Privacy Policy
Last updated: 12 October 2026
This Privacy Policy explains what personal information Vibely ("Vibely", "we", "us") collects, how we use it, and with whom we share it, when you use the Vibely mobile app and related services (the "Service"). Vibely connects local businesses with content creators for real-world collaborations.
By using Vibely you agree to this Privacy Policy. If you do not agree, please do not use the Service.
Who the Service is for
Vibely has two types of user: businesses (for example restaurants, cafés, bars and hotels) and content creators. Some information below is collected only from one type of user, as noted.
Information we collect
Account and profile information.
- Your first name and last name.
- For businesses: your business name and business profile photo.
- Your email address. For businesses, this is how you sign in. For creators, it is a way for us to contact you: you add it yourself, and you confirm it with a code we send to it. You can change it at any time from your profile, and the previous address keeps working until you confirm the new one.
- For businesses: a contact phone number. The Vibely team uses it only to contact you about your account. Creators and other businesses never see it. We do not send codes to it. You can change it in your profile.
- A short biography, if you choose to add one.
- Profile and gallery photos that you upload.
Social account information (creators). When you sign in or link an Instagram or TikTok account, we collect and store the account identifier, the account handle, and the follower count. We also store the access and refresh tokens the provider gives us, which we use only to read your follower count and to keep that connection active. When you sign in with Apple or with Google, we receive an account identifier and the verified email address from that provider.
Location information.
- For businesses: the business address, city, country and map coordinates you provide, so creators can find you on the map and in the list.
- Precise device location: with your permission, the app uses your device location while you are using it, to centre the map on you and to show distances. This is optional. If you deny the permission, the app still works. A creator's device location is used to serve the request and is not stored on our servers as a profile field.
Collaboration activity. The opportunities, applications, invitations, bookings, proof screenshots, reviews and ratings that you create through the Service. It also includes each late cancellation and each no-show, who recorded it, and any pause on new requests that follows it.
Messages. The one-to-one chat messages that you exchange with the other party in a collaboration.
Device and technical information.
- A push notification token, so we can send you notifications.
- A record of each notification we decide to send you: when, whether we sent it (and why not, if we did not), whether our push provider accepted it for your phone, and whether your phone's settings allow Vibely notifications. It contains no message text.
- Log data collected automatically: your device's Internet Protocol (IP) address, the version of the app you are using, your operating system version, your device's time zone, and the date and time of use.
Where you signed up from. When you create an account we also record, against that account, the country your Internet address belongs to, the address itself, and your device's time zone at that moment. We use this to keep the service available only where we have launched, and to find accounts created to abuse the service. We erase the address 90 days after the account is created. The country and the time zone stay for as long as the account exists. We rely on our legitimate interest in running the service safely. You can object to this at the address at the end of this policy.
How you use the Service. We record, against your account, when the app is open and for how long, and which profiles you open. We use this to understand how the Service is used, to find accounts that are not getting results, and to improve the product. We never show it to other users — nobody can see who opened their profile — and we never use it for advertising. We keep this hour-by-hour detail for 12 months and then erase it. From it we also keep daily totals for your account — how long you used the app, how many requests you sent and received, how many people opened your profile — which stay while your account exists and are deleted with it. The requests themselves are collaboration activity, described above. We rely on our legitimate interest in running and improving the Service. You can object to this at the address at the end of this policy.
Sign-in attempts. When you sign in to Vibely or link a social account, we record the steps of that attempt, so we can find and fix the places where sign-in fails. We record the sign-in method, whether it was a sign-in or a link, the time of each step, how the attempt ended, your phone's platform and app version, and the country your connection came from. We do not keep your IP address; we use it only to find the country. To connect the steps of one attempt, the app creates a random installation number the first time it runs. This number identifies the installation only. It is not your advertising identifier or your notification token, and it is not used for tracking or advertising. The record names your account only when the sign-in succeeds or when you link a social account while signed in. We erase these records 180 days after we make them. When you delete your account, we remove your account from these records.
Error and crash reports. When the app crashes, or when a part of it fails and the app has to tell you so, it sends a report so that we can find and fix the fault. A report contains: the error and the programming stack trace that produced it, your device model, your operating system version, the app version, the names of the screens you visited just before the fault, the addresses and result codes of the app's own calls to our servers, and the account number we hold for you.
An error report never contains your messages, your photos, your email address, your phone number, your sign-in codes, or the content of any request you made. Your IP address is not stored. Reports are kept for 90 days and are then deleted. We rely on our legitimate interest in keeping the app working. You can object to this at the address at the end of this policy.
We do not collect payment card details or bank account details through the app. We do not use any advertising identifier. We do not run advertising software in the app, and we use no third-party analytics or tracking product — nothing in the app follows you across other apps or websites. The usage record described above is our own, it stays on our servers, and it is never shared.
How we use your information
- To create and manage your account and sign you in.
- To send you one-time sign-in codes and service notifications.
- To decide a creator's approval tier from the follower count.
