Privacy Policy
Effective date: July 24, 2026
Vibez is operated by BTech Tecnologia da Informação LTDA ("BTech", "we", "us"), a company organized under the laws of Brazil. This policy describes what data we collect, how we use it, and your rights.
the short version
- we collect your journal entries and photos to make your songs
- your journal words are never shown to anyone, ever — only you decide if a finished song gets shared
- we don't sell your data
- AI vendors (Google, ElevenLabs, OpenAI) help generate your music but don't get your data for anything else
- delete everything anytime by emailing us
this is the friendly version — the full policy below is what's legally binding.
Data We Collect
- Account identity — when you sign in with Apple or Google, our authentication provider (Clerk) holds an account identifier and whatever you choose to share at sign-in (typically name and email). We never see your password.
- Journal entries — the text and photos you write each day, used solely to generate your personal music.
- Generated content — AI-produced songs, lyrics, cover art, and headlines derived from your entries.
- Device token — for push notifications, stored only while notifications are enabled.
- Usage analytics — product events (screens viewed, features used) linked to your account, collected via PostHog. No journal text, lyrics, or photos are ever sent to analytics.
- Your journaling preferences — an optional weekly mood, a journaling goal, and a reminder rhythm you choose, used to shape your songs and reminders. Stored with your profile; never sold.
- Subscription status — managed by RevenueCat; we receive purchase events but never see payment details.
How We Use Your Data
- Generate personalized music, lyrics, cover art, and headlines from your journal entries and photos.
- Align generated lyrics to the audio so captions appear at the right moment.
- Send push notifications about completed generations.
- Improve the product through account-linked usage analytics.
- Process subscription purchases and entitlements.
Third-Party Services
- Clerk — handles Sign in with Apple / Google and holds your account identity.
- Google (Gemini, Lyria) — processes your journal text and photos to generate music, lyrics, cover art, and headlines, under Google's standard API terms.
- ElevenLabs and OpenAI (Whisper) — align generated lyrics to generated audio; some alignment also runs on our own servers.
- Cloudflare R2 — stores your uploaded photos and generated audio, cover art, and video files.
- RevenueCat — manages subscription state.
- PostHog — product analytics, linked to your account.
- Apple — Sign in with Apple, push notifications, and App Store payment processing.
We do not use your journal entries to train our own models. Our AI vendors process your content only to generate your output, under their own standard API terms — we don't have the ability to make blanket promises about a third party's own model-training policy on your behalf, but none of these vendors are given your content for any purpose beyond producing what you asked for.
Your Content Stays Yours
Your words pass through to generation verbatim. The only automated change we ever make to what you write is stripping third-party contact information (URLs, emails, phone numbers) for safety — we never redact, paraphrase, or otherwise sanitize your own words.
Data Retention & Deletion
Your data is retained while your account is active. To delete your account and all associated data, contact us at the email below. We will process deletion within 30 days.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to certain processing — under the GDPR (EEA/UK), the CCPA/CPRA (California), Brazil's LGPD, or similar laws elsewhere. To exercise any of these rights, email us at the address below; we aim to respond within 30 days.
Children
Vibez is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If we learn that a user is under 13, we will delete their account and associated data.
Security
We encrypt data in transit and restrict access to production systems. No method of transmission or storage is perfectly secure, and we don't hold any formal security certifications today.
International Data Transfers
Our infrastructure and vendors (Google Cloud, Cloudflare, ElevenLabs, OpenAI, RevenueCat, PostHog) primarily process data in the United States. By using Vibez, you understand your data may be transferred to and processed in countries other than your own.
Changes to This Policy
We may update this policy from time to time. Continued use of Vibez after a change constitutes acceptance of the updated policy.
Contact
BTech Tecnologia da Informação LTDA — [email protected]