VERSION 3.0 — INTERNATIONAL EDITION
NIIBU INC.

Cookie Policy
and Cookies Preferences

FIELD VALUE
Version 3.0
Effective date 27 July 2026
Last reviewed 27 July 2026
Owner Niibu Inc., a Delaware corporation
Applies to niibu.com and subdomains, Niibu customer app, niibu PRO, niibu Cherry
Review cycle Quarterly, and on any release that adds a provider or an SDK
Status Draft for counsel review. Amber boxes mark open items.
How to use this document

Part one is the public Cookie Policy, ready to publish once the amber items are resolved. Part two is the interface copy for the Cookies Preferences screen, written as strings a developer can lift directly. Part three is the publication checklist.

PART ONE

Cookie Policy and Cookies Preferences

How Niibu uses cookies, mobile identifiers and similar technologies across our website and apps, what each one does, and how you control them.

01 Summary

Niibu uses a small number of cookies that are required for the site and app to work, and a larger set that are optional. Optional cookies cover preferences, analytics and advertising.

On your first visit we ask for your choice before any optional technology loads, and you can change or withdraw that choice at any time from the Cookies Preferences page or from Settings inside the app.

Saying no to optional cookies does not limit your access to Niibu. You can still browse, book providers, message, and manage your account.

Our commitment on sensitive activity

We do not use health, cycle tracking, or dating activity to target advertising, and we do not share that activity with advertising partners.

See Section 07.

02 Who this applies to

This policy applies to niibu.com and its subdomains, the Niibu customer app, the niibu PRO provider app, and the niibu Cherry creator app.

The data controller, or business, is Niibu Inc., a Delaware corporation.

Confirm before publishing

Registered office address, EU and UK representative appointed under Article 27 of the GDPR and UK GDPR, and the list of Niibu group entities that act as joint controllers in each market.

This policy sits alongside our Privacy Policy, which explains everything else we do with personal information. Where the two documents overlap, the Privacy Policy governs how the underlying data is handled and this policy governs how it is collected from your device.

03 What these technologies are

Cookies are small text files placed on your device by a website. First party cookies are set by Niibu. Cookies set by another company on our pages are described here as partner cookies.

  • Local storage and session storage hold small amounts of data in your browser, similar to cookies but not sent with every request.
  • Pixels and tags are tiny images or snippets of code that record that a page loaded or an action happened, for example a completed booking.
  • Software development kits, or SDKs, are partner code inside our apps that can read device identifiers.
  • Device and advertising identifiers are numbers assigned by your phone operating system, described in section 05.

Throughout this policy we use the word cookies to cover all of the above unless we say otherwise.

04 Cookies we use

The tables below list every cookie category, what it does, and the maximum life of each cookie. Exact names ending in a random string vary by account and by partner container.

STRICTLY NECESSARY (LEGITIMATE INTEREST)

Required to sign you in, keep your session secure, process payments and remember this consent choice. These load without consent because Niibu cannot work without them.

FUNCTIONAL (CONSENT)

Remember choices you have made so the app feels the same next time, such as your language, city and support chat history. Turning these off will not break Niibu, but you will set some things again on every visit.

ANALYTICS (CONSENT)

Tell us which screens people use, where bookings fail, and which features are worth building. Data is aggregated and we do not use it to identify you personally. Never placed on Vita or Spark screens.

ADVERTISING (CONSENT)

Let us measure which ads bring people to Niibu and show you relevant ads elsewhere. Health, cycle and dating activity is never used for this. Turning this off means you see the same number of ads, just less relevant ones.

05 Mobile app identifiers

Our apps do not use browser cookies. They use identifiers provided by your phone.

06 Providers we work with

The following companies may set or read cookies and identifiers through Niibu. Each one processes data under its own privacy notice.

Confirm before publishing

This list must match your live tag manager container and your app SDK manifest. Regulators treat an incomplete provider list as an accuracy failure. Re audit it every quarter and after every release that adds an SDK.

07 Sensitive activity

Some parts of Niibu touch information that many privacy laws treat as sensitive or special category, including health and wellness bookings, cycle and symptom entries in Niibu Vita, and dating activity in Niibu Spark.

  • We do not place advertising or analytics tags on Vita or Spark screens.
  • We do not build advertising audiences from health, cycle, or dating activity, and we do not share that activity with advertising partners.
  • Session replay, where used, masks all input fields and is disabled entirely on health and dating screens.
  • Where a law requires explicit consent for sensitive data, we ask for it separately in the product rather than relying on your cookie choice.

09 How long cookies last and when we ask again

Session cookies disappear when you close your browser. Persistent cookies last for the period shown in the tables in section 04, counted from your most recent visit. No cookie we set lasts longer than 24 months.

We ask for your choice again in three situations: 12 months after you last answered, whenever we add a provider or a purpose that your existing choice does not cover, and whenever you clear your cookies, since your consent record is stored in one.

