Privacy Policy

1. What this covers

This policy covers miraikibo.com, Kaizen (kaizen.miraikibo.com and the Kaizen apps for iPhone and Android), Nexus, our WhatsApp line, our mailing list and job applications sent through our website. It explains what we collect, why, who receives it, how long we keep it, and your rights. Our internal company work is covered by separate notices to the people involved.

2. The short version

• We never sell or rent your data and never use it for advertising.
• Some companies process data for us; each is named below with what it gets.
• Kaizen’s AI features are optional. The exceptions to «we ask first» are listed in section 4.
• You can delete your account at any time; section 9 says what goes and what can remain.
• Kaizen is for people 18 or older: if you tell us you are under 18, sign-up stops and we delete what you entered. If we learn later that an account belongs to someone younger, or under the age of majority where they live if that is higher, we close it and delete its data.

3. What we collect and why

Your account. Your email and password, or your Google sign-in or, where offered, Sign in with Apple (Google may give us your name, email and profile photo; with Apple you may use a private relay address). Sign in with Apple is not offered on the web for now. We use it to sign you in and contact you about your account. Supabase stores it.

What you record. Your route, goals, habits, the week you plan, entries about what you do and feel, your journal, your money records, budgets and accounts you add, and the Pact you write. We keep them to show them back to you and to make Kaizen work. Some can reveal your health or mood (section 5).

Kibo’s conversations and memory. Your conversations with Kibo are stored with your account. With AI on, Kibo distils facts you share (which can include health) into a memory it uses later, and we create search vectors of your text with OpenAI. Deleting a conversation does not remove what Kibo already remembered from it; to remove a memory, write to us, or delete your account.

Voice. With AI on, voice notes are transcribed by Deepgram or OpenAI. On the web, while you dictate, your browser’s own speech recognition may show live words; depending on the browser, its maker (for example Google in Chrome) may process that audio under its own policy, even with Kaizen’s AI off.

Documents and statements. Files and photos you upload (statements, receipts, screenshots, spreadsheets) are stored in our private storage and, with AI on, read by OpenAI or Anthropic to extract movements. If you give us a password for a protected statement, we keep it encrypted and may use it to open later statements from the same bank; it is never sent to an AI provider.

Gmail (Mail Sync, optional). Connecting Gmail gives Kaizen read-only access to your whole mailbox, not only your bank’s messages. Kaizen looks for messages that may be financial, from any sender, and with AI on sends their relevant text to OpenAI or Anthropic to extract movements. We keep the extracted movements, not the email bodies. Disconnecting revokes our access at Google and erases our tokens.

Bank connections (optional, where available). In the United States and Canada, Plaid connects your bank once you link it in Plaid’s window; Kaizen receives your accounts and transactions, never your bank password. We keep the connection until you disconnect or delete your account, then ask Plaid to remove it. Syncfy (Colombia and Mexico) is prepared but not live.

Payments. Paid plans on the web are handled by Stripe, which receives your email, payment details and, when tax applies, your billing address; we keep your plan, its status and dates. Store purchases, when live, go through Google Play or the App Store, and we keep a record of the purchase to prevent it from being claimed twice, even after deletion (section 9). We keep your AI credit balances: what a plan, a purchase, Pioneros or a confirmed bug report gave you, what you spent and what was reversed. Stripe sends us payment events, and we send your plan, status and amounts paid to PostHog, linked to your account, to measure revenue.

Help and reports. Reporting a problem stores your words, the screen and technical details with your account, and files them in our private issue tracker at GitHub without your name. A report is read by people on our team. With AI on, an AI assistant (Anthropic’s Claude) helps sort it. With AI off, the report form shows a switch, «Let our AI help sort this», off by default; while it is off, the report never reaches Claude or any AI. With AI on, a help answer sends your question, the screen you point at and our help text to Anthropic’s Claude Haiku; we keep a record of the call, not the answer, for 120 days.

Pioneros (optional). If you apply, we keep your interview answers (your country, age range and gender if you give it, your life situation, how you heard of us, what you wish for or why now, what gets in your way, what you used before, how much room you have, the help you prefer, and, after you join, what almost stopped you from trying Kaizen), your invitation code, your place and the comments you send. Interview answers are deleted 12 months after the interview, or earlier if you tap «Delete my answers» in your profile. If you tell us you are under 18, sign-up stops and we delete what you entered (section 2). We send a welcome email and reminders through Resend.

Explorer and research. If you answer the «would you miss Kaizen» question, we keep your first answer with your account to learn whether Kaizen is useful.

Insights. Where offered, a monthly observation sends your month’s income, spending, balance, category totals and joy and regret counts to OpenAI. Budget emoji suggestions send a category’s name to Anthropic. Where available, a Dream picture sends the sentence you wrote to Google Gemini and we keep the prompt and the image.

WhatsApp. If you link WhatsApp to your account, your messages, photos and voice notes reach Kibo through Meta and, with AI on, the AI providers above; we keep the conversation with your account and Meta keeps its own copy. If you write to our number without a linked account, we keep your number, your first message (up to 1,000 characters), its language and when you wrote, and our team may get an email through Resend with your number and messages; no AI reads them. We keep this record for 18 months after your last contact. Deleting a Kaizen account does not remove it sooner; ask us. Don’t send card numbers, ID numbers or passwords by WhatsApp.

Nexus. If you use Nexus, we keep your profile, articles, follows and discussions; some can be public if you publish them. Nexus’s writing help sends your title, subtitle, draft and instructions to Anthropic through Vercel when you ask for it; Kaizen’s AI setting does not control it. Authors you follow can reach you by email through Resend.

Mailing list. If you subscribe, Resend keeps your email to send our news until you unsubscribe. Unsubscribing stops the emails at once; after that we keep only your email address, as a suppression record, so you are never added again.

