry to a separate analytics service.
Before introducing a new data collection or analytics service, we will update this policy and provide any required notice or obtain any required consent. Local activity records are not anonymous simply because an account identifier is used in place of a name.
4.4 Communications
Contact details included in your email are used to respond to the inquiry and follow up as needed. The current app does not run a marketing email or advertising-message program.
Your in-app notice preferences apply to notices supported within the app. These preferences are distinct from iOS permissions and do not automatically sign you up for communications outside the app. Any promotional messaging introduced later must have a lawful basis and a suitable opt-out method.
5. How We Share Your Information
We do not sell your personal information.
Information is shared only in the limited circumstances set out below.
5.1 Service Providers
Apple: App Store purchases involve Apple's processing of payment, account, and transaction information. Apple controls its own payment and purchase records. The app account token sent with a purchase identifies its intended Bibi account; it is not your password.
External media hosts: The built-in media is bundled with the app; its source providers do not receive a request merely because you view it. If you load an external media URL or open a provider's website, that provider can receive the request information described in Section 3.2. This does not give it access to your local conversations or the contents of your photo library. Email providers also process correspondence you send directly to support, as described in Section 3.1.
Apple's privacy policy is available at https://www.apple.com/legal/privacy/. For an external URL or email service you choose to use, consult that provider's applicable privacy policy.
Bibi does not operate an advertising network. Image-loading and interface libraries run inside the app and are not presented here as independent analytics providers. Any provider handling personal information for us must be restricted to the relevant purpose and appropriate data protection obligations.
5.2 With Your Consent or at Your Direction
You may disclose information at your own direction, such as by emailing support or opening a third-party service. That decision is not permission for unrelated sharing. Any further sharing by us needs an applicable legal basis, together with any notice or consent required by law.
5.3 Legal and Safety
We may disclose information we hold when there is a lawful basis and we reasonably believe the disclosure is necessary to:
undefined Comply with applicable laws, regulations, legal processes, or enforceable governmental requests
undefined Enforce our Terms of Service or protect our rights and property
undefined Protect the safety, rights, or property of our users or the public
undefined Detect, prevent, or address fraud, security, or technical issues.
Disclosures should include only relevant information.
5.4 Aggregated or Anonymous Information
Information qualifies as anonymous only if it cannot reasonably be used to identify a person. Account and transaction identifiers may still constitute personal information; they are not automatically anonymous.
The current app does not transmit a separate feed of usage statistics to us. Should a future service use anonymous or aggregated information, the underlying collection and any processing of identifiable information must still be disclosed and supported by an appropriate legal basis.
6. How We Protect Your Information
We take the security of your personal information seriously.
6.1 Technical and Organizational Measures
The app relies on iOS private storage, account checks for access to and changes in private views, and the device Keychain for password-verification values. These protections operate at the application and device level. This policy does not guarantee separate encryption of every local file or end-to-end encryption of conversations.
Storage and transmission cannot be guaranteed completely secure. Protect your device with a passcode, install supported security updates, and sign out when using a shared device. A person who can access an unlocked device or an account that is already signed in may be able to see its information.
6.2 Access Controls
Account ownership and access checks apply to private views, balances, settings, and activity. Switching the active account is not intended to reveal or transfer another account's private records. Caches maintained at device level may not be separated by account.
Access to information you send separately to support should be limited to people who need it to address the request or comply with a relevant legal obligation.
6.3 Data Retention
Unless removed through a supported feature, local account and activity records remain while the account is kept. Signing out ends the active session but leaves saved records in place. Clearing image or network caches does not delete the profile, wallet, or selected media. Deleting a conversation removes that conversation and its saved messages for your account. Deleting a post or room removes its app record and related content references; unused media files may remain until account deletion.
Section 7.2 explains deletion. To prevent duplicate credits, limited transaction identifiers for completed purchases remain after an account is deleted. These identifiers do not retain the deleted profile, although they may still correspond to purchases in Apple's records. The current local ledger does not automatically expire them after a set period.
Information sent directly to support is retained only as needed to address the inquiry and meet applicable legal obligations. Support correspondence is separate from local app records; deleting an app account does not automatically delete an email conversation. You may request deletion of that correspondence at dylanenzo231@icloud.com, subject to lawful retention requirements. Apple, email providers, and any external media providers determine retention for their own records. The app offers no cloud backup service, but your Apple or computer backup settings may include its data in device backups.
