Privacy Policy

Version 2026-08-27. This policy explains the data used by Vibes'n'Feels and the current service providers. Contact support@vibesnfeels.app with privacy questions.

1. Data we use

• Identity: an authentication user ID, public username, 18+ confirmation, accepted Terms version and optional confirmed email and Avatar.
• Vibes: processed photos, emotion, refinement, optional note, selected coordinates, framing and creation or expiry times.
• Interactions: Friendship request usernames, status and timestamps; mutual Friend relationships; Feels; Discuss messages; mentions; reports; blocks; notification preferences and delivery state.
• Account archive: private display JPEGs, thumbnails, exact coordinates and Vibe metadata needed for backup and restore.
• Operations and safety: request metadata, moderation results, evidence, rate-limit attempts, errors and security records.

2. Data that stays local

Vibes'n'Feels does not ask for or store your birth date. The service stores only your confirmation that you are 18 or older and when it was made. Vibes'n'Feels does not upload camera originals. Personal Vibes use app-managed local storage unless a confirmed-account archive uploads eligible processed copies and Vibe details.

3. How data is used

• Provide mutual Friends, Map, Feed, sharing, Feels, Discuss, notification, account, backup, restore and deletion features.
• Moderate content, investigate reports, enforce blocks and temporary restrictions, and prevent abuse.
• Maintain availability, diagnose errors and secure authentication and storage.
• Communicate account codes, service messages and support responses.

4. Service providers

These providers may also process technical data such as IP address, request metadata and device or delivery identifiers under their own terms.

• Supabase provides authentication, database, Storage and Edge Functions and processes the account and product data needed for those features.
• OpenAI Moderation receives a processed Vibe or Avatar JPEG and, when applicable, a submitted username, optional Vibe note or Discuss message. These moderation requests do not include your actor ID, email or Vibe coordinates.
• Expo receives the Expo push token, notification title and body, and product IDs or routes needed for delivery, then forwards the notification through Apple Push Notification service or Firebase Cloud Messaging. Feel and Friendship copy may include public usernames. Discuss push copy is generic and does not include the Discuss message or Vibe image.
• Postmark receives the recipient email and account or service-email content. Operational moderation alerts contain case metadata and operator instructions, not reported content or reporter identity. Cloudflare Turnstile processes anti-abuse challenge data and the resulting token for signup, sign-in recovery and the neutral existing-email recovery fallback during account creation.
• MapTiler receives style and tile requests for map areas viewed plus the app User-Agent. Vibes'n'Feels does not construct a dedicated captured-Vibe-coordinate payload for MapTiler.

5. Visibility and retention

• Vibes shared with everyone are visible to app users for 24 hours unless removed earlier.
• Vibes shared with Friends are visible for 3 days only to their author and current mutual Friends. Ending or blocking the Friendship removes access immediately.
• Pending Friendship requests expire after 30 days. A Friendship remains until either person removes it, one person blocks the other, or an account is deleted. Limited request-attempt and resolved-request records may be retained for abuse prevention and service integrity.
• Personal Vibes remain in app-managed local storage until you delete them, remove the app data or lose the device.
• Private account archive data stays until you delete the Vibe or account, subject to queued storage cleanup.
• A reported Vibe evidence copy and its moderation case may be retained for 90 days after the most recent report.
• Discuss and moderation audit records may be retained beyond Shared Vibe expiry for safety, integrity and dispute review.

6. Account deletion

Delete account removes the application identity, ends Friendships and pending requests, and starts permanent cleanup of owned database and Storage content. Storage is drained before the underlying authentication user is hard-deleted. A reporter reference may be removed from retained moderation audit rather than deleting the audit itself.

7. Your choices

• Keep Vibes Personal, delete individual Vibes and manage notification or network preferences.
• Accept or decline incoming Friendship requests and remove existing Friends.
• Block and unblock users from Settings.
• Create a recoverable account, log out and remove local account data, or permanently delete the account.
• Contact support to ask about privacy, account data or any access, correction, deletion or portability right that applies to you. The app does not currently provide self-service data export or ZIP import.

8. Changes

This policy may change as the product, providers or legal requirements change. Material Terms changes use versioned in-app review. The current public policy will also be made available on the product website before external alpha.