Scope
This Privacy Policy explains how Ibils collects and uses data when you use the app, website, WhatsApp, and support. You do not need to provide every category below; processing depends on the features you use.
Data we process
- Account: the name and email you provide, profile, language, authentication credentials, and login sessions. Passwords are stored as hashes, not readable text.
- Financial records and questionnaire answers: transactions, income, debts, budgets, savings goals, shared books, and other financial information you enter.
- AI features: messages, receipt images, import documents, voice recordings or transcripts, processing results, relevant financial context, and AI limit usage history. WhatsApp also requires your linked number and delivery metadata.
- Payments: transaction identifiers, amount, currency, plan, payment and subscription status, refunds, and purchase evidence. Card details are entered through the payment provider or store.
- Technical and support data: device, app version, IP address, notification tokens, error logs, support messages, and attachments. The website also processes visits, campaign sources, and interactions for analytics.
Purposes and legal bases
- To provide the service you request: authentication, storing records, processing AI, delivering messages, and managing payments. This processing is needed to perform our service agreement.
- To secure the service, investigate faults and abuse, and review refunds using payment and AI history. These operational interests must take your privacy rights into account.
- To meet legal obligations and resolve disputes. Where processing requires consent, you can refuse or withdraw it without losing core service access.
Processing outside Indonesia
Providers may process data outside Indonesia, including Singapore and the United States, depending on their products and infrastructure. A vendor headquarters location is not necessarily its processing location.
Transfers must meet applicable data protection requirements, including protection in the recipient country, binding safeguards, or consent where required. We do not claim that every provider has an adequacy decision or a particular contractual clause. You can request information about the providers and safeguards applicable to your data through our privacy contact.
Retention and deletion
Your financial records are separate from evidence of payments made to Ibils. Account deletion covers personal books under the process described below.
- Profile details, preferences, personal books, and financial records are kept to provide your account. Account deletion removes associated data within the deletion scope; shared data must be resolved first.
- In-app assistant conversation logs have a default 30-day cleanup schedule. Conversation memory and saved preferences are separate records; deleting chat logs alone does not necessarily remove them.
- WhatsApp delivery logs, AI limit usage logs, and completed payment event logs have a 366-day cleanup schedule. Incoming messages and media follow separate schedules by data type. Unresolved payment events may be retained until handled.
- Certain operational logs, including email and notification delivery logs, are scheduled for cleanup after 90 days. Support records and attachments are kept as needed to resolve requests and related disputes.
- Payment, refund, audit, and security evidence may be retained where needed for legal obligations or an actual dispute. This exception is limited to necessary records, not the entire account.
- These are active-system cleanup schedules, not a promise that every copy disappears on that exact day. Backup copies follow a separate replacement cycle with restricted access. Service providers also retain data under their policies and service settings.
Your choices and rights
You may request access, correction, a copy, deletion, restriction, or objection to processing as provided by law. Account ownership verification prevents disclosure to someone else. You can complain to a competent authority without waiting for an Ibils-imposed deadline.
- In the app, open Settings, choose Delete account, and confirm with your current password. If you cannot sign in, email us from your account email with the subject "Ibils account deletion".
- Leave books owned by other users first. For books you own and share, resolve ownership and member access before deleting your account. Contact support if shared data or transactions prevent deletion.
- Cancel Apple or Google Play subscriptions in your store subscription settings. Deleting the app or account does not cancel a store subscription.
- Support requests require account ownership verification. Our target is up to 30 days after verification, or sooner where the law requires. We will explain any delay or specific records that must be retained.
- Do not email passwords, one-time codes, or payment card copies. Export records you want to keep before deletion; a successfully deleted account cannot be restored through the app.
Disconnecting WhatsApp
Disconnecting stops new processing that depends on that connection. It does not automatically erase financial records, messages, or processing evidence already created. Request data deletion separately where needed.
Age requirements
Ibils is intended for users aged at least 13. If you are below the legal age of adulthood, involve a parent or guardian and obtain any required consent. Contact us if a child's data is being processed without a lawful basis.
Security
We use access controls and technical measures to protect data. No system is risk-free. Data incidents are handled and notified as required by law; contact us promptly if you suspect unauthorised access to your account.
Policy changes
The update date appears on this page. Material changes to data use or sharing will be communicated before taking effect; fresh consent will be requested where required by law.