Privacy Policy

We collect only what's necessary to provide the service: Account Data: Email, username, display name, password (encrypted) Profile Data: Location (optional), preferences, avatar image Content You Create: Diary entries, reviews, wishlists, vibe checks Usage Data: App interactions for improving the service (anonymized) We do NOT collect: Payment information, precise location tracking, contacts, or data from other apps.

Your data is used to: • Provide and personalize the ViiBy experience • Display your content within the app • Send service-related notifications (if enabled) • Improve the app through anonymized analytics We do NOT: • Sell your personal data • Share your data with advertisers • Use your data for profiling or targeting

Your data is private by default: • Your profile is only visible to you unless you choose to share • Your diary entries are private • Wishlists can be shared at your discretion • Vibe checks may be shown anonymously in aggregate You control what you share.

We take security seriously: • Data is encrypted in transit (HTTPS) • Passwords are hashed and never stored in plain text • We use secure cloud infrastructure • Access to data is restricted to essential personnel • We conduct regular security reviews While we implement strong protections, no system is 100% secure.

You have the right to: Access (Art. 15): View all data we hold about you Rectification (Art. 16): Correct inaccurate data via profile settings Erasure (Art. 17): Delete your account and all associated data Data Portability (Art. 20): Export your data in JSON format Withdraw Consent: Stop using the service at any time Exercise these rights from your Profile → Settings section.

You can export all your data at any time: • Go to Profile → Settings → Export My Data • Receive a JSON file containing all your personal data • Includes: profile, diary entries, wishlists, vibe checks, images • Export is available immediately This fulfills your right to data portability under GDPR Article 20.

You can permanently delete your account: • Go to Profile → Settings → Delete My Account • Confirm by typing "DELETE" • All personal data is immediately and irreversibly removed • Uploaded images are deleted from our servers • Some content may be retained in anonymized form ("Anonymous") • Aggregate statistics are preserved without identifying you This fulfills your right to erasure under GDPR Article 17.

We retain your data only while your account is active: • Personal data: Deleted upon account deletion • Content: Deleted or anonymized upon account deletion • Uploaded images: Deleted upon account deletion • Anonymized analytics: May be retained indefinitely • Audit logs: Retained for legal compliance (no PII) We do not keep personal data longer than necessary.

We use limited third-party services: • Cloud Hosting: Secure infrastructure providers • Image Storage: Cloudinary (for avatars and images) • Authentication: Secure session management These services are GDPR-compliant and process data only as instructed by us.

For privacy questions or to exercise your rights: Email: [email protected] We respond within 30 days. If unsatisfied, you may lodge a complaint with your local data protection authority.