Privacy and AI

Updated 20 October 2026

Your journal is stored on this phone. Maps use online providers. Optional AI sends selected content only after your permission.

Controller: Inithex Consultoria Integral SPA · hello@inithex.com

Your journal on this phone

mybu does not create an online account. Your nickname, optional email, notes, feelings, photos, drawings, audio and recorded routes are kept in the app on this phone. Maps and optional online features contact the providers described below. No advertising or cross-app tracking is implemented.

Optional cloud AI

Voice transcription and memory answers are optional. Only after you allow each use, Supabase processes the request and forwards the selected content to OpenAI. mybu does not write audio or memory text to its application database. OpenAI and hosting providers may retain operational or abuse-prevention data under their policies; this is not a promise of zero retention. Random installation IDs and request counters for the 10 free requests are stored separately for quotas.

Voice notes

To transcribe and suggest a feeling, mybu sends this and future voice notes, language and optional place name to OpenAI through its Supabase server. A random installation ID counts requests. Audio may contain personal information. Provider retention policies apply. You can refuse and keep recording locally, or withdraw permission in Privacy and AI.

Questions about your memories

To answer, mybu sends your question and up to 40 relevant memory snippets (notes, dates, place/city names, feelings, tags, ratings and approximate distances) to OpenAI through its Supabase server. A random installation ID counts requests. It does not send photos or GPS tracks. Provider retention policies apply. You can refuse and use your journal, or withdraw permission in Privacy and AI.

To withdraw permissions: Profile → Privacy and AI → Withdraw AI permissions. AI permissions withdrawn. mybu will ask again before a new upload. Requests already sent cannot be recalled.

Subscriptions and purchases

Apple or Google processes subscription payments. When you buy or restore, the app sends the store's purchase proof (a signed transaction or purchase token) with your random installation ID to mybu's server, which checks it directly with Apple or Google and keeps the purchase reference, its expiry date and that installation ID to grant access. Diary text, audio, feelings and GPS routes are never part of this. Apple and Google retain transaction records under their own policies. A private device credential is stored on your phone; mybu stores only its hash to protect server access.

Maps, searches and music

MapLibre loads map resources from OpenFreeMap and other hosts named in the map style. These providers receive IP addresses and requested map areas. Nominatim receives searches or the coordinate you mark to find a place name. Street matching sends drawn waypoints to routing.openstreetmap.de. Spotify receives music queries via mybu, links you open and requests for cover images. These requests do not send your diary text, feelings, voice recordings or home-zone setting.

Location and permissions

Location is optional: you can write without it or draw a walk. When you explicitly start GPS recording, mybu keeps recording the walk with the screen locked; Android shows a notification and iOS a location indicator. Stop or pause the walk to stop GPS. Camera and microphone are used when you choose those features. Photo selection uses the system picker. Saving diary images asks for save access. Plan and backup reminders are local notifications and may be declined.

Sharing, backups and deletion

Sharing sends only what you select to the app or recipient you choose. Check diary pages before sharing: text, images and feelings visible on those pages may appear in a PDF or image. Profile → Delete everything stops walk recording, cancels reminders and deletes local records, media and cached exports. It cannot erase copies you saved to Photos, backups, recipients or data already processed by providers. AI permission is never restored from a backup. For server-held reports or quota data, contact support with your installation ID. More details in Delete your data.

AI safety and contact

AI may make mistakes. mybu is a personal journal, not a medical or emergency service. Report a generated result with its Report AI content button. Reports include only the selected result and a random installation ID and are kept for up to 90 days for safety review. For privacy requests, use the developer contact in mybu’s store listing or the contact below.

Controller: Inithex Consultoria Integral SPA · hello@inithex.com

Provider policies