← back to vibecheck

Privacy Policy

Effective Date: March 11, 2026 · Last Updated: March 11, 2026

1. Introduction and Scope

VibeCheck (“we,” “us,” or “our”) is a social polling and personality-reveal mobile application operated globally by Motus Labs LLC, a Delaware limited liability company. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information about individuals who use the VibeCheck mobile application, web-based voting page, and any related services (collectively, the “Services”), regardless of the country from which they access the Services.

This Privacy Policy applies to:

  • Registered users who create an account on the App (“Account Holders”).
  • Individuals who access a shared VibeLink and cast an anonymous vote through the web-based voting page without creating an account (“Voters”).

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Services immediately.

This Policy is designed to comply with applicable privacy laws in multiple jurisdictions, including but not limited to:

  • The European Union General Data Protection Regulation (EU GDPR) and its national implementations.
  • The UK General Data Protection Regulation and UK Data Protection Act 2018.
  • The United States Children’s Online Privacy Protection Act (COPPA) and applicable state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA).
  • Brazil’s Lei Geral de Proteção de Dados (LGPD).
  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
  • Australia’s Privacy Act 1988 and the Australian Privacy Principles (APPs).
  • Argentina’s Law No. 25,326 on Personal Data Protection.
  • Other applicable national and regional privacy laws where we operate or process personal data.

2. Data Controller and Contact Information

The data controller responsible for your personal information is:

Motus Labs LLC
A Delaware limited liability company operating under the VibeCheck brand.

For all privacy-related inquiries, requests, and complaints:

We will respond to all requests within the timeframes required by applicable law, and in any event within 30 calendar days of receipt.

3. Age Requirements and Children's Privacy

3.1 Minimum Age

The Services are intended for users who are 13 years of age or older. By creating an account or using the Services, you represent and warrant that you meet this minimum age requirement.

3.2 Users Between 13 and 17 Years of Age

If you are between 13 and 17 years of age, you represent and warrant that you have obtained the express permission of a parent or legal guardian to use the Services.

We apply the following additional protections for users under 18:

  • We do not serve behavioral advertising to users under 18.
  • We do not sell, rent, or share the personal data of users under 18 with third parties for advertising or marketing purposes.
  • We do not enable direct contact between adults and minors within the App.
  • Voting interactions are anonymous; no user can directly contact another user through the App.
  • We apply the most privacy-protective default settings to accounts where we have reason to believe the user is a minor.

3.3 COPPA (United States — Children Under 13)

We do not knowingly collect personal information from children under 13 years of age. If we obtain actual knowledge that a user is under 13, we will immediately suspend the account, delete all personal information within 30 calendar days, and refuse any further collection.

If you are a parent or guardian and believe that your child under 13 has created an account without your consent, please contact us immediately at privacy@vibecheck.app.

3.4 European Economic Area and United Kingdom

For EEA and UK users, the minimum age is 16, unless applicable national law permits a lower age with parental consent. Where required, we will seek verifiable parental consent before processing personal data from users who do not meet the applicable age of digital consent.

3.5 Brazil (LGPD)

Under Brazil’s LGPD, special protections apply to personal data of children and adolescents under 18. Processing of data from children under 12 in Brazil requires verifiable parental or guardian consent.

3.6 Australia

Under Australia’s Privacy Act and the forthcoming Children’s Online Privacy Code, we apply age-appropriate protections and privacy-by-default settings for users we identify as minors. We do not collect information from Australian users under 13 without verifiable parental consent.

4. Personal Information We Collect

4.1 Information Provided Directly by Account Holders

  • Display name or nickname.
  • Username (used to generate your unique VibeLink URL).
  • Age or date of birth (used for age verification, content personalization, and compliance).
  • Gender (optional; used for content personalization).
  • Profile photo (optional; used to generate your Vibe Portrait if you subscribe to No Filter).
  • Authentication credentials (managed by Supabase Auth; we do not store raw passwords).

4.2 Information Collected Automatically

  • Device information: device type, operating system, OS version, and device identifiers.
  • App interaction data: screens visited, features used, session duration, buttons tapped.
  • Response timing data: time elapsed before submitting a vote or interacting with a prompt.
  • Answer-change data: whether a user changed their selected answer before submitting.
  • Network information: IP address, used solely for fraud detection and security purposes.
  • Push notification tokens (if enabled).

