Privacy Policy, Vibe Check

This Privacy Policy explains how Vibe Check (stylized *vibeCheck*) ("Vibe Check," "we," "us," or "our"), operated by Creative Labs AI LLC, collects, uses, discloses, and protects information in connection with the Vibe Check mobile application for iOS and Android, our website at vibecheck.app, and related services (collectively, the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service. The Service is intended only for users 18 years of age or older.

Vibe Check is a for-entertainment product: you upload a photo and receive a playful, AI-generated "vibe" read. It is not a real assessment of any person and does not detect, measure, or predict any person's character, personality, behavior, trustworthiness, attractiveness, intentions, or safety.

1. Information We Collect

Information you provide.

• Account information. When you register with Sign in with Apple (iOS), Google Sign-In (Android), or email, we create an account and store your email address, your authentication provider identity, a unique user identifier (UUID), and, optionally, a name you provide. We do not receive your Apple ID or Google Account password. We also record your language preference, the version of our Terms you accepted and the time you accepted it (terms_version and terms_accepted_at), and your account creation timestamp.
• Photos you upload. To use the Service, you upload a photo that depicts a face. Uploaded photos are facial images. They are stored in a private cloud storage bucket, in a location scoped to your account and protected by row-level security, so that they are not publicly accessible.
• Analysis results. For each photo you submit, our AI generates a structured description (a 26-field JSON result) consisting of facial-feature descriptors (such as face shape, jawline, and gaze) together with playful, entertainment-only "vibe" fields. We store this result in association with your account, along with operational metadata such as the AI model name, processing cost, and latency, and any error text if the analysis fails.
• Purchase records. When you buy credits or premium access, we store a purchases ledger entry: the source of the purchase (for example, Stripe or Apple), an external transaction identifier, a description of what was purchased (for example, "10 credits" or "premium"), the amount, the currency, and a timestamp. Vibe Check does not collect or store your full payment card information; card data is handled directly by our payment processors.
• Account state. We store your current credit balance and, if applicable, the date through which your premium access is valid (premium_until).
• Communications. Information you send when you contact us or submit feedback.
• Website waitlist. If you join our launch waitlist on vibecheck.app, we collect the email address and, optionally, the first name you enter. So we do not lose your spot if you navigate away, we begin saving your email as you type a valid address, before you press Join. Waitlist entries are stored in our leads database, hosted by our processor Supabase, and a notification is sent to our team through our email processor Resend. We use this information only to hold your place, send your launch invite and discount, and follow up about your request, and you can ask us to delete it at any time.

Information collected automatically. Standard app and usage data and diagnostic data generated as you use the Service, and backend structured logs of Service activity. Our logs are written through a logger that sanitizes and redacts sensitive values such as signed-URL tokens and user UUIDs.

Information from third parties. From Apple, we receive the sign-in identifier above and, for in-app purchases, purchase and transaction status (not your full payment card details). From Google, we receive the sign-in identifier when you use Google Sign-In. From Stripe, we receive the status and result of web payments.

We do not collect, and ask that you not provide, more sensitive information than necessary for the Service.

2. Facial Images and AI Processing

The Service works by processing photos you upload that depict faces. To generate your entertainment result, your photo is analyzed by Anthropic ("Claude") vision, which produces a playful "vibe" description as described in Section 1.

We do not create a faceprint or biometric identifier. Vibe Check does not use your photos to create, and does not derive, a unique biometric identifier, faceprint, or facial-recognition template for the purpose of identifying or verifying any person. We do not use uploaded photos to recognize you or anyone else, and we do not sell or share biometric information.

How your image reaches the AI. When your photo is analyzed, we generate a short-lived signed URL to the image and send that URL, together with our prompt, to Anthropic. The signed URL is time-limited and expires (approximately 600 seconds). Anthropic references the image via the URL to perform the analysis and does not permanently store your image as part of the Service's flow.

