This Privacy Policy explains how Irbuu ("Irbuu", "we", "us", or "our") collects, uses, shares, and protects your information when you use the Irbuu mobile application, our website (irbuu.com), and related services (together, the "Service").
Irbuu is a cultural-heritage and history-preservation platform. It lets you browse and read stories about historical figures ("heroes") organized by region and category, save favorites, comment, and optionally purchase content packages or subscriptions that fund our preservation work.
By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
We only collect data that is needed to run the Service. The categories below reflect what the app actually does.
1.1 Information you provide
- Account information — your name and email address, and (for email sign-up) a password. Passwords are stored only as a salted one-way hash; we never store or can see your plain-text password.
- Social sign-in identifiers — if you sign in with Google, Apple, Facebook, or Telegram, we receive a unique provider user ID and, where available, your name and email. If you use Apple's "Hide My Email", we only receive Apple's private relay email address.
- User-generated content — comments you post on heroes/stories.
- Referral information — a referral code assigned to you, and the code of the user who referred you (if any).
- Support communications — information you include when you contact us.
1.2 Information collected automatically
- Device and session data — IP address, browser/device user-agent, and a device name used to label and manage your login sessions.
- Authentication tokens — access tokens issued to keep you signed in.
- Usage data — favorites you save, reading/progress state, and in-app activity used to power features like your saved list.
1.3 Payment information
- Payments are processed by our third-party payment processors, Stripe and Chapa. Your full card number and card security code are entered directly with the processor and are not stored on our servers.
- We store limited billing metadata: transaction amount, currency, status, the processor's transaction reference, your processor customer ID, and (for card payments via Stripe) the card brand/type and the last four digits of the card, plus subscription/trial status.
1.4 Sensitive data we do not collect
We do not collect precise location, contacts, photos/media library, health data, or biometric data. We do not knowingly collect data from children under the age required by your local law (see Section 9).
2. How We Use Your Information
- Create and manage your account and authenticate you (including social sign-in).
- Provide the core Service: display content, save favorites, track progress, post comments.
- Process payments, grant access to purchased packages/subscriptions, and manage renewals, trials, and referrals.
- Provide customer support and respond to your requests.
- Maintain security, prevent fraud and abuse, debug, and enforce our Terms of Service.
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal information. We share it only as follows:
- Service providers / processors: Stripe and Chapa (payments); Google, Apple, Facebook, Telegram (authentication, only when you choose to sign in with them); and hosting, database, caching, and email delivery providers.
- Legal and safety: when required by law or to protect the rights, safety, and property of Irbuu, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
4. Data Retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account (see Section 7), we delete or anonymize your personal data within 30 days, except where we must retain certain records to comply with legal, tax, accounting, or fraud-prevention obligations (for example, payment/transaction records).
5. Data Security
We use industry-standard safeguards, including encrypted transport (HTTPS/TLS), hashed passwords, scoped access tokens, and restricted access to production systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
6. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and personal data.
- Object to or restrict certain processing.
- Data portability.
- Withdraw consent at any time (where processing is based on consent).
To exercise these rights, use the in-app account controls or contact support@irbuu.com.
7. Account and Data Deletion
You can request deletion of your account and associated personal data at any time:
- In the app: Settings → Account → Delete Account, or
- Web: irbuu.com/data-deletion, or
- Email: support@irbuu.com from your account email address.
See our Account & Data Deletion Policy for full details. We complete verified deletion requests within 30 days, subject to the legal-retention exceptions in Section 4.
8. International Data Transfers
Your information may be processed and stored in countries other than your own, including by the service providers listed above. Where required, we use appropriate safeguards for such transfers.
9. Children's Privacy
The Service is not directed to children under the age of 13 (or the minimum age required by your local law). We do not knowingly collect personal data from children below that age. If you believe a child has provided us personal data, contact support@irbuu.com and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.
11. Third-Party Privacy Policies
12. Contact Us
Irbuu
Addis Ababa, Ethiopia
Privacy inquiries & general support: support@irbuu.com