Privacy Policy

Last updated: April 29, 2026

Welcome to VibeWise ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "App").

By accessing or using the App, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the App.

1. Information We Collect

A. Personal Information

When you register through Google (Google LLC) or Facebook (Meta Platforms, Inc.), our OAuth sign-in providers, we collect basic profile information including:

Name and Email address
Profile picture (Avatar)
Age/Date of Birth (to verify 18+ eligibility)
Gender Identity

B. Profile & Vibe Data

Information you voluntarily provide to complete your profile:

Interests, hobbies, and personality traits
Photos and media content you upload
Chat messages and interactions with other users

C. Location Data

With your permission, we collect your precise geolocation data to enable our core feature: coordinating meetups with users in your proximity. You can disable location services in your device settings, but this will limit your ability to use matching features.

D. Technical Data

We automatically collect certain information when you access the App:

Device information (ID, model, operating system)
IP address and login status (via session cookies/tokens)
App usage data and crash reports

For a detailed breakdown of the cookies we use, see our Cookie Policy.

2. How We Use Your Information

We use the collected information to:

Create and manage your account.
Provide location-based matching services.
Facilitate communication between matched users.
Improve app functionality and user experience.
Enforce our Terms of Service and prevent harassment or illegal activities.
Send administrative notifications (e.g., security alerts, chat notifications) and occasional updates, product news, or relevant information about VibeWise.

3. Information Sharing

We do not sell your personal data. We may share information with:

Service Providers: Third-party vendors who process data on our behalf, including:
- Supabase (Supabase Inc.) – database, authentication, and cloud storage hosting
- Vercel (Vercel Inc.) – application hosting and content delivery; processes IP addresses and request data
- Google (Google LLC) – OAuth sign-in; processes your Google profile data during sign-in
- Meta / Facebook (Meta Platforms, Inc.) – OAuth sign-in; processes your Facebook profile data during sign-in
- Hyperknot Software Kft. (OpenFreeMap) – map tile hosting; anonymised request logs only (no IP addresses, no cookies) when the in-app map is displayed
- Cloudflare (Cloudflare, Inc.) – CDN used by OpenFreeMap for tile delivery; processes request metadata per their privacy policy
Other Users: Your public profile information (name, avatar, interests) is visible to other users. Your location is used for matching but precise coordinates are not publicly exposed without your consent.
Legal Authorities: If required by law or to protect rights and safety.

4. Your Rights & Data Protection Compliance

Regardless of your location, we respect your control over your data.

For Users in Hong Kong (PDPO) and the EU/EEA (GDPR):

You have the following rights:

Right to Access: Request a copy of your personal data.
Right to Rectification: Specify incorrect data for correction.
Right to Erasure ("Right to be Forgotten"): Request deletion of your account and data.
Right to Portability: Export your data in a machine-readable format.
Right to Object: Opt-out of certain processing activities.

How to Exercise Your Rights

5. Data Deletion

To delete your account and all associated data:

Go to App Settings → Account → Delete Account
If you signed in via Google or Facebook, you can also delete your data through your provider's app settings

All data will be permanently deleted within 30 days.

6. Data Retention

We retain your personal data for as long as your account is active. After account deletion:

Profile data and messages are deleted within 30 days.
Aggregated, anonymized analytics data may be retained indefinitely.

7. Children's Privacy

VibeWise is strictly for users who are 18 years of age or older. We do not knowingly collect, use, or retain personal data from individuals under 18.

Age Certification Record

When you first sign in, you are required to complete a mandatory age self-certification checkbox before proceeding with OAuth authentication. This certification is recorded server-side:

age_verified_at — a timestamp stored in your user record confirming when you completed the age self-certification. This record is retained as part of our accountability obligations under Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and GDPR Article 5(2).
This timestamp is set once and never overwritten, preserving the original consent record.
On the same device, your certification status is also stored in browser Local Storage (vw_age_certified) for convenience so you do not need to re-certify on each visit. This is a client-side convenience layer only; the authoritative record is the database timestamp.

If a Minor's Data Is Discovered

If we learn that personal data belonging to a minor has been collected:

We will delete it as soon as reasonably practicable
We will take steps to prevent further collection

This approach is consistent with Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and GDPR Articles 6 and 8 (conditions for lawful processing and digital consent for minors).

If you believe a minor has created an account, please contact us at support@vibewise.fun or report the account through the app.

For full details on our age enforcement approach, see our Age Verification Policy.

8. International Data Transfers

Your data is stored on Supabase (Supabase Inc., our authentication and database provider) infrastructure hosted in Southeast Asia (Singapore). Supabase's service infrastructure also operates in the United States. These transfers are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs), to ensure equivalent protection under Hong Kong's Personal Data (Privacy) Ordinance (PDPO) and GDPR.

9. Security

We implement industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

11. Contact Us

For privacy-related inquiries, please contact:

Email: privacy@vibewise.fun
Address: Hong Kong S.A.R.