We built Vibors privacy-first because there's no other ethical way to build a behavior-based product. This page tells you exactly how it works — in plain language, not lawyer-speak.
If you read nothing else on this page, read this:
Your name (or chosen handle), phone number or email for verification, and optional profile photo. Required to keep accounts unique and recoverable.
When you enter a partner venue, the venue beacon broadcasts a short identifier. Your phone records: which beacon, what time, how long you stayed. Nothing else from that interaction.
Hashed device identifier, app version, OS version, language. Used only for session integrity and bug diagnostics. Never linked to advertising IDs.
From check-ins, we compute your score, tier, and aggregate signals (venue diversity, category mix, social overlap with your circle). These live on your account.
We collect only what's necessary to deliver the four functions of Vibors:
Everything else (analytics, advertising, model training on user data) — we don't do.
Venues see aggregate signals only — tier mix of guests tonight, vibe match with their profile, repeat-rate trends. They never see individual user identities, contact info, or visit histories.
We use trusted infrastructure partners (cloud hosting, push notification delivery, email/SMS verification) bound by data processing agreements. They process data on our behalf and cannot use it for their own purposes.
We may disclose specific account data if compelled by valid legal process in jurisdictions where we operate. We resist overbroad requests and notify users when legally permitted.
Marketers, advertisers, data brokers, social platforms, or any third party seeking to build profiles. Not now. Not later.
Regardless of jurisdiction, every Vibors user has these rights:
Data at rest is encrypted with AES-256. Data in transit uses TLS 1.3. Account secrets are hashed with industry-standard algorithms and never stored in plain form. Access to production systems requires hardware security keys and is logged.
Primary data stores are region-resident: UAE for our launch market, with additional regions added as we expand. We do not transfer personal data across borders without legal safeguards.
The Vibors website uses minimal cookies — strictly for session, language preference, and basic anonymous traffic measurement. We do not use third-party advertising cookies. You can clear cookies in your browser without affecting your app account.
Vibors is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has registered, contact us at privacy@vibors.app and we'll delete the account.
We update this policy when we change how data is handled. Material changes get notified in-app and by email at least 30 days before they take effect. The version number and effective date at the top of this page reflect the current policy.
For privacy questions, requests, or complaints:
We aim to respond to all privacy requests within 5 business days, and resolve them within 30.