Privacy Policy

1. Who We Are

Ibi Pax Ltd. ("Ibi Pax", "we", "our", or "us") is a company incorporated in Hong Kong and the developer and publisher of the Ibi Pax mobile application and website.

Ibi Pax is designed to help users discover the spiritual treasures of the Catholic faith through saints, prayers, sacred music, meditations, and spiritual readings.

For the purposes of applicable data protection laws, including GDPR, Ibi Pax Ltd. acts as the data controller of your personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our app and website. By using Ibi Pax, you agree to the terms described in this policy.

2. Information We Collect

Information you provide directly

• Account information: When you create an account, we collect your email address and password (stored in encrypted form).
• Profile information: Any optional name or display name you choose to provide.
• Communications: If you contact us for support, we retain that correspondence.

Information collected automatically

• Usage data: Which features you use (e.g., saints, prayers, meditations), session duration, and navigation patterns — used solely to improve the app experience.
• Device information: Device type, operating system version, and app version, to ensure compatibility and diagnose technical issues.
• Crash reports: Anonymous crash and error logs to help us fix bugs.
• Push notification tokens: If you enable notifications (e.g., Saint of the Day), we store a device token to deliver them.

Payments

We do not collect or store any payment or financial information. All purchases and subscriptions are processed by:

• Apple (App Store)
• Google (Google Play)

We may receive limited information such as subscription status (e.g., active, expired).

Information we do NOT collect

• Location data.
• Contacts, camera, or microphone access.
• Financial or payment information.

3. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Contractual necessity: To provide and operate the Ibi Pax service.
• Legitimate interests: To improve performance, security, and reliability.
• Consent: For optional features such as push notifications.
• Legal obligations: Where required by applicable law.

4. How We Use Your Information

We use the information we collect exclusively to:

• Create and manage your account and authenticate your identity.
• Deliver the app's features, including personalised content and the Saint of the Day notification.
• Respond to your support requests and communications.
• Improve, debug, and optimise the performance of the app.
• Ensure security and prevent abuse.
• Send you important service-related updates (not marketing without your consent).
• Comply with legal obligations.

We do not:

• Sell your data.
• Use your data for advertising.
• Profile users for commercial purposes.

5. AI-Powered Features (Celestial Guide)

The Celestial Guide feature uses an AI model provided by Anthropic. By using this feature:

• Your messages are transmitted to Anthropic's servers to generate responses.
• Conversations may be temporarily stored to maintain session context.
• Data is not used to train AI models by us.

Important:

• Do not share sensitive personal information (such as financial details or health information) in AI conversations.
• Responses are generated automatically and may not always be accurate.
• The AI provides informational and spiritual guidance only — it is not a substitute for professional, medical, or legal advice.

Anthropic processes data in accordance with their own Privacy Policy.

6. Sharing of Your Information

We do not sell, rent, or trade your personal data. We do not sell personal data within the meaning of applicable data protection laws. We may share it only in the following limited circumstances:

• Service providers: Trusted third-party providers who help us operate the app (e.g., cloud hosting, authentication, crash reporting). These providers are contractually bound to protect your data.
• AI provider: Anthropic, for the Celestial Guide feature (see Section 5).
• App stores: Apple and Google process payments and may collect data governed by their own privacy policies.
• Legal requirements: If required by law, court order, or to protect our legal rights.

7. Data Retention

We retain your account data for as long as your account is active, or as needed to provide you with the service. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.

Anonymous usage and crash data may be retained for up to 24 months for analytics and improvement purposes.

Deletion is irreversible.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
• Object to processing: Object to certain types of data processing where we rely on legitimate interests.
• Opt out of notifications: You can disable push notifications at any time in your device settings.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

To delete your account, you can do so directly in the app (Settings → Delete Account) or follow the instructions on our Account Deletion page.

9. Children's Privacy

Ibi Pax is intended for users who are 13 years of age or older. If you are under the age of digital consent in your country (e.g., under 16 in parts of the EU under GDPR), you must have parental consent. We do not knowingly collect personal data from anyone under the age of 13. If such data is identified, it will be deleted promptly. If you believe a minor under 13 has provided us with personal information, please contact us at and we will promptly delete it.

10. Data Security

We implement industry-standard safeguards, including:

• Encryption in transit (HTTPS/TLS).
• Encrypted password storage.
• Access controls and security monitoring.

No system is completely secure, but we take all reasonable measures to protect your data.

11. International Data Transfers

Your data may be processed in countries outside your residence. Where required, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs).
• Contractual data protection obligations with providers.

12. Cookies and Tracking (Website)

Our website may use limited cookies or similar technologies for:

• Basic functionality.
• Performance and analytics.

We do not use cookies for advertising or cross-site tracking.

13. Third-Party Links and Content

The app may contain links to third-party websites or content (such as external books or resources). We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via the app or by email. The "Effective Date" at the top of this page will always reflect the most recent version. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.

15. Governing Law

This Privacy Policy is governed by the laws of Hong Kong.

16. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please reach out to us: