Privacy policy for VibeS

Important: This page is a strong product-ready baseline, but it is not legal advice. Final compliance depends on your legal entity details, target countries, age policy, vendor stack, and counsel review.

1. Service operator and contact

Service name: VibeS, store identity Vibe Stream.

Primary support contact: support@vibe-stream.de.

Administrative contact: admin@vibe-stream.de.

Business operator name, registered address, company number, VAT number, EU representative, UK representative, and DPO details must be added here before large-scale public launch if required by your actual business structure and jurisdictions.

2. Information we collect

Depending on how you use VibeS, we may collect account details, authentication identifiers, profile data, public content you upload, comments, likes, saves, hidden-spot ratings, support communications, basic device and app diagnostics, and optional location context that you choose to provide.

We may also receive technical service data from infrastructure providers that help us operate authentication, storage, messaging, analytics, security monitoring, and platform administration.

3. Why we process personal data

We process information to provide the service, authenticate users, operate the social feed, support travel discovery features, personalize the experience, protect users and the platform, answer support requests, maintain service security, comply with legal obligations, and improve product operations.

4. Legal bases and regional privacy rights

For users in jurisdictions such as the European Union and the United Kingdom, we may rely on contract, consent, legitimate interests, and legal obligations as the basis for processing. For users in jurisdictions such as California and other U.S. states, applicable rights may include access, deletion, correction, portability, and certain opt-out rights depending on local law. For users in jurisdictions such as Singapore, Japan, and other Asia-Pacific markets, the service is intended to provide notice of purposes, support consent-based processing where required, and offer channels to request access, correction, withdrawal, or deletion where applicable.

5. How we disclose information

We may disclose information to service providers and subprocessors that help deliver hosting, storage, authentication, messaging, customer support, abuse prevention, analytics, and technical operations. We may also disclose information when required by law, to protect the rights or safety of users or the platform, or in connection with a corporate transaction.

As configured today, the live stack includes Firebase services and a Hetzner-hosted web and administration layer.

6. International data transfers

Because VibeS uses internet-based infrastructure, personal data may be processed in countries outside the user’s place of residence. Where required, appropriate transfer safeguards should be implemented and documented based on the final production vendor and entity setup.

7. Data retention

We retain data only for as long as needed to operate the service, resolve disputes, comply with legal obligations, enforce platform rules, and maintain security records. Specific retention periods should be finalized and inserted here for account data, support records, logs, backups, and deleted content workflows before a broad commercial launch.

8. Security

We use reasonable administrative, technical, and organizational measures to help protect personal data, including TLS for the live website, authentication controls, server access restrictions, backend rules, and operational monitoring. No system can be guaranteed completely secure, and users should also protect their own credentials and devices.

9. Children and age restrictions

VibeS should publish a clear minimum age policy before public launch. If the service is not intended for children, this section must state the minimum age and explain how the service handles reports of underage use. Additional rules may apply in the EU, U.S., and parts of Asia depending on the target age range.

10. Your rights and choices

Depending on your region, you may have the right to request access to your data, request correction, request deletion, request a copy of certain data, withdraw consent, object to certain processing, limit use of certain information, or submit a complaint to a regulator. You may also be able to use in-app controls for profile edits and account deletion where supported.

To exercise a privacy request, contact support@vibe-stream.de. We may need to verify identity before fulfilling a request.

11. Cookies and similar technologies

The VibeS website and connected services may use basic technical storage, cookies, logs, or comparable technologies for security, performance, session management, and analytics. If you later add marketing cookies or third-party advertising technologies, a separate cookie disclosure and consent mechanism may be required in some jurisdictions.

12. Changes to this policy

We may update this policy as the product evolves, as vendors change, or as laws require. Material changes should be communicated through the website, app, or another reasonable notice channel.

13. Complaints and regulator contact

If you have concerns about privacy handling, contact support@vibe-stream.de first. Depending on your jurisdiction, you may also have the right to file a complaint with a supervisory authority or other data-protection regulator.