Draft, last updated 12 November 2026.
Privacy Policy
Gido is provided by Backedfly Technologies Limited (RC 10003603), a company registered in Nigeria, which is responsible for your personal information (the data controller). Its registered office is at No 5, Bailey Street, Abule Ijesha, Lagos State 100213, Nigeria. Person in charge of personal information: Victory Ebri, victory@backedfly.com.
What we collect
- Your account. Your Apple user ID or your Google account ID (see Signing in, below), a nickname, your time zone and country, your answer that you're 18 or over, and the consents you give. We never ask talkers for a real name or email.
- Your conversations. What you write to Gido and its replies, and a running summary Gido keeps so it remembers what matters to you. These often include your faith, your health and your relationships.
- Safety.
- When a message suggests someone may be at risk, we record the level and the time, never the words.
- We count how often Gido showed help, by day, country and kind of risk only, with nothing about you.
- We count by day, with no link to you, how often a message suggested the writer is under 18.
- Coins. Your balance, the coins you received and spent, and App Store transaction IDs.
- Reports and choices. Reports you make (and, for copyright, the details a legal notice needs), and Voices you hide.
- If you apply as a listener or a Voice:
- your name, email, photo and the details you give;
- for Voices who connect YouTube: your channel, your list of videos, and the captions of messages you choose to share.
- Technical. Logs with your account ID and error codes, never your messages, kept for 30 days.
Signing in
- You can sign in with Apple or Google.
- From Google we keep only your Google account ID, not your email address, name or photo, so we can recognise you next time.
- Google handles the sign-in itself, under its own Privacy Policy (https://policies.google.com/privacy). Google may use your IP address to estimate your general location, to prevent fraud.
- Unlinking Google in the app (Sign-in methods) or deleting your account removes your Google account ID from Gido.
Why, and on what basis
- To run Gido for you: reply to you, remember your conversation, keep your account and coins. The basis is our contract with you.
- Sensitive information (faith, health, relationships): only with your explicit consent, which you give before you chat and can withdraw at any time.
- To keep people safe: detect risk and show help (vital interests, and your consent).
- To meet legal duties: age checks, records of consent, handling reports and copyright notices.
We never sell your information or use your conversations for advertising. Your church can't see your conversations. People on our team don't read your conversations: no tool we use shows them. Who could access them, and how that is controlled, is described in our records and available on request.
Who processes it for us, and where
Your conversations are processed and stored on servers in the United States.
| Provider | What for | Where |
|---|---|---|
| Anthropic | The AI that writes Gido's replies and checks messages for safety. It keeps API data for up to 30 days, and doesn't use it to train its models. | US only |
| Google Cloud | Running Gido, storing photos and audio, logs | US (Oregon) |
| Render | Our database | US (Oregon) |
| Voyage AI | Finding the right part of a Voice's message | [region to be confirmed] |
| AssemblyAI | Transcribing Voices' audio (never your messages) | US |
| Resend | Emails to listeners and Voices (never chat) | US |
| Apple | Sign in with Apple, purchases | Apple's terms |
| Sign in with Google | Google's terms | |
| Cloudflare | Android only: when your mobile network can't find Gido, the app may ask Cloudflare's lookup service for Gido's address. It asks only for Gido's address and sends nothing about you or your messages (Cloudflare sees your IP address, as any website you connect to does). | Cloudflare's terms |
These transfers are protected by contracts (data processing agreements and standard contractual clauses) and, where the provider is certified, the EU-US Data Privacy Framework and its UK Extension.
How long we keep it
Until you delete it or your account. After you delete your account:
- everything is removed from our database at once;
- backups and our providers' copies are gone within 30 days;
- some providers may keep content they've flagged under their own abuse rules for longer.
Safety and referral counts carry nothing that identifies you and are kept.
Your rights
You can see and download everything (You → Privacy → Download my data), correct your details, delete your account (You → Privacy), and withdraw either consent (which stops chat). Depending on where you live, you may also object, restrict processing, or complain to your data protection authority. Contact victory@backedfly.com; we answer within 30 days.
YouTube (Voices)
If you're a Voice who connects YouTube:
- Gido uses YouTube API Services.
- By connecting, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms).
- Google's Privacy Policy applies to YouTube (http://www.google.com/policies/privacy).
What Gido keeps from YouTube:
- your channel's ID and title;
- your recent videos' titles, dates and lengths;
- the captions of messages you choose to add, used to quote and summarise them.
How we look after it:
- Refreshing: we refresh or delete this within 30 days.
- Disconnecting: deletes it at once.
- Revoking access: you can also revoke Gido's access at https://security.google.com/settings/security/permissions. We then delete your YouTube data within 30 days.
Children
Gido is only for people 18 and over. If we learn that someone under 18 has an account, we pause it and delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app and ask again for consent where needed.
If you live in the United States
See our Consumer Health Data Privacy Policy, which covers health information under Washington's My Health My Data Act and similar state laws.
If you live in Canada
- The person in charge of your personal information is Victory Ebri, victory@backedfly.com.
- Your information is processed and stored in the United States, where it may be accessed by courts and authorities under US law.
- Quebec residents can ask us for the information we hold, and how it was used.
If you live in the United Kingdom
- UK representative: [placeholder until appointed: name and address].
- We process information about your faith and health only with your explicit consent (UK GDPR Art. 9).
- Your information is transferred to the United States under the UK Extension to the Data Privacy Framework or the UK Addendum to the standard contractual clauses.
- You can complain to the Information Commissioner's Office (ico.org.uk).