Privacy Policy

1. Who We Are

Ibu AI Ltd. ("Company," "we," "us," or "our") is an Israeli company that operates the Ibu AI conversational platform. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with Israel's Privacy Protection Law and its Amendment 13 (effective August 2025).

2. Information We Collect

We collect the following categories of personal information:

• –Account data: Name, email address, and authentication information when you sign in.
• –Conversation data: Messages and interactions you have with Ibu, stored to maintain context and history.
• –Usage data: Session identifiers, device type, browser type, and general usage patterns (e.g., message frequency).
• –Payment data: Billing information for paid subscriptions, processed securely by our payment provider. We do not store full card details.
• –Preference data: Settings and preferences you configure within the app.

3. How We Use Your Information

We use your information to:

• –Deliver and personalise the Ibu experience
• –Maintain your conversation history and memory across sessions
• –Process payments and manage your subscription
• –Send service-related communications (e.g., billing receipts, policy updates)
• –Detect and prevent abuse, fraud, and safety violations
• –Comply with legal obligations

The legal bases for processing under the Israeli Privacy Protection Law are: performance of a contract (delivering the service), legitimate interest (safety, fraud prevention), and legal obligation (compliance).

4. AI Processing & Your Data

Ibu is powered by AI language models provided via Hugging Face. When you send a message, your input is processed by these models to generate a response. In accordance with Israel's Amendment 13 guidelines on AI systems:

• –You are interacting with an AI system, not a human.
• –Your conversations are not used to train or fine-tune any AI model.
• –Message content sent to AI model providers is governed by their data processing agreements, which prohibit use of API inputs for model training.
• –We do not sell or share your conversation data with third parties for advertising or profiling purposes.

5. Third-Party Service Providers

We share limited personal data with trusted subprocessors to operate the service:

All subprocessors are bound by data processing agreements that prohibit use of your data for any purpose beyond delivering the contracted service.

6. Data Retention

We retain your personal data for as long as your account is active or until you request deletion. Conversation history is stored indefinitely to support memory and personalisation features — you may delete individual conversations or your full history at any time via Settings. Upon account deletion, your data is purged within 30 days, except where retention is required by law.

7. International Data Transfers

Ibu AI Ltd. is based in Israel, which the EU has recognised as providing an adequate level of data protection. Data processed by our subprocessors may be transferred to the United States or other countries. Such transfers are protected by standard contractual clauses or equivalent safeguard mechanisms required by applicable law.

8. Your Rights

Under Israeli privacy law (and equivalent rights under GDPR for EEA users), you have the right to:

• –Access the personal data we hold about you
• –Correct inaccurate personal data
• –Delete your data ("right to be forgotten")
• –Restrict or object to certain processing
• –Receive a copy of your data in a portable format
• –Opt out of any automated profiling with significant effects

To exercise any of these rights, contact us at tech@ibu-ai.com. We will respond within 30 days.

9. Security

We implement technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure — including encryption in transit (TLS), access controls, and regular security reviews. No system is completely secure; if you believe your data has been compromised, contact us immediately at tech@ibu-ai.com.

10. Age Restriction

Ibu is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we become aware that a user under 18 has provided us with personal information, we will delete it promptly. If you believe a minor has used Ibu, please contact us at tech@ibu-ai.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact & Complaints

For any privacy-related questions, requests, or complaints, contact us at tech@ibu-ai.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Israeli Privacy Protection Authority or the supervisory authority in your country of residence.