Privacy Policy

In short

• Your Claude, ChatGPT, Grok and Gemini logins stay on your Mac. They never reach our servers.
• Your prompts, code and conversations are not sent to us.
• We keep your VIBEY account and a list of the Macs you use it on, and, if you use them, your plan's billing record, your support messages and your phone remote's channels.
• No analytics service and no advertising, on the website or in the app.
• If you create an account after following one of our links, the account notes which link it was.
• We never sell your data.

Your account

When you create an account, we keep your email address and your password through our sign-in provider, Supabase. We also keep when the account was created, an optional display name, your plan and its status (free during the beta), and, if one of our links brought you, that link's tag.

Your Macs

When you sign in to the VIBEY app, it registers your Mac to your account and then checks, about every six hours, that the account may use the app. Each check sends three things:

• A random id the app creates for that Mac. It is not a hardware serial number.
• The Mac's name, taken from its computer name (for example "Ana's MacBook Pro"), which may include your name.
• The version of the VIBEY app.

We keep these with the time of the last check, and your account page lists your Macs.

Signing in with Google

If you choose Continue with Google, Google shares your email address, your name and your profile picture with us, and Supabase keeps them with your account. We use the email to sign you in and to write to you about your account. Google never shares your Google password with us.

Payments

If you buy VIBEY Pro, Paddle.com, our reseller and the Merchant of Record, takes the payment and keeps your payment details: VIBEY never sees or stores your card. We keep your Paddle customer and subscription ids, your plan's price, its status and when the paid period ends, so the app knows your plan, and a record of each billing notice Paddle sends us, so none is applied twice. We give Paddle your account's email address, and your new one if you change it, so your receipts reach you.

Support

When you write to us from your account, we keep what you send: the topic you choose, the subject, your messages and, if you give it, your VIBEY version, together with our replies, their dates and the request's status. We use them only to answer you.

The phone remote

If you turn on remote control and pair a phone, the phone and your Mac talk through Supabase Realtime. After a first greeting that carries only one-time keys and the paired phone's id, everything they exchange, your messages and the replies included, is end-to-end encrypted between the phone and the Mac, so neither we nor Supabase can read it. We keep a channel name made of a random code for each Mac, and an account setting that turns remote control off.

What the app does not send us

The app does not send us your model logins, your prompts, your code, your conversations or your files. It has no analytics, and crash reports stay on your Mac: they are never uploaded.

The model companies

Each session runs the model company's own app under your account, so your prompts and conversations go to Anthropic, OpenAI, xAI or Google just as they would without VIBEY, under their privacy policies. For Claude, the app also reads your usage limits from Anthropic with your own Claude login, to show them to you. For Gemini, it asks Google's own app on your Mac for the same, under your own Google login.

App updates

The app checks for updates by reading a small file from our update server on Cloudflare R2, and downloads new versions from there. These requests carry no account information.

This website

The website has no analytics service and no advertising. If you open it through one of our links, whose address ends in ?from= and a short tag such as ?from=x-launch, your browser keeps that tag in its own storage for 30 days without sending it anywhere, and only if you create an account in that time is the tag saved with your account, so we can count which of our posts bring sign-ups. When you sign in at vibeywork.com, your browser keeps your session in its local storage so you stay signed in; signing out removes it. We email you only about your account, such as the link that confirms your address.

Who handles your data

These providers process data for us, to run VIBEY:

• Supabase: our database, sign-in and the phone remote's relay. It holds your account, your list of Macs, your plan's billing record and your support messages.
• Paddle: our reseller and Merchant of Record. It takes payments for VIBEY Pro and keeps your payment details, under its own privacy policy.
• Google: sign-in, only if you choose Continue with Google.
• Vercel: hosts this website.
• Cloudflare: serves app updates.

They may process data outside the Dominican Republic. Like any web service, they receive your IP address and basic request details when you connect.

Why we use it

To run your account, let the app check that your account may use it, show you your Macs, take payments for your plan, answer your support requests, connect your phone to your Mac, send account emails, keep VIBEY secure, and count which of our links bring new accounts. We never sell your data and do not use it for advertising.

How long we keep it

We keep your account data while your account exists. Deleting your account deletes your profile, your list of Macs, your plan record, your billing record, your support messages and your phone remote's channels with it, and cancels a paid subscription first. Paddle keeps its own records of your orders, as the Merchant of Record.

Security

Every connection to our servers is encrypted (HTTPS). Our database lets each account read only its own records. In the app, your VIBEY sign-in is kept in the macOS Keychain.

Your choices and rights

You can see your Macs on your account page and sign out at any time. You can ask us for a copy of your data, to correct it, or to delete your account.

To make a request, write to vibey@jstudio.io.

Changes to this policy

If we change this policy, the new version will be posted on this page with a new date.