Privacy Policy
Kibō Link — version dated 2 August 2026.
Data controller: Silverback Studio, a sole proprietorship
established in France, SIREN 106 751 969,
SIRET 106 751 969 00010.
Privacy contact:
contact@silver-back-studio.com.
Historical transition: two old visit records created before local-only storage remain in the legacy backend. The current beta candidate no longer reads them or creates a new remote visit. On 24 July 2026, application-role access to the legacy tables was removed: current and earlier builds can no longer read or modify these records. Their export, migration or deletion must be decided by the data controller after legal or DPO review and before any purge. No record content was inspected during the inventory.
1. People concerned
The app is intended for adult family caregivers. It lets users enter information about another person, referred to as the “care recipient”. Before entering it, the user must make sure that person has been informed and does not object, or that the user is authorised to act in their interests. The rules applicable to vulnerability or legal protection must be assessed for each situation.
2. Data kept only on the device
The following categories are stored locally:
- emergency record, history, allergies and health information;
- measurements, medication, journal, check-ins and documents;
- appointments, contacts, tasks and visits, including free-text fields.
This data is not synchronised between devices. It is encrypted at rest with a key held in the operating system's secure storage and bound to the device on iOS. If secure storage remains unavailable after several attempts, the app stays locked: the main workspace is not initialised and no new sensitive data is written. Users should restart the app. Sensitive files and preferences are excluded from system backups handled by the app. A temporarily decrypted copy is created only when the user explicitly opens or shares a document; the app then attempts to delete it, with the operating system providing fallback cleanup.
3. Data processed remotely
Account and non-medical coordination — Supabase
To provide accounts and caregiver sharing, Kibō Link may process:
- email address, technical identifier and, on Android, Google sign-in when selected;
- caregiver first name and reminder time;
- care recipient name, age range, town, phone number and “lives alone” flag;
- members, roles, invitations and a technical access log;
- any use of a partner access code.
Supabase hosts this data for authentication and coordination. It is encrypted in transit and protected by row-level access rules.
Weather and public-service directory
The town or postcode entered may be sent to Open-Meteo to obtain approximate coordinates and weather. When looking for a public service, the town or postcode and selected service category may be sent to the French Geo API and DILA public APIs. Precise GPS location is not used.
Kibō+ subscription
Apple or Google processes the purchase. RevenueCat receives the pseudonymous Kibō Link account identifier, selected product and subscription status/history to activate Kibō+ on signed-in devices. Silverback Studio receives no card or banking details.
Optional analytics and diagnostics
Analytics is off by default. If enabled in Settings, the app may send product interactions, app version, build number, platform and technical diagnostics to Supabase. No entered text or advertising identifier is added to the event. Because the Supabase request is authenticated, the provider's technical logs may allow it to be linked to the account. Free-text exception messages are not recorded. Disabling analytics stops transmissions and clears the local diagnostic queue.
Beta feedback
The Google Forms questionnaire is disabled in the production version. An explicitly identified test version may offer it; answers, including an optional free-text field, are sent to Google only after the tester acts. Testers must not enter medical information or information identifying the care recipient.
4. Purposes and legal bases
- account, coordination and subscription: performance of the service;
- service security and incident handling: legitimate security interests, subject to individual rights;
- optional analytics and beta feedback: consent;
- information concerning health or a care recipient: local processing and GDPR Article 9 conditions to be confirmed for the relevant situation.
5. Service providers and transfers
- Supabase: authentication, coordination and, with consent, analytics/diagnostics;
- Google: Android sign-in, distribution and payment;
- Apple: distribution and payment;
- RevenueCat: technical subscription management;
- Open-Meteo, Geo API and DILA: weather and public directory;
- Google Forms: test-version feedback only.
Some providers may process data outside the European Economic Area under their contractual safeguards. Locally held health data is not sent to them.
6. Retention
- local data: until deleted in the app or the app is uninstalled;
- account and coordination: until account or sharing deletion;
- optional analytics and diagnostics: 13 months maximum; an automated daily job deletes older events in batches;
- subscriptions and transactions: under Apple, Google and RevenueCat obligations and policies.
7. Your rights
You may request access, correction, deletion, portability, restriction or objection, and withdraw consent. The app includes export and account deletion. You may also email contact@silver-back-studio.com. A complaint may be made to the French CNIL.
8. Account deletion and subscription
See the full account deletion process. Deleting a Kibō Link account does not automatically cancel an Apple or Google subscription; it must be cancelled in the store settings. The RevenueCat technical-profile erasure service is enabled. If that service is unavailable, the app blocks account deletion to avoid claiming that a partial erasure is complete.
9. Health and emergencies
Kibō Link is an information, prevention and organisation tool. It is not a medical device, does not diagnose or monitor health, and does not replace a professional. The app is designed for France. In France, call 15 or 112 in an emergency, or 3114 for a mental-health crisis.