Privacy Policy

Faces are detected on your device for one purpose only: to cover them. We do not run face recognition, age estimation, or emotion detection on anyone, and no face measurements are stored or transmitted.

Before a photo leaves your device, every detected face is covered with an opaque mask that cannot be reversed. If no face is found, or face covering is unavailable, the photo is not sent at all.

Chat screenshots never leave your device. They are read on your device and only the resulting text is sent — you see and can edit that text first.

Profile screenshots are sent as images, because the text alone cannot be read reliably off a page that is half photographs. Every face found in them is covered opaquely on your device first, exactly as with a photo. Many profile screenshots are text only and contain no face at all, so before sending you are shown the images themselves — not a preview of them — and can cover anything the detector missed with a tap.

Names, phone numbers, e-mail addresses and social handles are replaced with placeholders before anything is sent, and restored only on your device.

Connection logs in “My Vibes” are protected by row-level security in the database, so that only your account can read them. We do not sell data to third parties.

Photos are anonymized on your device and used only to generate the advice you requested. They are not used to build profiles, train public models, or advertise to you.

Age and mood are never inferred from anyone's face — you supply them yourself with a tap, and the AI is told to treat them as your own observation.

Payments are handled by Stripe, which receives your e-mail and card details directly — they do not pass through us. The site is served by Cloudflare.

Advice is generated by OpenAI acting as our processor. Under OpenAI's API terms your content is not used to train their models, but it may be retained by them for up to 30 days for abuse monitoring before deletion.

Voice notes are transcribed by that same processor and then the audio is discarded — only the text is kept. Unlike text, audio cannot be redacted before it is sent, which is why we ask you to record only your own summary.

Your onboarding profile (age, style, goal, language, work and hobbies) is stored to personalize generated openers and can be edited or cleared at any time in the Profile tab. Your name is not sent to the AI.

We record a short list of things you do, so that we can see which parts of the app are used and where people get stuck. The whole list: that an account was created, with the sign-in method you used and whether the free credits were granted; that you finished onboarding; that the paywall opened; that a purchase was started and that one completed, with the product; that you switched plan; that you opened the cancellation page; each request to the AI, with which feature asked for it and how many tokens it used; that the analysis of a photo was stopped before anything was written, with the reason — it may show children — and the photo's size and how many faces were covered; and, on Android only, that the shop failed to load its prices, with the reason the store gave. Each is stored against your account with a timestamp, and nothing else is.

What is not recorded: nothing you write or are shown. No openers, no notes, no facts, no transcripts, no photos, no message content of any kind. A purchase event says which product was bought, not what you paid it with — card details never reach us at all.

We do this in our legitimate interest in running and improving the service, and in keeping our AI costs in check, under Article 6(1)(f) GDPR. These records stay in our own database, are never sold or shared with advertisers, and are not used to profile you or to target advertising. They are deleted with your account.

Separately, the website counts page views using Cloudflare Web Analytics. It sets no cookies, does not fingerprint your browser, and cannot identify you or connect a visit to your account — it reports how many people opened a page, not who. It runs on the website only and is not part of the Android app.

We set no cookies to track you or to advertise, and there are no advertising or social-network trackers anywhere in the app or on this site.

Notes, voice memos and history logs live in your own account and can be deleted individually or together with the whole connection at any moment.

Deleting a connection permanently removes its notes, logs and voice memos.

Deleting your account removes your profile, connections, notes, logs, diary entries and usage events. A subscription bought on this website is cancelled at the same time; one bought through Google Play has to be cancelled in Google Play first, because only Google can stop it. Records of payments already made are kept, because accounting law requires it.

One thing outlives your account, and we would rather spell it out than let you discover it. The five free credits are meant to be given once per person, so when they are granted we store a one-way cryptographic hash of your e-mail address, salted with a secret that never leaves our database. It is not an address and cannot be turned back into one; it can only answer whether a mailbox has already had its free trial. It is kept for twelve months and then deleted automatically. We do this to stop the same person collecting free credits over and over by deleting and re-creating an account — a legitimate interest in preventing abuse under Article 6(1)(f) GDPR. It plays no part in advertising, profiling, or anything else.

Faces are detected on your device for one purpose only: to cover them. We do not run face recognition, age estimation, or emotion detection on anyone, and no face measurements are stored or transmitted.

Before a photo leaves your device, every detected face is covered with an opaque mask that cannot be reversed. If no face is found, or face covering is unavailable, the photo is not sent at all.

Chat screenshots never leave your device. They are read on your device and only the resulting text is sent — you see and can edit that text first.

Profile screenshots are sent as images, because the text alone cannot be read reliably off a page that is half photographs. Every face found in them is covered opaquely on your device first, exactly as with a photo. Many profile screenshots are text only and contain no face at all, so before sending you are shown the images themselves — not a preview of them — and can cover anything the detector missed with a tap.

Names, phone numbers, e-mail addresses and social handles are replaced with placeholders before anything is sent, and restored only on your device.

Connection logs in “My Vibes” are protected by row-level security in the database, so that only your account can read them. We do not sell data to third parties.

You have the right to access, correct, export, and erase your personal data, and to withdraw consent at any time.

Because face covering happens on your device, no facial images reach our servers or our AI processor.

Notes, photos and conversations can contain data about someone who is not a user of this app and has not agreed to anything. We minimise that data: faces are covered before sending, names and contact details are replaced with placeholders, and photos are never stored on our servers.

Use a nickname rather than someone's real name when you save a profile. It works just as well for the advice you get, and it makes the stored notes far less identifying if anything ever goes wrong.

Minimisation is not the same as anonymity. Please only capture what you genuinely need, and delete a connection when you no longer need it — that erases its notes, logs and voice memos.

We process your data on the basis of your consent, given during onboarding, and to perform the service you requested.

For any data request, contact privacy@vibe-cue.com and we will respond within 30 days.