Privacy Policy

Service: Vibelocate (the app and the website vibelocate.com) Version: 1 · Effective date: 30 April 2026 This Privacy Policy explains what data we collect when you use the Vibelocate service (the "Service"), for what purposes, on what legal basis, with whom we may share it, and what rights you have. By using the Service, you confirm that you have read this Policy. 1. Who processes your data The data controller is the author of the Vibelocate project (the "Operator", "we"), an individual based in the Republic of Cyprus. For any questions about data processing, contact us at [email protected]. 2. What data we collect We collect only the data needed for the Service to work. Account data email address; name or display name; phone number — only if you add it yourself (optional); your user identifier in the system. Data you create photos you attach to meet-ups; meet-up text (activity, description, place, time, tags); reviews of participants after meet-ups. Location approximate and/or precise device location — to show meet-ups near you and help you pick a place on the map. Access is requested "while using the app" and granted with your permission; you can disable it in your device settings. Technical data device identifier and push notification token — to send you notifications about your meet-ups and moderation; crash and performance (diagnostic) data — to detect errors and keep the Service stable; IP address and basic network data — for security and abuse prevention. We do not collect payment data (the Service is free) and we do not use your data to track you across other apps or websites operated by other companies. 3. Sources of data You provide most of the data yourself. If you sign in with Google or Apple, we receive basic profile data from those services (such as your name and email address) to the extent you authorise at sign-in. 4. Purposes and legal bases Purpose Legal basis Registration, sign-in, core features (creating and finding meet-ups, joining, reviews) Performance of the user agreement Push notifications about your meet-ups and moderation status Performance of the agreement / your consent Showing nearby meet-ups based on location Your consent (location permission) Security, fraud and spam prevention, content moderation Our legitimate interest Crash diagnostics and stability improvements Our legitimate interest Marketing emails (project news) Only with your explicit opt-in consent 5. Who we share data with We do not sell your data. To run the Service we use third-party providers (processors) that process data on our behalf: Google Firebase — push notifications; Google Sign-In and Apple Sign-In — account sign-in; Google reCAPTCHA — protection against bots and automated sign-ups; Sentry — crash and diagnostic data; Brevo — sending emails (including marketing — only with your consent); Cloudflare — content delivery, protection and security. Data may also be disclosed where required by law, at the request of competent authorities, or to protect the rights and safety of users. 6. Content from public sources Some events on the Service are created by users, and some come from public sources. We are not the organiser of such events and are not responsible for the accuracy of information from external sources. 7. Data retention We keep data while your account exists and as long as needed for the purposes above, or as required by law. After you delete your account, we delete or anonymise data associated with you, except information we are legally required to keep. 8. Your rights Under the GDPR and applicable law you may: access and export your data; delete your account and associated data; withdraw consent to marketing emails at any time; correct inaccurate data. You can do this directly in the app: Profile → Privacy & Data (request export, delete account, turn off marketing). You can also email us at [email protected]. You have the right to lodge a complaint with the data protection authority in your country (in Cyprus, the Office of the Commissioner for Personal Data Protection). 9. Security We apply reasonable technical and organisational measures to protect data (HTTPS encryption in transit, access controls, protection against automated attacks). No method of transmission or storage is completely secure, so we cannot guarantee absolute protection. 10. Age of users The Service is intended for people 18 years of age and older. We do not knowingly collect data from anyone under 18. If you believe we have received a minor's data, contact us and we will delete it. 11. Changes We may update this Policy. The current version is always available in the app and on the website. For material changes, we will ask you to confirm your consent again. 12. Contact For privacy questions: [email protected].