Privacy Policy (English)
Noemi is a Christian devotional. We designed the app so your faith life stays, above all, on your own device. This policy explains what data is handled, why, on what legal basis, and what rights you have.
1. Data controller
YibiHuge S.A.S. BIC, a company incorporated in Colombia, is the controller of the personal data described in this policy. Noemi is developed and operated by YibiHuge S.A.S. BIC.
- Contact and privacy email: noemi@yibihuge.tech
- Country of establishment: Colombia
2. Summary of data handled
| Data | Purpose | Leaves the device? | Retention |
|---|---|---|---|
| Journal and altar of intentions | Writing and rereading your reflections | No | Until you delete it or uninstall |
| Progress, rituals, streaks, usage analytics | Showing your progress | No | Until you delete it or uninstall |
| Anonymous account identifier | Enabling the AI chat and its daily limit | Yes (Firebase) | While you use the app; deleted on request |
| Message text sent to the AI companion | Generating and moderating the reply | Yes (Firebase + OpenAI) | We do not store it; OpenAI retains it briefly for abuse prevention |
| Daily message counter | Enforcing the plan limit | Yes (Firebase) | Resets each day |
| Notification token (if enabled) | Sending devotional reminders | Yes (Firebase) | Until you turn notifications off |
We do not collect your name, email address, phone number, contacts, location, photos, calendar, microphone, or advertising identifiers.
3. What stays on your device
- Your journal and altar of intentions are stored encrypted on your phone and are not sent to our servers.
- Your reading progress, rituals, streaks, and usage analytics are stored locally; they do not leave the device.
- The app may download fonts or devotional content to render the interface, without linking them to your identity.
4. Anonymous account
To use the AI faith companion, the app creates an anonymous account (Firebase Authentication): a random identifier generated by the device. We do not ask for or collect your name, email, contacts, or location. This identifier is not linked to your real identity and is never shared with advertisers.
5. AI companion chat
When you send a message to the companion, the message text is transmitted securely (HTTPS) to our server (Firebase Cloud Functions) and to OpenAI, which generates the reply.
- We do not store the content of your messages. We only keep a daily counter tied to your anonymous identifier to enforce the free-tier limit.
- OpenAI processes the message to reply and may retain it briefly for abuse prevention per its API policy; it is not used to train models via the API.
- The message passes through a moderation filter so we can offer a caring response to signs of crisis and block inappropriate content.
- Please do not share sensitive data (health, credentials, financial data, or third-party data) in the chat. If you do, it will be handled under this policy, but we recommend avoiding it.
6. AI-generated content, limits, and reporting
Noemi is not a medical, psychological, or emergency service. The faith companion offers spiritual accompaniment and does not replace care from a health professional, counselor, or minister. Replies are generated by an artificial intelligence model and may contain errors; do not treat them as professional advice.
If you are in danger or thinking of harming yourself, contact your country's emergency services immediately (for example, 988 in the United States, 112 in the European Union, 999 in the United Kingdom, or 123 in Colombia).
We apply moderation filters to generated content. If you receive an offensive, harmful, or inappropriate reply, report it to noemi@yibihuge.tech. We review reports and act, where warranted, within 24 business hours.
7. Purchases and subscriptions
If you buy a paid plan, the purchase is processed entirely through the Apple App Store or Google Play. We never receive, see, or store your card details or billing information. We only receive the subscription status, tied to your anonymous identifier, in order to unlock the corresponding features. You manage and cancel the subscription from your Apple or Google account settings.
8. Notifications
Devotional reminders are scheduled locally on your device. If you enable remote notifications, the operating system generates a notification token tied to your anonymous identifier. You can turn them off at any time in your system or app settings.
9. Processors and international transfers
We share data only with the providers required to operate the app, under data processing agreements:
| Provider | Service | Data | Policy |
|---|---|---|---|
| Google (Firebase) | Anonymous auth, cloud functions, notifications | Anonymous identifier, daily counter, notification token | View |
| OpenAI | Reply generation and moderation | Message text | View |
| Apple / Google | Purchase processing | Subscription status | Apple · Google |
These providers process data on servers located, among other countries, in the United States. International transfers rely on the European Commission's Standard Contractual Clauses and, for Colombia, on the authorizations and safeguards set out in Law 1581 of 2012. We do not sell or transfer your data to third parties for commercial purposes.
10. Legal bases (GDPR / EU and UK)
- Performance of a contract (art. 6(1)(b)): creating the anonymous account, providing the AI chat and paid features.
- Legitimate interests (art. 6(1)(f)): abuse prevention, security, and enforcing usage limits.
- Consent (art. 6(1)(a)): push notifications, which you can withdraw at any time.
- Legal obligation (art. 6(1)(c)): retaining records required by applicable law.
11. Your rights
You have the right to access, rectify, erase, object to, and restrict processing of your data, to data portability, and to withdraw consent at any time. In the EU or UK you may lodge a complaint with your supervisory authority. In Colombia you may also file a complaint with the Superintendence of Industry and Commerce (SIC). California residents: see section 13.
To exercise these rights, email noemi@yibihuge.tech from the device where you use the app and include your anonymous identifier (shown in Settings → About). We respond within 30 days (GDPR/CCPA) or 15 business days (Colombia). We will not discriminate against you for exercising your rights.
12. Data and account deletion
You can delete your data in two ways:
- In the app: Settings → Privacy → Delete my data and account. This erases the journal, the altar, local progress, and permanently deletes your anonymous account and its counter on our servers.
- By email: write to noemi@yibihuge.tech with the subject “Delete my account”. We process the request within 30 days.
Uninstalling the app removes all local data but not the anonymous account on the server; use either method above to delete it.
13. What we do not do
- We do not sell or “share” your personal information, as those terms are defined by the California CCPA/CPRA. We have not sold or shared it in the past 12 months.
- We show no third-party ads and do not use your data for advertising.
- We do not track your activity across other companies' apps or websites. We do not use the IDFA, do not request App Tracking Transparency permission, and perform no cross-app tracking.
- We do not profile you or make automated decisions producing legal effects concerning you.
14. Children
Noemi is not directed to children under 13 (or under 16 where that is the minimum age) and does not knowingly collect their data. If you are a parent or guardian and believe a child has provided us data, email noemi@yibihuge.tech and we will delete it promptly.
15. Retention
Local data is kept until you delete it or uninstall the app. The daily counter resets each day. The anonymous identifier is kept while the account exists and is deleted, together with its associated records, within 30 days of your deletion request, unless a legal obligation requires otherwise. Technical security logs are retained for at most 90 days.
16. Security
We use encryption in transit (HTTPS/TLS), encrypt the journal at rest on your device, and apply least-privilege access rules on our servers. No system is infallible; should a breach affect your data, we will notify the authorities and affected individuals as required by applicable law.
17. Changes
We may update this policy. We will post the new version here with its date and, if the changes are material, notify you in the app before they take effect.
18. Contact and governing law
Email us at noemi@yibihuge.tech. This policy is governed by the laws of the Republic of Colombia, without prejudice to the mandatory rights granted to you by the laws of your country of residence.