Consent under biometric-privacy laws. Some U.S. states (for example, Illinois under the Biometric Information Privacy Act, as well as Texas and Washington) regulate the processing of facial or biometric data and may require your consent. Where such consent is required, your use of the photo-analysis feature, together with any consent you provide in the App, constitutes your consent to the processing described in this Section. You may withdraw that consent at any time by discontinuing use of the feature and deleting your account, after which your uploaded photos and results are deleted as described in Section 5.

3. How We Use Information

We use information to: provide, operate, maintain, and secure the Service; process the photos you upload and generate your AI "vibe" results; store and display your results to you and, where you choose to share, to the people you share them with; manage your account, credit balance, and premium access; process and record purchases (in coordination with Stripe, Apple, and Google); communicate with you about the Service; detect, investigate, and prevent fraud, abuse, and violations of our Terms, and keep the Service safe; analyze and improve the Service; and comply with legal obligations and enforce our agreements.

We do not use the content of your submissions to train or improve AI models.

4. How We Disclose Information

We do not sell your personal information and do not share it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers and sub-processors. With vendors who perform services for us, under contracts limiting their use of the information to providing those services. As of the date below, these include:
• Anthropic, AI vision analysis; receives your image via a short-lived signed URL together with our prompt, to generate your "vibe" result.
• Supabase, cloud hosting for our database, authentication, storage, and realtime services.
• Vercel, hosting for our web application and public share pages.
• Stripe, payment processing for purchases made on our website.
• Apple, authentication (Sign in with Apple) and in-app purchase verification on iOS.
• Google, authentication (Google Sign-In). If in-app purchases become available on Android, Google Play Billing will also process those purchases.
• Sentry, optional backend error monitoring and diagnostics, where enabled, to help keep the Service reliable and secure.

Our mobile clients do not include any third-party analytics, tracking, or advertising SDKs, and we do not use your information for cross-context behavioral advertising. For a current list of providers, contact hello@vibecheck.app.

• People you share results with (public sharing). If you choose to share a result, we generate a unique link to a public share page at vibecheck.app/share/[code]. Anyone who has that link can view the shared result without logging in. Sharing is optional and entirely at your choice; do not share a result you do not want others to be able to view or forward.
• Legal and safety. When reasonably necessary to comply with law, enforce our Terms, respond to lawful requests, or protect the rights, property, or safety of Vibe Check, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data Retention

We retain your personal information for as long as your account is active and as needed to provide the Service, then for the period necessary to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements.

You may delete your account at any time within the App or through the web at vibecheck.app. When you delete your account, the deletion cascades and removes your account, your analyses and results, your uploaded images (deleted from storage), and your purchase records, generally within thirty (30) days, except for limited records we are required to retain by law or that are retained by our payment processors (for example, Stripe or Apple) for their own tax, accounting, or fraud-prevention purposes.

Signed URLs to your images are always time-limited: the signed URL used to send an image to the AI expires in approximately 600 seconds, and the signed URL used to cache a shared image on the public share page expires in approximately one (1) hour.

6. Your Privacy Rights

6.1 Your rights. Depending on where you live, you may have rights to access or obtain a copy of your personal information; correct it; delete it; obtain portability; opt out of the sale or sharing of personal information or of targeted advertising; and appeal a denied request. We do not sell your personal information or use it for cross-context behavioral advertising, and we do not discriminate against you for exercising these rights.

6.2 How to exercise rights, and appeals. Use the in-App controls (including account and data deletion) or email hello@vibecheck.app. We verify requests through your account and respond within the time required by applicable law. If we decline a request, you may appeal by emailing hello@vibecheck.app with the subject line "Privacy Request Appeal," and we will respond in writing, generally within 45 to 60 days, including the reasons for our decision.