10 Managing your choices

On Niibu

Open the Cookies Preferences page, or in the apps go to Settings, Privacy, Cookies and tracking. Your choice applies to the browser or device you are using.

In your browser

Every major browser lets you block or delete cookies through its settings. Blocking strictly necessary cookies will sign you out and may break booking and payment. Instructions live in the help centres for Safari, Chrome, Firefox and Edge.

On your phone

iOS users control app tracking under Settings, Privacy and Security, Tracking. Android users can reset or delete the advertising ID under Settings, Google, Ads.

Signals we honour

We recognise the Global Privacy Control signal. When your browser sends it, we treat it as an opt out of advertising cookies and of any sale or sharing of personal information, and we apply it automatically without asking you again. We do not respond to Do Not Track headers, because there is still no agreed standard for how a business should interpret them.

Industry opt out tools

You can also opt out of interest based advertising from participating companies at youradchoices.com, youronlinechoices.eu, youradchoices.ca and optout.networkadvertising.org. These tools store their own cookie, so they stop working if you clear your browser.

11 Your rights by region

European Economic Area and United Kingdom

Optional cookies load only after you opt in. You may access, correct, delete, restrict, or object to the processing of data collected through cookies, and you may lodge a complaint with your national supervisory authority or with the UK Information Commissioner’s Office.

Canada

Under the Personal Information Protection and Electronic Documents Act we rely on your express consent for advertising cookies and for anything involving sensitive information. Under Quebec’s Law 25, any technology that identifies, locates, or profiles you is switched off by default, and we tell you how to turn it on before we use it.

United States

If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you may opt out of the sale of personal information and of sharing for cross context behavioural advertising, opt out of profiling that produces legal or similarly significant effects, and ask us to access, correct, or delete your information. Exercise these rights through the Cookies Preferences page or the Do Not Sell or Share My Personal Information link in our footer. We honour Global Privacy Control as a valid opt out preference signal. We do not knowingly sell or share the personal information of anyone under 16, and we do not discriminate against you for exercising a right.

Mexico

Under the Federal Law on Protection of Personal Data Held by Private Parties, you may exercise your access, rectification, cancellation and objection rights, and revoke consent, by writing to the address in section 15. Our full privacy notice in Spanish is available at niibu.com/mx/aviso-de-privacidad.

South Africa and Indonesia

Under the Protection of Personal Information Act and Indonesia’s Personal Data Protection Law we obtain consent before setting optional cookies and before sending direct marketing, and you may withdraw that consent at any time.

Confirm before publishing

Only list a market once you actually operate there and have an information officer or local representative in place where the law requires one. South Africa requires a registered Information Officer. Mexico requires the privacy notice to be live at the URL you cite.

12 International transfers

Niibu is based in the United States and our providers operate globally, so data collected through cookies may be transferred outside your country. For transfers out of the EEA and the UK we rely on the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum, or on an adequacy decision where one applies. We assess each transfer and apply extra safeguards such as encryption in transit and at rest, and pseudonymisation of identifiers. You can request a copy of the safeguards we use by writing to the contact in section 15.

13 Children

Niibu is not directed to children. You must be at least 18 to hold an account, and Spark, our dating experience, is available only to adults. We do not knowingly set advertising cookies for anyone we know to be under 18. If you believe a child has used Niibu, contact us and we will delete the account and the associated identifiers.

14 Changes to this policy

We update this policy when our technology or our providers change. Material changes are announced in the app and reset your consent so that you can choose again.

15 Contact us

Questions about this policy, or a request to exercise your rights, go to privacy@niibu.com. We answer within 30 days, or sooner where the law requires it.

Confirm before publishing

Postal address of Niibu Inc., name and address of the EU representative and the UK representative, the South African Information Officer, and the toll free number required by the California Consumer Privacy Act if you do not offer an online only request channel.

PART TWO

Cookies Preferences

Interface copy for the preference centre. Every string below is final and can be lifted straight into the build. Character counts assume no truncation on a 375 pixel viewport.

Global Privacy Control notice

Shown at the top of the page. The first variant appears when the browser sends the signal, the second when it does not.

Category cards

Each card carries a title, a description, a metadata line and one toggle. The metadata line reads: number of cookies, legal basis, default state.

The disclosure control under each card reads: See the [n] cookies in this category. Opening it reveals the same four column table used in section 04 of the policy.

Supporting blocks

PART THREE

Before this goes live

Eleven items to close. The first five are legal blockers, the rest are engineering and process.

One judgement call worth revisiting

Section 07 commits Niibu publicly to never using health, cycle or dating activity for advertising. That is the right position for a platform holding this kind of data, and it is a strong trust signal for investors and providers. It is also enforceable against you once published, so the tag configuration has to match the promise before this ships.

Niibu Inc.   Cookie Policy and Cookies Preferences   v3.0   27 July 2026