4.3 Information Collected from Voters (Non-Account Holders)

  • The vote submitted (the option selected).
  • Approximate device type (mobile or desktop browser).
  • Response timing data.
  • Answer-change data.

We do not collect the voter’s name, email address, phone number, social media profile, precise location, or any other directly identifying information. Voter anonymity is a core design principle.

4.4 Information We Do Not Collect

  • Precise geolocation data.
  • Device contacts or address book data.
  • Biometric data (except for profile photos voluntarily uploaded).
  • Financial or payment card information (billing is managed by Apple/Google).
  • Health or medical information.
  • Government-issued identification numbers.
  • Sensitive personal data unless expressly consented to.

5. How We Use Your Personal Information

5.1 To Provide and Operate the Services

  • Create and manage your user account.
  • Generate your unique VibeLink.
  • Display daily prompts and process votes.
  • Generate vibe results based on aggregated, anonymous voting patterns.
  • Generate Vibe Portraits for No Filter subscribers.
  • Enable the creation and sharing of vibe result cards on social media.

5.2 To Power the No Filter Subscription

No Filter subscribers receive additional behavioral insights derived from anonymous voting data, including response timing and answer-change behavior. These insights describe behavioral patterns and do not reveal the personal identity of any individual voter.

5.3 To Communicate with You

  • Send push notifications regarding new votes, vibe results, and in-app activity (only if enabled).
  • Respond to feedback, support requests, or legal inquiries.

5.4 For Safety, Security, and Fraud Prevention

  • Detect and prevent fraudulent or automated voting activity.
  • Enforce our Terms of Service.
  • Comply with applicable legal obligations.

5.5 To Improve the Services

  • Analyze aggregate, de-identified usage trends.
  • Conduct internal research and product development.

5.6 AI-Generated Content

Vibe results and Vibe Portraits are generated using artificial intelligence models. Aggregated, anonymous voting data may be processed by third-party AI model providers for generating these outputs. Data sent to AI providers does not include information that personally identifies any individual voter.

6. Legal Bases for Processing

6.1 European Economic Area, United Kingdom

  • Performance of a contract (Article 6(1)(b)): Processing necessary to provide the Services.
  • Legitimate interests (Article 6(1)(f)): Fraud prevention, security, service improvement, and analytics.
  • Consent (Article 6(1)(a)): Push notifications, profile photo upload, No Filter subscription. You may withdraw consent at any time.
  • Legal obligation (Article 6(1)(c)): Processing to comply with applicable legal requirements.

6.2 Brazil (LGPD)

Consent (Article 7(I)), Performance of a contract (Article 7(V)), Legitimate interests (Article 7(IX)), Legal obligation (Article 7(II)).

6.3 Canada (PIPEDA)

We collect, use, and disclose personal information only with knowledge and consent, and only for purposes that a reasonable person would consider appropriate.

6.4 Argentina (Law 25,326)

We process only data that is adequate, relevant, and not excessive. Consent is obtained prior to collection except where processing is authorized by law or required for contract performance.

7. How We Share Your Information

7.1 We Do Not Sell Your Personal Data

We do not sell, rent, or trade your personal information to third parties for their own marketing, advertising, or commercial purposes. This applies globally.

7.2 Service Providers (Data Processors)

  • Supabase, Inc. — database hosting, authentication, and backend infrastructure.
  • Expo / Expo Application Services — mobile application infrastructure.
  • RevenueCat, Inc. — subscription management and billing verification.
  • Apple Inc. — iOS distribution, Apple Push Notification Service.
  • Google LLC — Android distribution, Firebase Cloud Messaging.
  • AI model providers — for vibe results and Vibe Portraits generation. Only aggregated, anonymized data is transmitted.

7.3 Legal Requirements and Safety

We may disclose personal data if required by applicable law, regulation, court order, or to protect the rights, property, or safety of VibeCheck, our users, or the public.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your data is subject to a different privacy policy.

7.5 Aggregate and De-identified Data

We may share aggregate, de-identified, and anonymized data that cannot reasonably be used to identify any individual.

8. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence.

For transfers from the EEA/UK, we rely on Standard Contractual Clauses (SCCs). For transfers from Brazil, we comply with Article 33 of the LGPD. For other jurisdictions, we apply appropriate contractual and technical safeguards.

