Privacy Policy
Last updated: June 7, 2026
This Privacy Policy explains what personal data we collect when you use VibeX, why and how we process it, and the rights you have. VibeX is a trust product: our goal is to process your photos only to create the result you asked for, and to keep you in control of your data.
1. Data controller
VibeX is a mobile app for iOS and Android, built and operated by Mustafa Evleksiz, who is the data controller under this policy. Use the contact address below for any privacy question or request.
2. Data we collect
We collect only what we need to provide the service:
- Photos
- The photos you upload are processed only to create the AI improvement you requested.
- Account info
- Email, or a Sign in with Apple / Google identifier. With Sign in with Apple you can hide your email.
- Device identifier
- A device-specific identifier (UUID) and the device model, used to grant a guest try, provide support, and prevent abuse.
- Approximate location
- A COUNTRY-level approximate location derived server-side from your network connection, for fraud prevention and abuse detection. No GPS is used, your precise IP address is not stored, and this data is kept for at most 90 days.
- Usage analytics
- Event data about how you use the app (PostHog), to improve the product.
- Crash logs
- Diagnostics and crash reports (Sentry) to fix problems.
- Purchase info
- Verification of credit purchases (Apple In-App Purchase / RevenueCat). We never see your card details; Apple handles payment.
- Advertising
- When you earn credits by watching ads, they are served by Google AdMob and personalized only if you grant permission (ATT).
3. Why we process data
- To create and deliver the photo output you requested,
- To create your account, sign you in, and sync your creations across devices,
- To manage credits, purchases and free earnings,
- To prevent abuse, fraud and content-safety violations,
- To keep the app stable, fix bugs and improve the product,
- To comply with legal obligations.
4. What happens to your photos
When you upload a photo, processing happens over our secure servers (Supabase Edge Functions), and the photo is sent to the AI model (Google's Gemini vision model) to create the output. The AI key never lives on your device.
Your creations are stored in a private cloud space that belongs to you, for history and cross-device sync. You can delete them at any time.
Your photos are NEVER used to train any AI model. A content-safety filter is applied, and we obtain explicit consent for processing.
5. Third-party services
We rely on the following providers to deliver the service. Each is subject to its own privacy policy:
- Apple
- Sign in with Apple, in-app purchases and distribution.
- Sign in with Google, the Gemini vision model and AdMob ads.
- Supabase
- Authentication, secure processing (Edge Functions) and storage.
- RevenueCat
- Management of purchases and credit entitlements.
- PostHog
- Privacy-conscious product analytics.
- Sentry
- Crash and error monitoring.
6. International transfers
Some of the providers above may host servers outside your country (for example in the European Union or the United States). As a result, your data may be processed and stored abroad to the extent necessary to provide the service. These transfers are carried out in line with applicable data-protection rules.
7. Data retention
We keep your data for as long as your account is active or as needed to provide the service. When you delete your account, your data is permanently removed; a waiting period of roughly 30 days may apply before you can re-register.
Legal retention obligations (for example, purchase records) may require us to keep certain data for as long as necessary.
8. Security
We apply reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and keeping no AI key on the client. No method is 100% secure, but we follow industry standards to protect your data.
9. Your rights
Depending on where you live (under GDPR, KVKK and similar laws), you may have the right to:
- Access your data and request a copy (portability),
- Correct inaccurate or incomplete data,
- Request deletion of your data,
- Object to or restrict certain processing,
- Withdraw consent you have given.
To exercise these rights, you can contact us or delete your account directly from inside the app.
10. Children's privacy
VibeX is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, please contact us.
11. Changes
We may update this policy from time to time. For significant changes we will notify you in the app or on this page. The latest version is always published here.
Questions? Write to us: support@vibexapp.com