Legal

Privacy Policy

Effective date: September 6, 2026 · Operator: Bibotecture Ltd

This Privacy Policy explains how Bibotecture Ltd ("Bibotecture", "we", "us") processes information when you use CueSet, including its iPhone app, keyboard and Share extensions, Chrome experience, and related services.

Questions, deletion requests, and privacy requests can be sent tohello@bibotecture.com.

Information we process

Account information

When you sign in, we process your email address and account identifier to authenticate and secure your account.

Conversation and coaching content

If you import a chat, use the Share extension, or request remote coaching, CueSet may process messages, senders, timestamps, platform metadata, contact details you provide, notes, questions, coaching responses, and selected coach preferences.

The iPhone app and extensions store active conversation and coaching files locally in the iOS App Group so the app and keyboard can share the active coaching context. When remote coaching is requested, the relevant context is sent to our backend and AI provider to generate a response. On-device coaching runs model inference on the device where supported.

Diagnostics

We use limited, redacted diagnostics to operate and troubleshoot CueSet. Diagnostic events may include an error type, feature, operation, timestamp, and native error code, but are configured to exclude chat content, request payloads, screenshots, and contact data.

How we use information

We use information to authenticate users, provide coaching and suggestions, maintain coaching context and preferences, secure and improve the service, and respond to support or deletion requests.

We do not sell personal information or use conversation content for advertising or to train our AI models.

Service providers

We use service providers such as Supabase for authentication and database hosting, Vercel for hosting, OpenAI for remote AI processing when requested, and Sentry for redacted diagnostics. Providers process information only as needed to provide their services and under their own terms and privacy practices.

Retention and deletion

Local conversation, contact, and coaching files remain on your device until you remove them or delete your account. Server-side coaching memory is associated with your account and is deleted when you delete your account. Diagnostic events are retained for up to 30 days.

You can delete your account from Settings → Delete Account inside CueSet. Deletion is permanent and cannot be undone. Provider backups or security logs may remain temporarily under the provider's retention and backup processes.

Security and extensions

We use HTTPS for production network communication. Authentication sessions are stored using secure iOS storage, and the keyboard shares required data through the protected iOS App Group.

The keyboard can read text entered into its host text field to provide coaching. Full Access is required for remote coaching. The Share extension processes only content you explicitly share with CueSet.

Children and policy changes

CueSet is not directed to children under 18, and we do not knowingly collect personal information from children.

We may update this policy when our data practices change. We will post the updated policy on this page and revise the effective date.