Vybe Privacy Policy

This Privacy Policy explains how Vybe (“Vybe,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use the Vybe mobile app, vybeapp.fit, and related services (together, the “Service”). It also explains the choices and rights available to you.

1. Information we collect

Account and profile information

When you create or use an account, we may collect your name, username, email address, phone number, password in protected form, profile photo, biography, and account preferences. We also record account status, authentication events, and settings needed to operate and secure your account.

User content, communications, and social activity

We collect content and activity you choose to create through the Service, including:

• posts, captions, comments, likes, saves, follows, community and gym activity, reports, and other social interactions;
• photos and videos, including profile images, post media, and progress photos;
• livestream video and microphone audio that you choose to broadcast, plus the broadcast title, audience, chat, reactions, viewers, moderation state, and session events;
• direct and group chat messages and related information such as participants, timestamps, delivery or read status, and moderation actions; and
• information you send when requesting support, reporting content, or communicating with us.

Fitness, health, and nutrition information

Depending on the features you use, we collect information you enter about workouts, exercise history, workout plans, goals, activity, meals, foods, nutrition, hydration, weight or body measurements, progress, achievements, and related notes or photos. This information may reveal sensitive details about your health or physical condition. We use it to provide the tracking, planning, progress, and sharing features you request. Logged meals are private by default. A meal appears in Community Meals only after you explicitly share it; health notes, meal-scan diagnostics, and confidence metadata are not included in that public response. We do not use health or fitness information for third-party targeted advertising.

Location information

When you use a location-based feature and grant device permission, Vybe may collect precise location coordinates to find nearby gyms, identify a location, or create a location-based community. We may also derive approximate location from your IP address and collect a location you enter or select. Location access is optional; you can deny or revoke it in your device settings, although nearby-gym and similar features may then be limited. A location or gym you attach to content may be visible to the audience for that content.

Contacts

Vybe accesses contacts only after you choose a contact-based feature, such as “Find Friends from Contacts” or inviting a friend, and grant permission. For friend matching, the app normalizes email addresses and phone numbers on your device, converts them to one-way SHA-256 hashes, and submits only bounded batches of those hashes to look for matching accounts. Raw address-book identifiers, contact names, notes, photos, postal addresses, and a saved copy of your address book are not uploaded. An invitation sent through your device’s messaging app is controlled by you and that messaging provider. You can revoke contacts permission in your device settings.

Device, push notification, and diagnostic information

We automatically receive technical and usage information needed to run and protect the Service, such as IP address, device and operating-system type, app version, language, request and event timestamps, pages or features used, and server logs. If you enable notifications, we collect a device push token and notification preferences. We may also receive error reports and basic diagnostic data when the app or a service request fails.

Livestream peer connections use a Vybe-operated relay so hosts and viewers do not receive one another’s direct network candidates. The API and relay necessarily process source IP addresses, short-lived relay credentials, connection state, and traffic metadata while establishing and carrying the session. Vybe does not record or persist the livestream audio or video, although a participant may be able to make a recording using their device or other tools.

Information from other sources

We may receive information from other users when they interact with or report your content, and from service providers that help us detect fraud, deliver the Service, or troubleshoot problems. The information we receive depends on the feature and the permissions you grant.

2. How we use information

We use personal information to:

• create, authenticate, maintain, and secure accounts;
• provide feeds, profiles, posts, media, comments, chats, fitness and nutrition tools, gym discovery, communities, and other requested features;
• personalize content and recommendations based on your activity and choices;
• match contacts with existing users when you expressly request that feature;
• send service messages and, with permission, push notifications;
• respond to support requests and communicate changes to the Service or this Policy;
• detect, investigate, and prevent abuse, fraud, security incidents, and violations of our rules;
• moderate content, enforce agreements, and protect users and the public;
• debug, maintain, measure, and improve reliability, accessibility, and performance; and
• comply with law and exercise or defend legal claims.

3. How we disclose information

Other users and the public

Your profile and content may be visible to other users or the public according to the feature and your settings. People in a chat can see messages and media sent to that chat. A livestream is visible only to the public, followers, or invited accounts according to the audience selected by its host. Likes, comments, follows, gym or community participation, and other social actions may be visible to affected users. Do not post or broadcast information you do not want your selected audience to see.

