Privacy Policy
Vibe Check ("we", "us") operates Vibe Check. This Privacy Policy explains what personal data we collect, why we use it, who we share it with, and the choices you have. Last updated: June 20, 2026.
Data we collect. Email addresses you provide (creator and recipient), moodboard titles and messages, uploaded images and related metadata, feedback you or collaborators submit, payment-related identifiers from Stripe (we do not store full card numbers), basic technical logs (IP address, browser type, timestamps), and optional analytics events after you accept our Terms during onboarding.
How we use data. To create and deliver moodboards, send transactional emails (including your edit link and share invitations), organize and analyze uploads with automated tools, process payments, prevent abuse, improve reliability, and comply with law.
Legal bases (EEA/UK). We process data to perform our contract with you (providing the Service), based on legitimate interests (security, product improvement, fraud prevention), with your consent where required (including analytics, covered when you accept our Terms during onboarding), and to comply with legal obligations.
AI processing. To organize moodboards we may send image content and related text to AI providers (currently Google Gemini; OpenAI may be used as a fallback when configured). Providers process data to generate labels, groupings, descriptions, embeddings, and similar features. We apply usage limits and do not use your uploads to train our own models. AI providers handle data under their respective terms and privacy policies.
Service providers. We use trusted subprocessors to run the Service, including hosting (Fly.io), email delivery (SMTP providers such as Resend or Postmark), payments (Stripe), bot protection (Cloudflare Turnstile, when enabled), and analytics (Google Analytics, after you accept our Terms during onboarding). We share only what is needed for them to perform their function.
Retention. Moodboards, images, and related metadata are kept for the link lifetime you choose, then deleted or anonymized. Transactional email logs may be retained briefly by our email provider. Payment records are retained as required for accounting and tax purposes.
Security. We use industry-standard measures including encrypted transport (HTTPS), hashed access tokens, and access controls. No method of transmission or storage is 100% secure.
International transfers. We may process data in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.
Your rights. Depending on where you live, you may request access, correction, deletion, portability, or restriction of your personal data, or object to certain processing. Contact mail@vibe-check.app. You may also lodge a complaint with your local supervisory authority.
Children. The Service is not directed to children under 16, and we do not knowingly collect their personal data.
Changes. We may update this policy. The updated date will appear at the top of this page.