Privacy policy

Who we are

This website and the Capi & Bara app are run by Capi & Bara. For anything on this page, email capi.and.bara@gmail.com.

⚠️ To complete before launch: registered business name, address and registration number. A privacy policy has to name a real, contactable entity.

The short version

• The app has no accounts and no login. We never ask for your name.
• We don't see your card: Apple, Google and PayPal handle payments.
• We keep only what we need to deliver what you bought or asked for.
• We don't sell your data, and there are no ads.

On this website

When you join the Peep Club or a waitlist

Your email address and which list you joined (the Peep Club, the plushies waitlist or the app waitlist). We send you one email right away to say you're on the list, and later only news about Capi & Bara.

When you request a personalized video

Your email address, the occasion, the length you picked, what you tell us the video should be about, and — if you attach one — the photo you send us. We have to read and look at all of it to make your video.

Photos are stored in a private cloud bucket. They are not public, not indexed, and not posted anywhere. We use your photo only to make the video you asked for. We will never put it on social media, in an ad, or on this site unless you give us separate, explicit permission.

Please only send photos you have the right to send. If other people are in the picture, make sure they're happy about it.

When you pay with PayPal

Personalized videos and the bigger supports are paid on PayPal. PayPal tells us the payment arrived, with the name and email on your PayPal account, so we can match it to your request. We never see your card or bank details.

In the Capi & Bara app

No account, just a random ID

The app doesn't ask you to sign up. The first time it opens, it creates a random ID on your phone (it isn't your phone number, your advertising ID or anything else about you). The app sends it along with your purchases, cards and requests, so we can connect them to each other and give you back what's yours. Deleting the app deletes the ID.

Purchases

Stickers, the coloring book, animated cards, personalized videos and supports are bought through the App Store or Google Play. They send us a receipt for each purchase, which we check with Apple or Google to make sure it's real before we unlock or make anything. We keep the receipt's details (what was bought, when, and the store's transaction number). We never see your name, card or Apple / Google account.

Animated cards and thank-you videos

The words you write on a card (for example who it's for and your message) are saved with your order, and we make the video on our own servers. The finished video is stored so you can open it again from the app. It's only reachable through a private link that the app keeps; it isn't listed or shown anywhere. If you share it, whoever you share it with can watch it.

"Help me write it"

If you use it, what you type (who the card is for, who it's from and what you want to say) is sent to OpenAI, which writes a suggestion for you to edit. OpenAI doesn't use it to train its models, and keeps it for no more than 30 days to prevent abuse. We count how many times the feature is used per day, per phone and per internet connection, to stop bots.

The founders' wall

If your support includes the founders' wall, you choose the name that appears there — your name, a nickname, or nothing at all. That name is public: it's shown in the app and on this website. You can change it or take it down from the app, or by emailing us.

Your photos

If you attach a photo to a personalized video request, it's handled exactly like on the website (see above): the app only sees the one photo you pick. Otherwise it only asks to add to your photo library, to save the wallpapers and videos you choose to save.

News notifications

Only if you turn on "News from Capi & Bara". Your phone then subscribes, through Google's Firebase Cloud Messaging, to our news in your language, and we send a few notifications a week at most (a new post, a new video, news from the factory). We don't store anything about your phone for this. Turn it off in the app or in your phone's settings whenever you like.

What the app doesn't do

No ads, no tracking across other apps or websites, no location, no contacts, no microphone. Adding stickers to WhatsApp happens between the app and WhatsApp on your phone; we don't see your chats.

Cookies and tracking (website)

We use Google Analytics to count visits and see which parts of the site people actually read. It stays switched off until you say yes. Until you choose, no analytics cookie is written and Google receives no identifier for you.

Saying no costs you nothing — the site works exactly the same. Your choice is remembered on your own device, and you can change it by clearing this site's data in your browser. We do not run advertising pixels or share your browsing with advertisers.

Automatically

Our hosting provider keeps standard server logs (IP address, device or browser, time of request) for security and troubleshooting. We use them to stop spam and abuse, not to profile you.

Why we're allowed to hold it

• To give you what you asked for — we can't make a card, a video or unlock stickers without the details of your order.
• Your consent — for the Peep Club and waitlist emails, and for Google Analytics on the website. You can take it back at any time.
• Our legitimate interest — keeping the website and the app secure and free of spam and abuse.
• Legal obligation — tax and accounting rules make us keep records of sales for a set number of years.

Who else sees it

Only the companies we need to run Capi & Bara, and only what they need:

• Google Cloud / Firebase — hosts this website and our servers, stores our database, your photos and your card videos, and delivers news notifications if you turn them on;
• Resend — sends our emails (your email address and the email's content);
• OpenAI — writes card suggestions, only when you use "Help me write it";
• Apple and Google — process app purchases, under their own privacy policies;
• PayPal — processes payments for personalized videos and bigger supports;
• Google Analytics — only on the website, and only if you agreed to it.

We do not sell your data, rent it, or hand it to advertisers. Ever.

Where your data goes

These providers are mostly in the United States, which means your data may be processed outside your country, under the safeguards those providers have in place.

How long we keep it

• Peep Club and waitlist emails: until you ask us to remove you.
• Photos attached to a video request: deleted 90 days after we deliver your video (or 6 months after the request, if it never goes ahead), or sooner if you ask.
• Card and personalized videos: kept so you can open them again; ask us and we'll delete them.
• Purchase and order records: as long as tax law requires.
• "Help me write it" usage counts: a daily counter, not what you wrote.
• Server logs: a short rolling window.

Your rights

You can ask us to:

• tell you what we hold about you,
• correct anything that's wrong,
• delete it,
• send you a copy in a portable format,
• stop emailing you.

Email capi.and.bara@gmail.com and we'll sort it out. For something from the app, tell us roughly when you bought it or what the card said, so we can find it without an account.

If you think we've handled your data badly, you can complain to the data protection authority in your country.

Children

Capi & Bara are cute, but this website and the app are meant for grown-ups, who make the purchases. We don't knowingly collect data from children under 13. If you believe a child has sent us something, email us and we'll delete it.

Changes

If this policy changes in a way that matters, we'll update the date at the top and — for anything significant — tell the Peep Club by email.