Processors and service providers

We disclose only the information reasonably needed to vendors that process data for us under contractual or legal obligations. These providers may include:

• cloud hosting, database, backup, and media-storage providers, including Amazon Web Services where configured;
• Google Maps, Places, and Geocoding services when you use gym-discovery or location features;
• Firebase Cloud Messaging and Apple Push Notification Service for push delivery;
• email delivery, support, content-safety, security, and operational providers; and
• logging and diagnostic providers used to identify errors and maintain reliability.

These providers process data under their own terms where they act independently, such as when you use Google Maps or device notification services. Your device and provider settings may offer additional controls.

Legal, safety, and organizational disclosures

We may disclose information when reasonably necessary to comply with law or valid legal process; protect the rights, safety, and security of users, Vybe, or others; investigate fraud or abuse; or enforce our agreements. If Vybe is involved in a merger, financing, acquisition, reorganization, bankruptcy, or transfer of assets, information may be disclosed during diligence and transferred as part of that transaction, subject to appropriate safeguards and applicable law. We may also disclose information at your direction or with your consent.

No sale or targeted-advertising sharing

Vybe does not sell or rent personal information. Vybe does not share personal information for cross-context behavioral advertising and does not use precise location, contacts, or health and fitness information for third-party targeted advertising. If our practices change, we will update this Policy and provide any choices required by law before applying the new practice.

4. Permissions and your choices

• Profile and content: You can edit profile details and remove supported content in the app.
• Location and contacts: You can decline or revoke these permissions in iOS or Android settings.
• Notifications: You can adjust notification preferences in Vybe and in your device settings.
• Messages and public content: Review the audience and information before sharing. Other people may save or copy information they can see.
• Meals and livestreams: Meal logs stay private unless you publish an entry to Community Meals. Before starting a livestream, choose its audience and review what the camera and microphone can capture. Camera and microphone permission can be revoked in device settings.
• Account deletion: You can delete your account from the app by opening Profile, opening Settings, selecting Delete Account, and confirming. See the account deletion page for details and a fallback method.

5. Retention and account deletion

We keep personal information only as long as reasonably necessary for the purposes described in this Policy. The period depends on the type of data, whether your account remains active, the sensitivity of the information, operational and security needs, and legal obligations.

When you delete your account, we delete or de-identify account information and associated personal data from active systems, subject to limited exceptions. Messages and managed media that you authored are removed. Messages authored by other participants remain available to those participants after your account reference is removed. We may retain narrowly limited information where required to comply with law, resolve disputes, prevent fraud or abuse, protect safety, or enforce agreements. Residual copies may remain in protected backups until those backups are overwritten through the ordinary backup cycle. Information that other people copied or shared outside Vybe is not under our control.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, protected credentials, transport encryption, and monitoring appropriate to the Service. No transmission or storage method is completely secure, so we cannot guarantee absolute security. Protect your password, use a unique credential, and notify us if you suspect unauthorized account access.

7. Children

Vybe is intended for people age 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information to Vybe, contact us so we can investigate and delete it. Users under the age of legal majority where they live should use Vybe only with the permission of a parent or legal guardian.

8. Privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of personal information; withdraw consent; restrict or object to certain processing; or appeal a decision about a privacy request. You may also have the right not to be discriminated against for exercising a privacy right.

You can use available in-app controls or send a request through the private support form. We may need to verify that you control the relevant account before completing a request. If an authorized agent makes a request, we may require proof of authorization and may still verify the request directly with you. To appeal a decision, send a support request and state that you are requesting an appeal.

9. International processing

Vybe and its providers may process information in the United States, Canada, and other countries where they operate. Privacy laws in those locations may differ from the laws where you live. Where required, we use recognized safeguards for cross-border transfers.

10. Third-party services and links

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this Policy. Review those policies before providing information to a third party.

11. Changes to this Policy

We may update this Policy as the Service, our practices, or the law changes. We will post the revised Policy with a new “last updated” date and provide additional notice in the app or by email when required.

12. Contact us

For privacy questions, rights requests, or account-specific help, use the private support form. Provide only the information needed to identify the account and explain the request. Never send a password, one-time code, payment information, government identification, full health record, or another person’s private information. Vybe uses the name, email address, and message you submit to review the request, verify account control where needed, and follow up.