Last Updated: 11 October 2026

Privacy Policy

Fibonacci Impact LLC (“Company”, “we”, “us”, or “our”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites (including fib.im and any other websites we operate) or use our apps, including Socials at socials.fib.im and ToolBox at toolbox.fib.im.

By accessing our services, you agree that you have read, understood, and agreed to this Privacy Policy.

1. Information We Collect

We may collect information you provide directly (e.g., when creating an account, making purchases, submitting content) and automatically (e.g., through cookies and analytics tools). This includes:

• Name, email address, phone number
• Billing and shipping address
• Payment information (processed securely by third parties)
• Content you upload or submit, including video and image files
• Usage data (pages viewed, device information, location data)
• Information from social media accounts you choose to connect, described in section 3

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our websites and apps
• Publish content to the destinations you select, at your instruction
• Process transactions
• Communicate with you
• Improve our services
• Protect against fraud, unauthorized activities, and legal issues

3. Connected Social Media Accounts

Our Socials app lets you connect accounts on third-party platforms — including TikTok, Instagram, Facebook, YouTube, X, LinkedIn, Pinterest, Threads, and Google Business Profile — so that you can publish your own content to them from one place. Connecting an account is always your choice, and you can disconnect at any time.

What we receive

When you connect an account, the platform gives us only what its permissions allow. For TikTok, using the user.info.basic, video.upload, and video.publish permissions, that is:

• Your account identifier, display name, and profile picture, so we can show you which account you are publishing to
• An access token, and where the platform provides one, a refresh token
• The permissions you granted

How we use it

We use this information for one purpose: to publish the content you submit, to the accounts you select, when you tell us to. We display your account name and picture so you can confirm where a post is going.

What we do not do

• We do not sell your personal information or your connected-account data, and we do not share it with third parties other than the platform it belongs to.
• We do not use connected-account data for advertising, profiling, or to build audience segments.
• We do not use your connected-account data or the content you publish through our services to train artificial intelligence or machine learning models.
• We do not read your private messages or browse your feed. The permissions we request do not allow it, and we do not request permissions we do not need.

Storage and removal

Access and refresh tokens are encrypted before they are stored. You can end our access at any time, in either direction:

• Disconnect the account in our app, which deletes the stored tokens for it; or
• Revoke our access from the platform itself. On TikTok this is Settings and privacy → Security and permissions → Manage app permissions.

Revoking access on the platform stops any further publishing immediately. Content already published stays on the platform, and is yours to manage or delete there.

TikTok

Our use of information received from TikTok APIs adheres to the TikTok Developer Terms of Service, and our use of that information is limited to providing the publishing features you have asked for. TikTok is a trademark of its owner; we are not affiliated with, endorsed by, or sponsored by TikTok or any other platform we integrate with.

4. Sharing Your Information

We may share your information with:

• Service providers (hosting, analytics, payment processors) acting on our instructions
• The social media platforms you have chosen to connect, in order to publish what you submit
• Legal authorities where we are required to do so

We do not sell your personal information.

5. Cookies, Analytics and Error Reports

We use cookies and similar technologies where our services need them, for example to keep you signed in. You can adjust cookie settings in your browser.

We measure visits to our websites with Cloudflare Web Analytics. It sets no cookies, uses no local storage and does not fingerprint your browser; it records page views, the referring page, your country and your browser and device type, which we see only as totals. See Cloudflare’s Privacy Policy.

When one of our apps, websites or servers hits an error, it sends an error report to our own error-tracking system (GlitchTip, open-source software we run ourselves on our own servers). A report contains the error message and technical trace, the page or screen address without any query string or fragment, the steps just before the error (pages opened, requests made, buttons clicked), your browser, operating system and device type, the app version, the time, and your IP address. It contains no cookies, no account name or email address, no form contents or uploaded content, and no recordings of your session. We use error reports only to find and fix errors, only we have access to them, and we do not send them to any third-party error service.

For full details, please see our Cookie Policy.

6. Your Privacy Rights

Depending on your location, you may have rights like:

• Access your data
• Correct your data
• Delete your data
• Object to processing
• Withdraw a permission you previously granted

To exercise any of these, email [email protected] or use our contact us form. We will respond within the time your local law requires, and within 30 days where no period is specified.

7. How Long We Keep Your Data

We keep account information for as long as your account is active. Connected-account tokens are deleted when you disconnect that account. Content you have uploaded, and the record of where it was published, are kept while your account is active so that you can see your own posting history; email [email protected] to have them deleted sooner. Copies may persist in encrypted backups for a limited period after deletion. Error reports are deleted after 90 days.

8. Where We Store and Process Your Data

We rent servers from Hetzner in Germany and from RackNerd in Ireland, France and the United States. Our apps and their databases, our own single sign-on service at auth.fib.im (through which you sign in to most of our apps), the service that receives the contact forms on our websites, our e-mail (our mailboxes and the messages our services send, including the notification e-mails from our contact forms), error tracking and monitoring run on these servers, and we may move them between these locations, for example for maintenance or disaster recovery. Uploaded files and encrypted backups are stored with Backblaze in the European Union. Cloudflare delivers our websites and protects the traffic to our services through its global network.

This means your information may be transferred to, and processed in, a country other than your own, including countries that may not offer the same level of data protection as your own. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards for that transfer.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. Access to our systems requires multi-factor authentication, and credentials for connected accounts are encrypted at rest.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You use our services at your own discretion and risk.

10. Children

Our services are not directed to children. You must be at least 18 years old, or the age of majority where you live, to use them, and at least the minimum age required by any platform you connect. We do not knowingly collect personal information from children. If you believe a child has provided us information, email [email protected] and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will change the “Last Updated” date above, and where a change materially affects how we handle your information we will make reasonable efforts to notify you.

12. Contact Us

If you have any questions about this Privacy Policy, email [email protected] or use our contact us form.

Fibonacci Impact LLC
Sharjah Media City (Shams), Sharjah, United Arab Emirates
[email protected]

Contact us