Sibliny ("we", "our", "us") operates the Sibliny mobile application. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our app.
1. What Sibliny Is (and Is Not)
Sibliny is a family care coordination tool. It is designed to help family members organize care tasks, medication reminders, appointments, and communication for a loved one. Sibliny is NOT a medical device, NOT a healthcare provider, and NOT a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). The information you provide through Sibliny is NOT protected by HIPAA. Your information is protected under this Privacy Policy and applicable privacy laws.
2. Information We Collect
Information you provide directly
- Account information: name, email address
- Care circle information: care recipient name, relationship, care notes
- Health-related information: medication names, dosages, appointment times, symptom notes, mood check-ins
- Care coordination data: tasks, schedules, expense records, emergency contacts
- Communications: messages between care circle members
Important: Medication reminders are convenience tools only, not medical advice. Burnout assessments are self-assessment tools, not clinical diagnoses. Always consult healthcare professionals for medical decisions.
Information collected automatically
- Device information: device type, operating system version
- App usage data and crash reports — collected only if you turn on "Share Analytics & Crash Reports" in Settings, which is off by default
- We do NOT collect location data, contacts, photos, or browsing history unless you explicitly share them
3. How We Use Your Information
We use your information solely to provide and improve the Sibliny service:
- Deliver care coordination features (reminders, shared calendars, task management)
- Send medication reminders and appointment notifications you configure
- Enable communication between care circle members you authorize
- Generate care summaries and digests you request
- Improve app performance and fix bugs via pseudonymous crash reports — linked to an account identifier, never to your name or email
We do NOT use your health information for advertising, marketing, or data mining. We do NOT sell your personal or health information to any third party. We do NOT share your data with insurance companies, employers, or data brokers.
4. Who Can See Your Information
Your information is shared ONLY with:
- Care circle members you explicitly invite and authorize
- Our infrastructure providers (cloud hosting, crash reporting) solely to operate the service, under strict data processing agreements
Care circle roles control visibility: Admins see all circle data. Members see shared tasks, medications, and messages. Observers see activity summaries only. You control who is invited and their role.
5. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.2+) for all data transmission
- Encryption at rest for stored data
- Firestore Security Rules ensuring users can only access data in their care circles
- Secure authentication via Firebase Authentication (Google LLC)
While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your information.
6. Data Retention and Deletion
We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at hello@agentm.co.uk. Upon receiving a deletion request, we will permanently delete your data within 30 days. Data that has been shared with care circle members (e.g. care log entries) will be anonymized upon account deletion.
7. Your Rights
Depending on your location, you may have the following rights:
- Right to access: Request a copy of your personal data
- Right to correct: Update or correct inaccurate information
- Right to delete: Request deletion of your account and data
- Right to data portability: Export your data in a portable format
- Right to withdraw consent: Stop data processing at any time
- Right to opt out of sale: We do not sell your data, but you may confirm this at any time
To exercise any of these rights, contact us at hello@agentm.co.uk. We will respond within 30 days.
8. For European Union Users (GDPR)
If you are located in the European Economic Area, we process your health-related data based on your explicit consent, which you provide during account setup. You may withdraw consent at any time by deleting your account or contacting us. Our legal basis for processing is Article 9(2)(a) of the GDPR (explicit consent for special category data).
Your data is stored in Europe. Cloud Firestore and Firebase Storage hold it in Google
Cloud's eur3 European multi-region, and our Cloud Functions run in
europe-west1 (Belgium).
Where a processor nonetheless needs to transfer personal data outside the EEA or the UK — for example for support or engineering access — that transfer is governed by the Google Cloud / Firebase Data Processing Addendum, which incorporates the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the supplementary measures described in that addendum. We do not rely on your consent as a transfer mechanism: the derogation in Article 49(1)(a) is intended for occasional transfers and cannot support systematic, ongoing processing.
9. For California Users (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do NOT sell your personal information. To exercise your rights, contact us at hello@agentm.co.uk.
10. Children's Privacy
Sibliny is not intended for use by children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us at hello@agentm.co.uk and we will delete it promptly.
The person receiving care may be a child. Where the person receiving care is under 16, the account holder must hold parental responsibility for that person before entering their information into Sibliny.
11. Third-Party Services
Sibliny uses the following third-party services to operate:
- Firebase Authentication (Google LLC) — account sign-in
- Cloud Firestore and Firebase Storage (Google LLC) — database and file storage
- Sentry (crash reporting — pseudonymous error data, linked to an account identifier, never to your name or email)
- PostHog (pseudonymous usage analytics — linked to an account identifier, never to your name or email)
- RevenueCat (subscription management)
Each provider operates under their own privacy policy and processes data solely to provide their service to us. We have data processing agreements with these providers.
12. Data Breach Notification
In the event of a data breach affecting your health-related information, we will notify you via email and in-app notification within 60 days of discovery, as required by the FTC Health Breach Notification Rule. The notification will include the types of data affected and steps we are taking to protect you.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification and by updating the "Last updated" date. Continued use after changes constitutes acceptance.
14. Contact Us
For privacy questions, data requests, or concerns:
Email: hello@agentm.co.uk
Kept with the app’s source code and published here unchanged, apart from the contact address.