Privacy Policy for Vibe Council
Effective Date: September 12, 2025
1. Introduction
Welcome to Vibe Council. This Privacy Policy explains how Vibe Software Limited ("we," "us," or "our") collects, uses, shares, and protects your personal data when you use our website (www.vibe-council.com), our mobile application ("Vibe Council"), and our related services (collectively, the "Services").
We are committed to protecting your privacy and complying with data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR).
Data Controller: Vibe Software Limited is the data controller responsible for your personal data.
2. What Personal Data We Collect
We collect the following categories of personal data:
Identity & Contact Data: Your email address.
Authentication Data: Encrypted passwords for your account. We never store plain text passwords.
Service Usage Data: This includes: - The personas you select for your council. - The text inputs you submit for a "vibe check." - The AI-generated responses you receive from your council. - Your conversation history. - Your responses to the persona-matching quiz.
Transaction Data: Your subscription tier (e.g., Free, Standard, Premium). We do not collect or store your payment card details. All payments are processed securely by third-party services (Apple App Store, Google Play Store).
Consent Data: A record of your consent choices, particularly your decision regarding the use of your data for AI model training.
Technical Data: Usage analytics, device type (web or mobile), and IP address for security and operational purposes.
3. How We Use Your Personal Data & Our Lawful Basis
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
| Purpose of Processing | Type of Data Used | Lawful Basis for Processing (under GDPR) |
|---|---|---|
| To register you as a new user and manage your account | Identity & Contact, Authentication | Performance of a contract with you. |
| To provide the core "vibe check" service to you | Identity & Contact, Service Usage | Performance of a contract with you. |
| To process your subscription and manage payments | Identity & Contact, Transaction | Performance of a contract with you. |
| To manage our relationship with you (e.g., service updates) | Identity & Contact | Performance of a contract with you; Necessary for our legitimate interests (to keep our records updated). |
| To improve our AI models (only with your explicit consent) | Anonymized Service Usage Data (your inputs and AI responses) | Consent. You can withdraw this consent at any time. |
| To administer and protect our business and Services (including troubleshooting, data analysis, security) | Technical | Necessary for our legitimate interests (for running our business, provision of IT services, network security). |
4. Your Explicit Consent for AI Training
A core part of improving our Service is training our AI models. We will only use your Service Usage Data (specifically, your inputs and the AI-generated responses) for this purpose if you give us your explicit, opt-in consent.
What this means: When you first register, and at any time in your "Data & Privacy" settings, you have a clear choice.
Anonymization: If you do consent, your data is anonymized to remove any direct personal identifiers before it is used for training.
Withdrawal of Consent: You have the right to withdraw your consent at any time through the "Data & Privacy" hub in the mobile app or web app. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
5. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with the following trusted third-party service providers:
- AI Service Providers (e.g., Google Gemini): To generate the persona responses.
- Cloud Hosting Providers (e.g., AWS): For secure data storage and hosting of our Services.
- Payment Processors (Apple, Google): To securely handle in-app purchases and subscriptions.
- Subscription Management (e.g., RevenueCat): To manage subscription statuses across platforms.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. Your Legal Rights Under GDPR
You have rights under data protection laws in relation to your personal data, including:
- Right of Access: The right to be provided with a copy of your personal data.
- Right to Rectification: The right to require us to correct any mistakes in your personal data.
- Right to Erasure (Right to be Forgotten): The right to require us to delete your personal data in certain situations.
- Right to Restrict Processing: The right to require us to restrict processing of your personal data in certain circumstances.
- Right to Data Portability: The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format.
- Right to Object: The right to object to the processing of your personal data in certain situations.
- Right to Withdraw Consent: The right to withdraw your consent at any time.
You can exercise these rights via the "Data & Privacy" hub within our Services or by contacting us.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, your account data is retained until you choose to delete your account.
9. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us.
Vibe Software Limited (Contact details to be added)
You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).