Privacy Policy

Vybt is the controller responsible for the processing of personal data described in this Privacy Policy.

Contact: support@vybtapp.com

Website: https://vybt.app

Vybt is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it and the associated personal data.

3.1 Account and profile data

When you create or use an account, we may collect your email address, username, profile photo, biography, selected interests or Vibe Tags, age or date-of-birth information, gender if you choose to provide it, and account settings. If you sign in with Apple or Google, we receive the account information that you choose to share through that provider.

We use this data to create and manage your account, display your profile to other users as permitted by your settings, personalise relevant plans and communities, and keep the Services safe.

3.2 Plans, messages and Experience Stories

We collect the content you create or share in Vybt!, including plans, join requests, participation information, messages, group interactions and Experience Stories. Other users may see this content according to the visibility controls of the plan, group or feature you use.

We use this data to operate the social and coordination features of Vybt!, enable people to join plans, communicate with participants, moderate harmful activity and resolve support or safety issues.

3.3 Location data

With your permission, Vybt! may collect location information to show relevant nearby plans, enable city-based discovery and support distance-based features. You can refuse or withdraw location permission in your device settings. If you do, some location-based features may be unavailable or require you to choose a city or area manually.

Vybt! is designed to show plan areas for discovery. It does not display an attendee's precise live location to other users simply because they use the app.

3.4 Usage and technical data

We may collect data about how you use the Services, such as plans viewed, created or joined, interactions with features, preferences, device type, operating system, app version, log information, crash reports and performance information.

We use this data to operate, secure, troubleshoot and improve Vybt!.

3.5 Payment and subscription data

If Vybt! offers paid features, payment is processed by the relevant provider:

Web payments may be processed by Stripe.

Mobile purchases may be processed by Apple App Store, Google Play and RevenueCat.

Vybt! does not receive or store your full payment-card number. We may receive transaction status and subscription information needed to provide paid features, such as whether a subscription is active and its renewal date.

4.1 When this applies

Profile verification is optional. It starts only when you choose Verify your profile and provide the required consent. You may continue to use Vybt! without completing verification.

4.2 What we collect

For profile verification, we collect:

one verification selfie that you take using the front camera; and

the profile photos you have already uploaded and select or make available for comparison.

These images are Face Data because they are used for facial analysis. Vybt! does not collect Face Data in the background or use the camera for verification at any other time.

4.3 Why we use Face Data

We use the verification selfie and relevant profile photos for one purpose only: to assess whether the same person appears in the selfie and the profile photos, then determine whether to apply a profile-verification badge.

This is intended to reduce impersonation and help create a safer community. The result of the check is a verification decision, such as verified or not verified.

4.4 What we do not do with Face Data

Vybt! does not use Face Data for advertising, marketing, behavioural profiling, audience targeting, identifying you across other services, training artificial-intelligence models, or unlocking/authenticating access to your account.

Vybt! does not create or retain a faceprint, facial template, facial embedding, facial geometry record or other biometric identifier after the verification process. This statement applies only to data retained by Vybt! and must be read with the retention information below.

4.5 Face Data processors and sharing

To run the optional verification, the selfie and relevant profile photos are transmitted to Base44, Vybt!'s application and hosting provider. Through Base44's configured integration, the images are analysed by Anthropic's Claude Opus 4.8 model to perform the same-person assessment.

Base44 and Anthropic act only as service providers for this limited verification function. Vybt! does not sell Face Data or disclose it to advertisers, analytics providers, data brokers or other users. We require service providers to protect data to the same or an equivalent standard described in this policy and to use Face Data only for the purpose consented to by you.

4.6 Retention and deletion of Face Data

The verification selfie is kept for no more than 30 days after the verification check, solely to investigate reports of fraud or impersonation, and is then deleted automatically. Your ordinary profile photos remain subject to the standard account and content retention rules in this policy.

Only the verification status or badge may remain on your profile after the selfie is deleted. You can remove verification from your profile at any time. Removing verification, or deleting your account, deletes any verification selfie that Vybt! still holds.

4.7 Consent and withdrawal

Where consent is required, we ask for your clear consent before Face Data is collected, transmitted or used. You can withdraw consent at any time by removing verification in your profile or by contacting support@vybtapp.com. Withdrawal does not affect processing that occurred before withdrawal, but Vybt! will stop future verification processing and delete Face Data that remains within our control, subject only to lawful retention obligations.

We use personal data to:

provide, maintain and personalise the Services;

create and manage accounts, plans, communities and messages;

show relevant plans and city-based discovery features;

operate optional profile verification when you request it;

protect users, prevent fraud, impersonation and misuse, and enforce our rules;

process subscriptions and provide paid features;

respond to support requests and legal obligations; and

analyse and improve the reliability, safety and performance of Vybt!.

We do not sell personal data.

Where the GDPR applies, Vybt! processes personal data on the following bases:

Contract: to provide the Services you request, including your account, plans, messages and subscriptions.

Consent: for permissions such as location access and optional profile verification.

Legitimate interests: to protect the Services and users, prevent fraud and abuse, maintain security, and improve the Services, where those interests do not override your rights.

Legal obligation: where we must retain or disclose data to comply with applicable law.

We share personal data only when necessary to provide the Services, comply with law, protect users or operate Vybt!. Recipients may include:

other Vybt! users, where you make profile information, plans, participation, messages or Experience Stories visible through the Services;

Base44 for hosting, application infrastructure and optional profile verification;

Anthropic, through Base44's configured integration, for the optional Face Data comparison described in Section 4;

Stripe, Apple, Google and RevenueCat for payments or subscriptions, where applicable;

analytics, security and support service providers that Vybt! uses; and

competent authorities or advisers where disclosure is required by law or necessary to protect rights, safety or security.

We require service providers to use personal data only for the service they provide to Vybt! and to apply appropriate data-protection safeguards.

We keep account and profile data while your account is active. When you delete your account, Vybt! will delete or anonymise personal data associated with it within 30 days, except where we must retain limited information for legal obligations, fraud prevention, dispute resolution, security or the establishment, exercise or defence of legal claims.

Content shared with other users, including messages and plan interactions, may remain visible to those users until it is deleted, anonymised or retained only as necessary for the purposes above. Verification selfies have the separate, shorter retention limit in Section 4.6.

To request deletion, use the account-deletion controls in the app or contact support@vybtapp.com.

Depending on applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, withdrawal of consent and data portability.

To exercise these rights, contact support@vybtapp.com. You may also have the right to complain to your local data-protection authority.

Vybt! and its service providers may process personal data in countries outside the European Economic Area. Where this occurs, we use appropriate safeguards required by applicable data-protection law, such as an adequacy decision or contractual protections.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, disclosure or destruction. No service can guarantee absolute security; please keep your login credentials confidential and contact us if you believe your account has been compromised.

We may update this Privacy Policy when our Services, data practices or legal obligations change. We will publish the updated policy on vybt.app and in the app. Where required, we will notify you of material changes or ask for new consent.

For privacy questions, requests or concerns, contact:

Vybt!

support@vybtapp.com

https://vybt.app