- To run the collaboration flow: discovery, opportunities, applications, invitations, bookings, chat, proof and reviews.
- To show businesses on the map and list, and to show distances.
- To keep the Service secure and to prevent abuse.
- Our team can see your chat messages and your notifications (including ones you deleted), the times you read or acted on them, and the notification record described above, to support collaborations, to investigate reports and to keep the Service safe.
- To comply with our legal obligations.
Email we send you. We use your confirmed email address to tell you about your collaborations and your account — for example, when somebody is waiting for your answer and you have not seen the notification in the app. You can switch these off per category in the app, under Settings, except for notices about your account itself, which we must be able to send you. We also send tips, news and offers only if you have asked for them, and every one of those carries a link that stops them in one click. We keep a record of when you agreed and of when you changed your mind. Our email is delivered by Amazon Web Services (Amazon SES), on servers in Stockholm, Sweden.
How we share your information
With other users. To make a collaboration work, the other party sees the information needed for it: for example a creator's name, handle, follower count and profile photo, or a business's name, photo, location and offers, and the messages, proof and reviews exchanged between the two parties.
With service providers. We use a small number of third parties to provide the Service. They receive only the data needed for their task:
- Google — Firebase Cloud Messaging delivers push notifications; the Google Maps service renders the map on your device; Google Sign-In verifies a Google sign-in for businesses.
- Apple — Sign in with Apple verifies an Apple sign-in.
- Instagram and TikTok — used to sign you in and to read your follower count. We read information from them; we do not post anything to them.
- Sentry (Functional Software, Inc.) — receives the error and crash reports described above. The reports are stored on Sentry's servers in the European Union and are deleted after 90 days.
We do not sell your personal information, and we do not share it for advertising or cross-app tracking.
Legal reasons. We may disclose information if the law requires it, or to protect the rights, safety and property of Vibely, our users or the public.
Where your data is processed
The Service runs on Amazon Web Services infrastructure in the European Union. Your information is stored and processed there.
Data retention
We keep your personal information for as long as your account is active and as long as needed to provide the Service. When you delete your account, we remove your profile, your linked social identities and your personal content, first by hiding them and then by purging them. We may keep information for longer where the law requires it, or to complete an obligation that is still in progress. We may keep anonymised or aggregate data that cannot identify you. The hour-by-hour usage records — when the app was open, and which profiles were opened — are erased 12 months after they are recorded; the daily totals we derive from them stay while the account exists. The notification record is deleted after 90 days. Sign-in attempt records are erased 180 days after they are recorded.
Your rights and account deletion
You can delete your account and personal data at any time from inside the app: open Settings, then Delete account, and confirm. If a booking or a payout is still in progress, complete or cancel it first.
If you cannot open the app, you can still ask us to delete your data. See https://vibelyapp.net/data-deletion, or email us at the address below. Please send the request from, or name, the email address linked to your account so we can find and verify it.
Subject to local law, you may also ask us to access or correct your personal information.
Security
We use commercially reasonable measures to protect your information, and all data is encrypted in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Minimum age
Vibely is intended for users who are 18 years of age or older. The Service is not intended for children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us with information, please contact us.
Links to other sites
The Service may contain links to third-party websites that we do not operate. We are not responsible for their content or privacy practices, and we advise you to review their policies.
Our website: cookie banner and Meta Pixel
This section applies only to our website, vibelyapp.net. It does not apply to the Vibely app.
Our website uses the Meta Pixel. The Meta Pixel is a small program from Meta. We use it to measure how well our ads on Facebook and Instagram work.
When you first open our website, a cookie banner asks for your choice. You can select "Accept" or "Decline". The Meta Pixel loads only after you select "Accept". If you select "Decline", the Meta Pixel does not load. Before you make a choice, the Meta Pixel does not load.
When the Meta Pixel is loaded, it sends this data to Meta:
- Each page of our website that you open (a "page view").
- Each click on a link to the App Store or to Google Play (a "Lead" event).
- Technical data about your browser and device, for example your IP address, browser type, screen size and the address of the page.
- Cookies that Meta sets in your browser, for example the _fbp cookie (browser id) and the _fbc cookie (ad click id), and cookies that Meta already set in your browser if you use Facebook or Instagram.
The recipient of this data is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta can use this data under its own privacy policy: https://www.facebook.com/privacy/policy/.
The legal basis is your consent. You can withdraw your consent at any time. To do this, select "Cookie settings" at the bottom of any page of our website. The cookie banner then shows again, and you can select "Decline". After you withdraw your consent, the Meta Pixel sends no more data, and we delete the _fbp and _fbc cookies from your browser. Withdrawal does not change data that Meta received before.
We keep your choice in your browser only (in local storage, under the name vibely.consent.v1). We do not send your choice to our servers.
The Vibely app does not use the Meta Pixel. The app uses no third-party analytics or tracking product. This section does not change how the app handles your data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Changes take effect when posted. Please review this page periodically.
Contact us
If you have any questions about this Privacy Policy, contact us at:
📧 vibelytheapp@gmail.com