7. Your Rights and Choices
The rights available to you in relation to personal information depend on your jurisdiction.
7.1 Access and Update
You may review and change the profile fields available in the app, delete your own posts or rooms, and manage blocked accounts through Blacklist. Editable profile information includes a display name, profile photo, cover, and biography.
Blocking and contact controls help you manage interactions. Sending private messages and starting a call require mutual following and no block between the accounts. You can contact us for help with your information.
7.2 Delete Your Account and Data
To delete the active account, open Settings > Deleting an account and confirm. Check which account is active before proceeding. The app removes that account's profile, posts, rooms, related comments and conversations, relationships, reports filed by the account, feedback and Customer service entries, notices, check-in and task records, inventory, and wallet records. It also attempts to remove the password-verification value saved for that account in the Keychain.
The app attempts to remove media files stored in the deleted account's media directory; storage errors may postpone removal. As Section 6.3 explains, limited purchase transaction identifiers are retained to prevent duplicate credits. Other accounts remain intact, although shared interactions involving the deleted account may also be removed.
The app cannot reverse deletion. Deleting an account does not automatically request a refund, erase Apple purchase records, remove external provider logs, or delete backups and copies outside this installation. Those records must be managed with the relevant provider.
To request deletion of information held separately by the developer, such as a support email, write to the contact address above. We will process the request under applicable law, subject to any lawful exceptions requiring retention.
7.3 Permissions and Communication Choices
You can manage supported in-app preferences and blocking controls. Camera and microphone access can be changed in iOS Settings for Bibi. For photos and videos, you choose which items to share through the system picker; if iOS grants a separate photo-library permission, you may manage it in Settings. These controls do not remove media already copied into the app.
This release does not subscribe you to marketing messages. Any future promotional communications must include an appropriate way to unsubscribe and obtain consent where required. Withdrawal of consent stops subsequent processing that relies on it, without reversing processing already completed lawfully.
7.4 Object or Restrict Processing (Where Applicable)
In some regions, you may have the right to:
undefined Object to certain types of processing (for example, direct marketing)
undefined Request that we restrict processing of your personal information in certain circumstances
You may also have rights to access, correction, deletion, or a copy of information and to complain to a competent privacy authority. Contact us to exercise applicable rights. We may need reasonable verification, but do not send passwords or unnecessary identity documents. We will respond within applicable legal periods.
8. Eligibility and Children’s Privacy
Minimum Age 18
Bibi is intended for people aged 18 or older, subject to any higher minimum age required by applicable law. Anyone under 18 is prohibited from using the Services. Providing an age does not establish that the person's age or identity has been independently verified.
If we discover that information in our possession came from a person below the applicable minimum age, we will take appropriate steps under applicable law, including deletion where necessary. Parents or guardians may contact us about that information and use the app's deletion controls for records on the device. Bibi is not a service designed for children.
9. International Data Transfers
App Store purchases, email correspondence, and any external media requests may involve processing transaction, contact, message, or connection information in other countries. The relevant providers explain their processing locations and safeguards in their own policies.
Any transfer of personal information we hold to a provider in another country must have a lawful basis and the safeguards required by applicable law. This policy does not claim the existence of a particular transfer agreement or server location that has not been established.
10. Third-Party Links and Services
Links within the Services may lead to websites, applications, or services run by third parties.
If you use those third-party services, the information you give them is governed by their privacy policies rather than this policy.
Third-party privacy practices are not our responsibility. Read the relevant provider's privacy policy before giving it personal information.
11. Apple App Store Specific Disclosures
Apple handles App Store purchase information under its own policies. Bibi receives only what the implemented features described above require, not full payment card details or your Apple Account password.
This version does not use the advertising identifier or track your activity across other companies' apps and websites for targeted advertising. iOS handles camera, microphone, speech-recognition, and photo permissions separately. Before any future tracking or additional data use begins, disclosures must be updated and any consent required by law or Apple's rules must be obtained.
The Privacy Policy and the App Store App Privacy disclosures must accurately reflect the release being distributed, including relevant third-party processing. This policy is not a claim that Apple has approved the app or verified every disclosure. Questions and privacy requests may be sent to dylanenzo231@icloud.com.