Skip to content

Privacy Policy

Last updated Oct 27, 2026

This policy explains what Fibona AI (“we”) collects when you use fibona.ai, Fibona Agent and the Fibona iPhone app, what we do with it, and which services we share it with.

What we collect

  • Your account. When you sign in with GitHub, X, Google or Apple, we receive your name, email address (if the provider shares it; Apple may share a relay address), profile picture and account ID. We keep your sign-in sessions, a record of each iPhone signed in to your account, and the IP address of your first visit, to prevent abuse.
  • Model requests. Every request the agent sends to a language model through us, and its response. They carry your prompts and whatever code, files and output the agent includes. We keep them so you can come back to your work, and to count usage against your daily budget.
  • Your sandbox. On the web, the agent runs in a cloud sandbox of your own, which holds the files it creates.
  • How you use the website. Pages visited, clicks, browser and device details, and session recordings, collected through PostHog (below). The iPhone app sends no analytics.
  • Invites. The invite code you joined with, the codes you share and who joined with each.
  • Waiting list. The email address you give us, to tell you when the iPhone app is ready.

In the iPhone app, the agent runs on your phone: what it builds stays there, and only its model requests reach us.

Services we share it with

  • PostHog (product analytics and session replay). It records the pages you visit, what you click, and session replays of the website and the agent’s interface, including what you type there; password fields are always masked. Once you sign in, these are tied to your account ID, name and email. See PostHog’s privacy policy.
  • Language model providers, which answer the agent’s model requests. Each request, from the website or the iPhone app, is sent in full to the provider of the model it uses, directly or through a model router, and that provider’s own policy applies to what it receives.
  • GitHub, X, Google and Apple handle sign-in. We never see your password for them.
  • Our hosting, database and storage providers, which keep the data above on our behalf.

We don’t sell your data, and we don’t show ads.

How long we keep it

As long as your account exists. When you ask us to delete your account, we delete it along with your sessions, sandbox and model requests.

Your choices

  • Email [email protected] to get a copy of your data, to correct it, or to delete your account.
  • Delete your account in the iPhone app: hold the spiral button, then Account › Delete Account. It also deletes what Fibona built for that account on that iPhone.
  • Signing out of the iPhone app (hold the spiral button, then Account › Sign Out) ends that phone’s access right away.
  • Blocking PostHog’s cookies or scripts in your browser stops the analytics.

Children

Fibona is not meant for anyone under 13, and we don’t knowingly collect their data.

Changes

When this policy changes, we update it here and change the date at the top. For significant changes, we’ll also tell you on the website or by email.

Contact

Questions about your privacy: [email protected].