Privacy Policy

This policy applies to anyone who uses the gibi mobile app, building staff who manage a community on gibi, and visitors to gibi.et.

Each building on gibi is a separate community. Your building’s committee and manager may see information needed to run fees, governance, and communication for that building.

We collect information you provide and information generated when you use gibi:

• Account details: full name, phone number, password (stored hashed), role, and building/unit association.
• Identity verification: photo of your kebele ID or national ID uploaded during onboarding or when requested by your building.
• Building context: location label, building name, block, unit number, ownership/occupancy/representation status, and optional vehicle plate numbers and car types.
• Financial activity: invoices, payment status, digital receipts, ledger entries visible under your role, and payment references from Telebirr, CBE Birr, or similar providers when you pay in-app.
• Communications: announcements you receive, meeting minutes, and notification preferences.
• Documents: files uploaded to your building’s document vault when you have access.
• Device data: push notification tokens (Firebase Cloud Messaging) if you enable notifications.
• Technical logs: app/API request metadata such as IP address, timestamps, and error diagnostics used to keep the service secure and reliable.

We use personal data to:

• Create and secure your account and bind you to the correct unit.
• Bill units, process payments, issue receipts, and maintain the building ledger.
• Let authorized staff manage units, users, expenses, reserve funds, announcements, and documents.
• Send OTP codes, SMS alerts, and push notifications you opt into.
• Prevent fraud, enforce role-based access, and investigate security incidents.
• Improve reliability, support pilots, and comply with applicable law.

We do not sell your personal data. We share it only as needed to operate gibi:

• Your building’s authorized staff (manager, treasurer, committee) within the same building tenant.
• Other residents only where the product intentionally exposes information (for example, building-wide announcements or ledger visibility configured for your role).
• Payment providers (such as Telebirr or CBE Birr) when you choose to pay through them.
• SMS and notification providers to deliver verification codes and alerts.
• Infrastructure providers that host our servers and databases under contract.
• Regulators, courts, or law enforcement when required by valid legal process.

Data is stored on servers used to run gibi and protected with industry-standard measures including encrypted transport (HTTPS/TLS), hashed passwords, and role-based access controls.

ID document images and uploaded files are stored in access-controlled storage available only to authorized roles.

We retain data while your account is active and as long as needed for building records, billing history, audit logs, and legal obligations. Some ledger and audit records may be kept longer because they form part of an immutable building history.

Depending on your role and local law, you may request access to, correction of, or deletion of personal data we hold about you.

You can update profile details, vehicles, and notification preferences in the app where your role allows.

You can delete your account from Profile → Delete account in the gibi mobile app. Enter your password to confirm. If your account is still linked to a unit you own or represent, ask your building manager to clear that link first.

To request a copy of your data, contact us at hello@gibi.et from the phone number on your account.

gibi is intended for adults managing or living in residential buildings. We do not knowingly collect personal data from children under 13. If you believe a child has provided data to us, contact hello@gibi.et.

gibi is operated from Ethiopia. If infrastructure or support providers process data outside Ethiopia, we require appropriate safeguards consistent with applicable law.

We may update this policy from time to time. We will post the revised version at gibi.et/privacy and update the “Last updated” date. Continued use of gibi after changes means you accept the updated policy.

Questions about this policy or your data:

Email: hello@gibi.et

Website: https://gibi.et