Privacy Policy

1. What we collect

Project information: the idea you describe, your answers to discovery questions, and any notes or files you share with us.

Contact details: your name and email address, used to identify your projects, send you updates and deliver transactional emails about your project.

Account data: when you create an account, your sign-in credentials are handled by our authentication provider; we store only your account identity and project links.

Payment data: payments are processed by Stripe. We never see or store your full card number — we only record the payment status, amount and reference needed to confirm your order.

Technical data: basic device and usage information needed to keep the site secure and working.

2. How we use it

To plan what your app includes, produce quotes, build your project and track its progress.

To send transactional email about your project — confirmation, plan ready, quote ready, payment received, reminders about a step you have not finished, and delivery notices. These are operational messages about your own project, not marketing, and they are sent whether or not you subscribe to our mailing list.

To prevent fraud and abuse, and to keep your projects private to you.

We do not sell your personal information. We do not use your project content to advertise to you.

3. Marketing emails

If you ask for our emails using the sign-up form on our site, we store your email address, your first name if you give it, and the date and wording of the consent you agreed to. We use it to send a short series of emails about how app projects work, and occasional updates.

Every marketing email has an unsubscribe link and a preferences link. Unsubscribing takes effect immediately and does not affect messages about a project you have with us.

If an email address bounces or is reported as spam, we stop sending marketing email to it automatically.

We do not share your address with advertisers, and we do not sell it.

4. Cookies and tracking

We use only the cookies and local storage needed to run the site: keeping you signed in, remembering the project you started before you created an account, and basic security. We do not use advertising cookies, third-party ad networks or cross-site tracking, so there is no consent banner to accept or reject.

Our marketing emails contain no tracking pixels, so we do not know whether you opened an email. Links in those emails pass through our own site so we can count how many people clicked; that click is recorded against your subscription only, and nothing is shared with third parties.

You can clear cookies at any time in your browser, though signing in again will be required.

5. California privacy rights

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we do not use it for cross-context behavioural advertising. Because of this, there is nothing to opt out of — but you may still contact us to confirm this in writing.

California residents can request to know what personal information we hold, request deletion, request correction, and are never treated differently for exercising those rights.

To make a request, email hello@vibraapps.com with the subject “Privacy request”.

6. AI-assisted scoping

Your project description may be processed by AI models to draft the plan for your app. The output is always reviewed through our quoting process before it becomes an agreement.

AI processing happens server-side and is used only to serve your project — not to build unrelated profiles about you.

7. Who we share it with

Stripe — to process payments and subscriptions.

Our email delivery provider — to send project messages and, if you subscribed, marketing emails.

Our hosting and database providers — to store and serve the platform securely.

We only share what each provider needs to perform its role, and we do not share your data with advertisers or data brokers.

8. How we protect it

Access to project data is restricted by database-level rules: customers can only see their own projects, and staff access is limited to what operations require.

Payment verification uses signed webhooks, and sensitive actions happen only on our servers.

No system is perfectly secure, but we design for least access and review our controls as the platform evolves.

9. Retention

We keep your project and agreement records for as long as your account is active and as needed for legal, tax and operational purposes. Delivery and email logs are kept so we can audit what was sent and why.

10. Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where the law allows.

You can export or close your account by contacting us. Deleting your account may end active care plans; completed paid work remains yours.

To exercise any of these rights, email hello@vibraapps.com.

11. Changes and contact

If we change this policy in a material way, we will update this page and note the date. The version shown here is the one currently in force.

Privacy questions and requests: hello@vibraapps.com.