Kibbits Privacy Policy
Last updated: 26 August 2026
Kibbits ("the App") is published by Ishan Panta, an individual developer based in Nepal ("we", "us"), who is the data controller for the purposes of this Policy. It applies to the App on iOS and Android, and not to the operating-system health services the App reads from, which are governed by Apple's and Google's own terms.
The short version: your health data never leaves your device. We run no server that receives it, and the App contains no advertising, attribution or crash-reporting software. If you never open the Supporter Pack screen, nothing leaves your device at all. If you buy the optional Supporter Pack, a record of that purchase goes to our payments provider RevenueCat and to Apple or Google, and nothing about your steps, your pets or your health goes with it.
Contact: ispanta03@gmail.com
1. What stays on your device
All of the following is stored on your device, encrypted with a key that never leaves it, and retained until you delete it or uninstall the App. None of it is transmitted to us or to anybody else.
| Data | Purpose | |---|---| | Step counts, read in batches from Apple HealthKit or Health Connect under a permission you grant | Steps determine every outcome in the App | | Your pets, their names and statistics, your drop history for the last 90 days, your kibble ledger and your settings | To preserve your collection between launches | | A random installation identifier, created on first launch and linked to nothing about you | Seeds which pets you encounter, so outcomes depend only on your own steps | | An optional seven-day diagnostic log of launches and errors, capped at 1MB and containing no health values | To diagnose a fault you report. It leaves your device only if you export and send it |
The App does not collect your name, email, phone number, address, location, contacts, advertising identifier, microphone, camera, photos, browsing history, activity in other apps, or any health data beyond step count.
2. What leaves your device, and only if you buy something
Kibbits is free and fully featured. The App offers one optional purchase, the Supporter Pack. It unlocks nothing about gameplay, drops, morph, kibble or progression.
If you buy it, or restore an earlier purchase, this leaves your device:
| Data | Who receives it | Why | |---|---|---| | That a purchase happened, what was bought, when, and whether it is still valid | RevenueCat, our payments provider | To check the receipt is genuine and to unlock what you paid for | | A purchase identifier created by RevenueCat, which is linked to nothing about you | RevenueCat | To tell your purchase apart from somebody else's | | Your device's network address, as with any request to any internet service | RevenueCat | Unavoidable in making the request | | Your payment details | Apple or Google only | To take the payment. We never see them, and neither does RevenueCat |
If you never open the Supporter Pack screen, the App never contacts RevenueCat. Not at launch, not in the background, not at all. Nothing about you reaches anybody, and there is no request to describe.
The App contacts RevenueCat in exactly these situations, and no others:
- When you open the Supporter Pack screen. This happens whether or not you buy anything, because that screen is where the price and the restore control live.
- When you buy the pack.
- When you restore an earlier purchase.
- At launch, but only if you already own the pack, so that a refund or an expiry is noticed without you having to go looking for it.
If you have never bought and you never open that screen, none of those happen.
Those requests send no step count, no pet, no diagnostic log and no health value of any kind. RevenueCat receives nothing that identifies you personally, and we ask it for no advertising identifier.
3. Legal bases
Where the GDPR or an equivalent law applies: consent for reading health data, which you grant at the operating-system level and can withdraw at any time in your device settings; performance of a contract for storing your collection and settings, and for delivering a purchase you make; and legitimate interests for the optional diagnostic log and for checking that a receipt is genuine. Your health data is not transferred anywhere, so there is no international transfer to assess for it. Purchase records are processed by RevenueCat in the United States under its own terms.
4. Third parties
We sell your information to nobody, and we disclose it to no third party for any advertising purpose.
The App uses exactly one third-party service. RevenueCat processes purchases on our behalf, as described in section 2. We also see purchase totals in RevenueCat's dashboard, which is how we know how many people bought the Supporter Pack. That view shows purchase records, never a person.
Apple and Google receive your purchase, device and account details when you install the App or pay for something, under their own terms. HealthKit and Health Connect hold your step data, and the App reads from them.
The App integrates with no advertising service, no attribution service, no crash reporter, and no Meta, Google Analytics or Firebase product. If we add a third party, we will amend this Policy before the change ships and give notice in the App.
5. Synchronisation
The App performs no synchronisation. If we add it, it will be off by default, will use a cloud account belonging to you rather than a server of ours, will exclude health data, and this Policy will be amended first.
6. Your rights and controls
From the App's Settings, without contacting us, you can export the diagnostic log, disable the body-morph display, disable haptics, notifications and sound independently, hide step counts in screenshots, and delete all data with a hold-to-confirm control. Deletion is irreversible.
Where the GDPR, the CCPA or a comparable law applies, you hold the rights to be informed, of access, to rectification, to erasure, to restriction, to object and to portability. Your data on the device is not ours to hand over: this Policy informs you, the App shows your collection and your settings on screen, and the delete control gives erasure. We cannot read, correct or transfer any of it, because we never receive it.
Your purchase record is different, because RevenueCat holds it. Write to us and we will ask RevenueCat to give you a copy of it or delete it. Deleting it removes what you paid for, so ask only if you mean it. Deleting the App does not delete that record, and it is what lets you restore the Supporter Pack on a new phone.
If a right applying to you is not satisfied, contact us. You may also complain to your local supervisory authority.
7. Security, children and changes
Data on your device is encrypted by the App with AES-256, on top of the platform's own file encryption. The key is random, is created on your device, and is held in the device keychain, which means it never leaves the phone and we never see it. The App has no accounts, so we hold no passwords, and we operate no interface that could read what is on your device. The purchase record at RevenueCat travels over an encrypted connection and is the only thing we can reach, and it holds nothing about you beyond the purchase itself. Report a suspected vulnerability to ispanta03@gmail.com before disclosing it publicly.
The App is not directed to children under 13 and we do not knowingly process their data. If you believe a child has used the App and want the data deleted, contact us.
We will amend this Policy if our practices change, and the date above will record the revision. Where an amendment affects what the App processes, we will give notice in the App on next launch.