Tisbo is an application developed and operated by Oscar García, trading under the ARCENITH brand. This policy explains what personal data we process, for what purpose, who we share it with and what rights you have over it when you use the Tisbo app or the tisbo.app website.
1. Data Controller
- Controller: Oscar García (trading as ARCENITH)
- Activity: development and operation of the Tisbo application
- Country of establishment: Spain
- Privacy contact: help@tisbo.app
2. Data We Collect
We may collect the following types of data:
- Account data: email address and authentication identifiers, including those from Google or Apple if you sign in with those providers
- Data you provide: date, time and place of birth and other information needed to generate your readings
- Usage data: interactions within the app, features used and session data
- Device data: basic technical information (device type, operating system version, language)
- Notification data: push notification token and your delivery preferences
- Support data: what you send us by email or through the contact form
3. Google Account Data
You can create your account and sign in to Tisbo with your Google account. When you do, and only with your authorisation, Google shares a minimal set of profile data with us.
What we receive
- The unique identifier of your Google account
- Your email address and its verification status
- Your name and, where available, your profile picture
We only request the basic OpenID Connect scopes (openid, email and profile). We do not request or receive access to Gmail, Google Drive, Contacts, Calendar or any other Google service.
How we use it
- To create your account and authenticate you on each sign-in
- To identify you inside the app and link your profile, your readings and your subscription
- To send you service communications and answer your support requests
We do not use this data for any other purpose.
Who we share it with
We do not sell, rent or trade your Google account data. It is only accessible to the providers that process data on our behalf, as data processors, and solely to operate the service:
- Google Cloud: hosting, database and service infrastructure
- Firebase, by Google: authentication and application services
We do not share this data with advertisers, ad networks, data brokers or any third party for marketing purposes. We would only disclose it to an authority where a legal obligation requires us to.
Advertising, sale and AI training
- We do not use your Google account data for advertising or ad personalisation
- We do not sell or transfer this data to third parties for commercial purposes
- We do not use this data to train, fine-tune or improve artificial intelligence or machine learning models, whether our own or third-party ones
- We do not allow humans to read this data, except with your explicit consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymised
How we protect it
- Encryption in transit using TLS 1.2 or higher on all communications
- Encryption at rest in our databases and backups
- Access restricted to strictly necessary personnel, with two-step verification
- Periodic permission reviews and access logging
How long we keep it
We keep your Google account data for as long as your Tisbo account is active. If you delete it, we erase the data from our systems immediately and irreversibly; any backups that may contain it are rotated and overwritten within a maximum of 30 days.
How to delete it or revoke access
- In the app: Settings → Privacy → Delete account
- By writing to help@tisbo.app from the email address linked to your account
- By revoking Tisbo access at myaccount.google.com/permissions
Revoking access from your Google account prevents future sign-ins, but it does not on its own delete the Tisbo account you already have: to do that, delete it from the app or write to us.
4. Limited Use of Google API Data
Tisbo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Specifically, we limit the use of that data to providing and improving user-facing features within Tisbo, and we do not use it for advertising, sale or artificial intelligence model training.
5. How We Use Your Data
We use your data to:
- Provide personalised readings and insights
- Improve the app experience and its features
- Send notifications (reminders, insights or product updates)
- Ensure the service works properly and securely
- Analyse usage in aggregate to optimise the product
6. Legal Basis (GDPR)
We process your data based on:
- Contract: to create and maintain your account, authenticate you and deliver the Tisbo service, including your Google account data when you choose that sign-in method
- Consent: when you provide personal data for your readings or enable notifications
- Legitimate interest: to improve the product, prevent abuse and keep the platform secure
Data submitted through our contact form (name, email, topic and message content) is processed to handle your request, provide support and keep a record of communications related to service quality and security. We keep those records only for as long as needed to respond, follow up and comply with legal obligations.
7. Third-Party Services
We rely on the following providers, which process data on our behalf:
- Google Cloud (hosting, database and service infrastructure)
- Firebase, by Google (authentication and application services)
- Google Play, by Google (distribution and payments on Android)
- Apple (distribution and payments on iOS)
- RevenueCat (subscription status management)
- OpenAI (generation of reading content)
These providers process data under their own privacy policies and under the data processing agreements signed with us.
8. Subscriptions and Payments
Tisbo offers optional paid subscriptions.
- Payments are processed by Apple (App Store) or Google Play, depending on the platform you subscribe from
- We do not receive or store your card or payment method details
- We process your subscription status to unlock paid features
9. Push Notifications
Tisbo may send push notifications related to:
- Insights and readings
- Reminders
- Product updates
You can manage or disable them in the app settings or in your device settings.
10. Data Retention
We keep your data for as long as your account is active. When you delete it, we erase your personal data immediately, except for records we are required to keep for legal, accounting or tax reasons. Backups are rotated and overwritten within a maximum of 30 days.
11. Your Rights (GDPR)
You have the right to:
- Access your data
- Request its correction or deletion
- Request restriction of processing or object to it
- Withdraw your consent at any time
- Request data portability
You can exercise these rights by writing to help@tisbo.app. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
12. Data Deletion
You can delete your account and all associated data from Settings → Privacy → Delete account inside the app, or by writing to help@tisbo.app from the email address linked to your account. If you signed in with Google, remember to also revoke access at myaccount.google.com/permissions.
13. Data Security
We apply appropriate technical and organisational measures to protect your data: encryption in transit using TLS 1.2 or higher, encryption at rest in databases and backups, role-based access control, two-step verification for administrative access and periodic permission reviews.
14. International Transfers
Your data may be processed outside the European Economic Area through our service providers. Where this happens, the transfer relies on an adequacy decision of the European Commission or on the standard contractual clauses approved by it.
15. Contact
For any privacy-related question:
16. Changes to This Policy
We always publish the current version on this page, with its last updated date. If a change materially affects how we process your data — in particular your Google account data — we will notify you in the app or by email before it takes effect. Continued use of the app implies acceptance of the updated policy.