I. THE KIBO MANIFESTO: YOUR WEALTH IS INVISIBLE TO US
At Kai Studios, S.A.S., we understand that the decision to outsource the mental load of your personal finances to an Artificial Intelligence assistant requires a monumental leap of faith. Kibo was designed under an unwavering premise: Zero Friction in use, Zero Risk in privacy.
You are the sole, absolute, and sovereign owner of your financial information. Our business model is sustained exclusively and transparently through our users' subscription fees. We categorically declare that KAI STUDIOS, S.A.S. DOES NOT SELL, RENT, LICENSE, or COMMERCIALIZE your spending patterns, audios, receipt photos, or balances to data brokers, insurance companies, credit bureaus, or advertising networks. We build the vault, design the calculators, and keep the servers running, but the master key to the content belongs exclusively to you.
II. SECURITY IN THE WHATSAPP ECOSYSTEM: ARE MY DATA SAFE IN A CHAT?
Kibo's immediacy lies in the fact that it lives where you already live: on WhatsApp. We understand the natural concern about the confidentiality of transmitting financial information through a social network. To guarantee enterprise-grade protection, Kibo's integration with Meta Platforms, Inc. operates under the strictest security standards in the tech industry:
- Encryption in Transit and Enterprise API (Cloud API): Kibo does not use a physical cell phone in an office to receive your messages. We operate through the official WhatsApp Business Cloud API infrastructure. When you send a voice note or a photo of a receipt, the message travels from your device to Meta's servers protected by end-to-end encryption and industry standards.
- Cryptographic Tunnel and Signature Validation (Webhooks): The transit of data from Meta's servers to our central servers (api.askkibo.com) is carried out through secure tunnels enforced with state-of-the-art encryption protocols (TLS 1.2 or higher). More importantly, our server does not blindly trust any incoming message. Every interaction that reaches our database is subjected to strict cryptographic signature validation (Signature Verification). If the message payload does not mathematically match the shared secret key between Meta and Kai Studios, the message is destroyed and rejected in milliseconds, preventing any Man-in-the-Middle attack or spoofing.
- Meta as a Transit Channel, not an Analytical Reader: In strict adherence to global WhatsApp Business policies, Meta acts exclusively as the telecommunications conduit. Your financial messages sent to Kibo's official account are not used by Meta to train its own public Artificial Intelligence models or to profile your advertising behavior on other networks like Facebook or Instagram.
III. THE "BLIND AUDIT" DOCTRINE
The "Blind Audit" is not merely a Kibo feature; it is our fundamental legal, structural, and operational doctrine. It means that our world-class technological infrastructure, Artificial Intelligence algorithms, and databases process, audit, and calculate your information in its entirety, but the human staff of Kai Studios, S.A.S. is absolutely, technically, and legally "blind" to such information in plain text. How does Human Blindness work?
At the level of our production database clusters, Personally Identifiable Information (PII)—such as your phone number or email—is processed in a segregated manner and isolated from your financial transactional information.
If a systems engineer, database administrator, or corporate executive managed to access a records table, they would only view a column of unintelligible identifiers (UUIDs - Universally Unique Identifiers) associated with heavily encrypted data fields. The human only sees a matrix of mathematical characters; the machine sees a budget. This architectural blindness guarantees that there is no possibility of bias, internal espionage, or leakage of your consumption habits originating from an employee.
IV. THE CRYPTOGRAPHIC DATA JOURNEY
To make the lifecycle of your information transparent, we break down the millimeter journey of every expense you register:
- Ingestion (The Phone): You dictate an audio: "Kibo, I paid 500 in gas." The message travels securely through the WhatsApp network.
- Transport and Validation (The Tunnel): The message arrives at our high-performance backend architecture. The system validates the webhook's cryptographic signature to confirm its legitimate origin.
- Asynchronous Reasoning (The AI Brain): The audio is deposited into ultra-high-speed in-memory processing nodes. Our Proprietary Multimodal Artificial Intelligence engine ingests the data, transcribes it, understands the context of "gas", categorizes it as "Transportation", and extracts the absolute numerical value.
- Encrypted Rest (The Vault): The structured data is injected into your Ledger within our high-security relational cluster. The moment it touches physical storage, the information is sealed using Data at Rest encryption (AES-256 GCM). Accessing it requires the deep encryption master keys of our corporate servers.
V. EXCEPTION PROTOCOLS: WHEN TO BREAK THE GLASS
The Principle of Least Privilege (PoLP) dictates that no one has total access at Kai Studios. The "blindfold" of the Blind Audit is absolute and is only lifted under three hyper-regulated, exceptional, and auditable scenarios:
- 1. Imperative Judicial Mandate: An explicit, valid, substantiated legal order issued by a competent judge in the applicable jurisdiction that legally compels the company to decrypt the records of a specific individual for serious fraud investigations at the federal or international level.
- 2. Disaster Recovery Procedures (PITR): During critical, automated, and extreme urgency processes to restore the ecosystem to an exact second in time (Point-in-Time Recovery) following a catastrophic interruption. This process is executed by computer protocols, eliminating human visual inspection.
- 3. Explicit User Consent (Bug Hunting): If you report a critical technical error in your balances that is impossible to solve by automated means, you must grant explicit, documented, and temporary consent through our official channels for a senior-level engineer to exclusively decrypt that anomalous record, repair the bug in the code, and immediately reseal the vault.
VI. THE "TOMBSTONE" PATTERN: THE RIGHT TO DISAPPEAR
What happens when you decide you no longer need Kibo and press the "Delete Account" button? In advanced financial architectures, a simple delete command risks the entire system's stability (breaking, for example, shared balances in a family plan). To solve this and radically comply with your privacy, we implemented the Tombstone Pattern. The process is irreversible:
- Identity Mutation: The system immediately overwrites and destroys all fields containing your Personally Identifiable Information (name, email, WhatsApp E.164 number), replacing them with random unintelligible UUIDs.
- Cold Table Isolation: The cryptographic fingerprint (SHA-256 Hash) of your identity is calculated and exported to an inactive and isolated database. This acts as a passive legal compliance shield to prevent fraud during Trial periods or to respond to future mandatory tax requirements, without us ever knowing who that hash belonged to.
- Absolute Sanitization: Your history in the database remains as a mathematically anonymous entity ("tombstone"). Your past expenses remain so that the global system's mathematics do not collapse, but it is technologically impossible to re-link that financial history to you, your phone, or any existing human being. You disappear from the ecosystem.
LEGAL BINDING NOTICE: This Privacy Architecture page is an explanatory, binding, and complementary document to our Global Terms and Conditions and our Comprehensive Privacy Policy. In the event of any dispute or controversy regarding the interpretation of liability limits, the master legal documents hosted on our portal shall prevail in their judicial scope.