Studio updates. If you say yes to Studio updates in Kaizen, Resend sends them to your email in your language. They are off unless you turn them on; turn them off in your profile or from those emails.

Job applications. If you apply to work with us, we keep your name, email, optional portfolio link, your message, the role, language and date, and email them to our team through Resend. We keep them for 18 months after the decision on your application.

Technical records. Vercel hosts our sites and keeps request logs (such as IP addresses, pages requested and errors). Supabase hosts our database and stores files. We make encrypted database backups, configured to expire after 90 days.

4. AI

Kaizen’s AI features are optional and work after you turn them on. When they are on, each feature sends only what it needs to the provider named: Anthropic (Kibo’s chat, memory, help answers, sorting reports, extraction, emoji), OpenAI (extraction, sorting, search vectors, transcription, insights), Deepgram (transcription) and Google Gemini (Dream pictures, where available). We don’t send your name or user id with a request. Turning AI off in Kaizen stops these features for your account, but not a WhatsApp line already linked: unlink it too.

Exceptions, where data can reach an AI provider without Kaizen’s AI setting: a report you send to our team while Kaizen’s AI is off, only if you turn on «Let our AI help sort this» on the report form (it is off by default; section 3); Nexus’s writing help, when you ask for it; and your browser’s own dictation on the web (section 3). What AI says, reads or draws can be wrong; check it. How Kibo answers when someone mentions suicide or self-harm is on our safety page.

5. Sensitive information

Health details, and mood or feeling records that reveal your health, are sensitive data. Giving them is optional: you are not required to authorize their processing, and Kaizen works without them. If you write them, we use them only to keep your records and, with AI on, to personalize Kibo. We never use them for advertising or share them except with the processors in this policy.

6. Cookies and analytics

On our sites we use PostHog to understand how pages are used. Before you answer the cookie notice, measurement runs without cookies and is not joined to your account. If you reject, browser analytics stop. If you accept, we set analytics cookies, join measurement to your account and record masked screen sessions, including the addresses of pages you visit and any search terms in them; recordings are set to be kept 30 days. Whatever you choose: our servers send PostHog counts of what happens in your account (such as a plan bought or a step completed), linked to your account; we record how you arrived (campaign tags in the link and the referring site); and some campaign tags are copied onto our links to Kaizen. Browser analytics stop when your browser sends Do Not Track; the server counts do not depend on it. No third party collects information about your activity across other websites through our services. Necessary cookies keep you signed in and remember your language and your cookie choice.

7. Who receives your data

Supabase (accounts, database, files), Vercel (hosting, logs, and the gateway for Nexus writing help), Anthropic, OpenAI, Deepgram and Google (AI, sign-in, Gmail, and Play billing when live), Apple (sign-in where offered, App Store billing when live), Plaid (bank connections), Stripe (payments), Resend (email, including sign-up and password codes), PostHog (analytics), GitHub (problem reports) and Meta (WhatsApp). Each processes data for us under its own terms. Many are in the United States; when your data leaves your country, it travels under those contracts.

8. How long we keep it

Your account and records: while you keep your account. Kibo’s memory: while you keep your account. Pioneros interview answers: 12 months at most. Help-answer call records: 120 days. Closed credit balances: 395 days. Database backups: configured to expire after 90 days. Session recordings: set to 30 days. Personal data in problem reports in GitHub: 18 months after the report is closed. WhatsApp contacts without an account: 18 months after the last contact. Job applications: 18 months after the decision on them. Mailing list: until you unsubscribe; then only your email address, as a suppression record so you are never added again. Payment records at Stripe and purchase records at the stores: as their rules and tax law require. Our databases stay in force while the purposes in this policy last.

9. Deleting your account

In the app: open your profile, go to the Danger zone and tap «Delete my account». By email: write to hello@miraikibo.com from any address; we confirm it is you before deleting.

What goes: your account, records, conversations, Kibo’s memory, uploaded files, Gmail and bank connections (we ask Google and Plaid to remove our access), your Pioneros data, your AI credits (unused Extra is first refunded in proportion to what is unused, then removed) and your analytics identity link. Deleting also cancels renewal of a plan bought on our website at once. A plan bought in an app store is cancelled in that store.

What can remain: encrypted backups until they expire; problem reports in GitHub without your name, until 18 months after they are closed; past analytics events not linked to a person; Vercel’s request logs; payment records at Stripe; a record of each store purchase, kept without your account to stop it from being reused; Nexus discussions you started, without your name (their text could still identify you); what Google, Apple, Meta or Plaid keep under their own policies. If you used Sign in with Apple where it is offered, also remove Kaizen in your Apple Account settings: we can’t revoke Apple’s connection for you yet.

10. Your rights

You can ask to know what we hold about you, get a copy, correct it, delete it, withdraw a permission you gave, and object to a use. Withdrawing a permission stops future use; it does not undo what was lawfully done before. You can complain to your data authority: in Colombia, the Superintendencia de Industria y Comercio (sic.gov.co).

11. How to make a request

Write to hello@miraikibo.com with your name, what you are asking for, and how we can reach you. A person on our team answers; an AI assistant may help draft the reply. Colombia (Ley 1581): questions about your data (consultas) are answered within 10 business days, extendable once by 5 with notice; requests to correct, update or delete, and complaints (reclamos), within 15 business days, extendable once by 8. If something is missing we ask you within 5 business days; if two months pass without your reply, the request is treated as withdrawn. While a reclamo is open, we mark the data as «reclamo en trámite».

12. Changes

We tell every account holder in the app and by email before a change to this policy applies, and the mailing list too. If a change adds a new purpose, we ask for your authorization before using your data for it.