6.3 California residents. Under the CCPA as amended by the CPRA, in the preceding 12 months we have collected and disclosed for a business purpose the following categories of personal information:

Category	Collected	Disclosed for a business purpose to
Identifiers (email, user UUID, device and account identifiers)	Yes	Service providers (Supabase, Vercel); Apple or Google for authentication
Customer records (Cal. Civ. Code 1798.80(e))	Yes	Service providers (Supabase, Vercel)
Commercial information (purchase and transaction data)	Yes	Stripe or Apple, as applicable; service providers
Internet or network activity (usage, diagnostics)	Yes	Service providers (Supabase, Vercel)
Biometric or visual information (uploaded facial photos and AI analysis results)	Yes	Anthropic (for image analysis); infrastructure providers (Supabase, Vercel). Results are disclosed publicly only where you choose to share a result.
Inferences (the AI-generated "vibe" output)	Yes	Anthropic (which generates it); infrastructure providers (Supabase, Vercel). Disclosed publicly only where you choose to share a result.

We do not sell personal information and have no actual knowledge of selling the personal information of consumers under 16 (and the Service is limited to users 18 and older). You may use an authorized agent and may be asked to verify your identity.

6.4 Other U.S. state residents. If you reside in Virginia, Colorado, Connecticut, Texas, Florida, or another state with a comprehensive privacy law, you have the rights in Section 6.1 to the extent your state's law provides, including the right to appeal. We do not sell your personal information, do not use it for targeted advertising, and do not engage in profiling that produces legal or similarly significant effects. Where your state's biometric-privacy law applies to the facial images you upload, we process them only as described in Section 2.

6.5 EEA, UK, and Switzerland. Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract (to provide the Service, including generating and storing your results); your consent (for the processing of facial images to generate results); our legitimate interests (security, abuse prevention, and improvement of the Service); and compliance with legal obligations. You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. International transfers are protected by appropriate safeguards such as Standard Contractual Clauses. Creative Labs AI LLC is the controller of your personal information; if you are in the EEA or UK, you may contact us at hello@vibecheck.app regarding your rights or the controller of record.

7. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, private storage buckets protected by row-level security, per-user access scoping, short-lived signed URLs for image access, and logging that redacts sensitive values such as signed-URL tokens and identifiers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding access to your device and your Apple ID, Google Account, or email credentials.

8. Cookies, Analytics, and Do Not Track

On vibecheck.app we use only the cookies and similar technologies necessary for the website and share pages to function and to keep you signed in, which you can control through your browser settings. Our mobile clients do not include any third-party analytics, tracking, or advertising SDKs, and we do not use your information for cross-context behavioral advertising. We may use a backend error-monitoring provider (such as Sentry) to capture diagnostic logs to keep the Service reliable and secure. Do Not Track: the Service does not currently respond to browser "Do Not Track" signals, because there is no common industry standard for interpreting them. To learn whether the third-party services we use honor DNT, review their privacy policies.

9. Children

The Service is for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and you may not upload photos depicting anyone under 18. If we learn we have collected information from a person under 18, we will suspend the account and delete the information.

10. International Users

We are based in the United States and process information there and in jurisdictions where our service providers operate. By using the Service, you understand that your information, including the photos you upload, may be transferred to and processed in the United States and other countries, which may have different data-protection laws than your own.

11. Account and Data Deletion

You can delete your account at any time within the App through account settings, and you can also request account and data deletion through the web at vibecheck.app without reinstalling the App. Deletion cascades to your account, analyses, results, uploaded images (removed from storage), and purchase records, and generally completes within thirty (30) days, except for limited information retained as described in Section 5 (including records required by law or retained by payment processors). Once you initiate deletion, your account can no longer be used and you will lose access to any remaining credits and premium features. To avoid additional charges, cancel any active subscription through your Apple account or our web billing controls before deleting your account, as described in our Terms.

12. Changes to This Policy

We may update this Policy from time to time. We will revise the "Last updated" date below and, where changes are material, provide notice through the Service or by other reasonable means. Your continued use after the effective date constitutes acceptance. This Policy is provided in English; any translation is for convenience only, and the English version controls in the event of any conflict.

13. Contact and Data Controller

Data Controller. The controller of your personal information is Creative Labs AI LLC. If you are in the EEA or UK, Creative Labs AI LLC is the controller, and you may contact us at hello@vibecheck.app regarding your rights.

Vibe Check Creative Labs AI LLC Email: hello@vibecheck.app

---

Last updated: 2026-07-01