A copy of applicable safeguards may be requested at privacy@vibecheck.app.

9. Anonymity and the Voting System

  • In the free tier, voters are never identified by name, username, profile, or any directly identifying attribute.
  • No Filter subscribers receive aggregate behavioral pattern data only — not the voter’s name, username, email, phone number, or profile photo.
  • Web-based voting does not require account creation and does not link vote data to a named individual.
  • We implement technical controls to prevent reverse-engineering of voter identities.
  • We may disclose voter identity information to law enforcement where required by applicable law or to prevent imminent harm.

10. Data Retention

  • Account data: retained for the duration of your account.
  • Profile photo: retained until you delete it or your account.
  • Vibe results and voting data: retained for the duration of your account.
  • Behavioral data: retained for up to 12 months, then aggregated and de-identified.
  • Voter data (anonymous): retained for up to 90 days in pseudonymized form, then anonymized.
  • Account deletion: personal data deleted or anonymized within 30 calendar days.

11. Your Privacy Rights

11.1 Universal Rights

Contact privacy@vibecheck.app to: access your data, correct inaccuracies, request deletion, withdraw consent, or opt out of push notifications.

11.2 EEA and UK Users (GDPR)

Additional rights include: restriction of processing, data portability, right to object, right against solely automated decisions, and right to lodge a complaint with your supervisory authority. Response within one calendar month.

11.3 Brazilian Users (LGPD)

Rights include: confirmation of processing, access, correction, anonymization/blocking/deletion, portability, deletion of consent-based data, information about data sharing, revocation of consent, and complaint to the ANPD.

11.4 California Users (CCPA/CPRA)

Rights include: right to know, delete, correct, opt out of sale/sharing (we do not sell or share), limit sensitive data use, and non-discrimination. Response within 45 days.

11.5 Canadian Users (PIPEDA)

Right to access and challenge accuracy. Response within 30 days.

11.6 Australian Users

Right to access and correct personal information, and to opt out of direct marketing. Complaints may be directed to the OAIC.

11.7 Argentine Users (Law 25,326)

Rights of access, rectification, update, and deletion. Complaints may be directed to the AAIP.

EL TITULAR DE LOS DATOS PERSONALES TIENE LA FACULTAD DE EJERCER EL DERECHO DE ACCESO A LOS MISMOS EN FORMA GRATUITA A INTERVALOS NO INFERIORES A SEIS MESES, SALVO QUE SE ACREDITE UN INTERÉS LEGÍTIMO AL EFECTO CONFORME LO ESTABLECIDO EN EL ARTÍCULO 14, INCISO 3 DE LA LEY Nº 25.326.

12. Security

We implement commercially reasonable technical and organizational measures including: encryption in transit (TLS), encryption at rest, access controls, monitoring and logging, and regular security testing.

No method of transmission or storage is completely secure. In the event of a data breach, we will notify affected individuals and authorities within required timeframes (72 hours under GDPR/LGPD).

13. Cookies and Tracking Technologies

The VibeCheck mobile application does not use browser cookies. The web-based voting page may use limited session-based storage solely for vote session integrity and duplicate vote prevention. We do not use tracking pixels, third-party advertising cookies, or behavioral advertising technology.

14. Third-Party Links and Social Media

The App facilitates sharing to third-party platforms (Instagram, TikTok, X, etc.). Your information on those platforms is subject to their privacy policies, not ours. We are not responsible for third-party data practices.

15. Changes to This Privacy Policy

We may update this Policy from time to time. Material changes will be communicated through a prominent notice in the App, push notification (if enabled), and an updated effective date. Where required by law, we will seek renewed consent.

16. Additional Jurisdiction-Specific Information

  • EEA: We are designating a EU representative per Article 27 GDPR. Until complete, contact privacy@vibecheck.app.
  • UK: The supervisory authority is the ICO at ico.org.uk.
  • Brazil: The supervisory authority is the ANPD.
  • Canada: Complaints may be directed to the Office of the Privacy Commissioner at priv.gc.ca.
  • Australia: Complaints may be directed to the OAIC at oaic.gov.au.
  • Argentina: Complaints may be directed to the AAIP at argentina.gob.ar/aaip.

17. Contact Us

This Privacy Policy was last reviewed and updated on March 11, 2026.