Vibe Sync - BFF Widget

01

Who We Are

VibeSync ("we", "us", or "our") is a photo-sharing application that lets you send candid moments — Vibes — directly to your friends. We are the data controller for the personal information described in this policy.

If you have questions about this policy or how your data is handled, you can reach us at: hi@ayyoub.io

02

Information We Collect

We only collect what is necessary to operate the app. Below is an exact breakdown based on our database.

Account Data

Name Provided via Sign in with Apple. Used to identify you to your friends.

Email address Optional. May be provided by Apple. Used for account recovery and support only.

Apple User ID A unique identifier assigned by Apple. Used to authenticate your account. We never share this.

Invite code A unique code assigned to your account used to add friends.

Device & Notification Data

APNs device token An Apple-issued token used exclusively to deliver push notifications to your device. Never shared with third parties.

Widget device token A separate Apple-issued token used exclusively to refresh the VibeSync home screen widget when a new Vibe arrives.

Content & Messaging Data

Photos (Vibes) Images you send are stored in Amazon S3 using an anonymised MD5 key. No location metadata or EXIF data is retained. Images are not used to train any AI or ML models.

Message records We store sender ID, receiver ID, a reference to the S3 image, and a timestamp. We do not store message text.

Friendship connections We store which users have connected as friends (via invite code). This is used solely to route Vibes between friends.

Website Contact Form (website only)

Name, email, message Submitted voluntarily when you contact us through our website. Used only to respond to your enquiry and never shared.

03

How We Use Your Information

We use the data we collect only for the following purposes:

Operate the app — authenticate your account, route Vibes to the right recipients, and display your friend list.
Deliver push notifications — alert you when a friend sends you a Vibe, and refresh your home screen widget.
Provide customer support — respond to messages submitted via our contact form.

We do not sell your data, use it for advertising, share it with data brokers, or use your photos to train machine learning models. Ever.

04

Data Sharing & Third Parties

We share limited data only with the following service providers, strictly to operate VibeSync:

Provider Purpose Data shared

Apple (APNs) Push notifications & Sign in with Apple Device token, Apple User ID

Amazon Web Services (S3) Image storage Anonymised image files (MD5 key, no metadata)

MongoDB Atlas Database hosting Account and message records described above

We may disclose information if required by law, court order, or to protect the safety of our users. We will notify you where legally permitted.

05

Camera & Photo Access

VibeSync requests access to your device camera to capture and send Vibes. This permission is used only when you actively take a photo inside the app. We do not access your camera in the background.

Photos you choose to send are uploaded to our servers. Photos are stored using an anonymised file key (MD5 hash) with no personally identifiable filenames and no EXIF or location metadata retained.

You can revoke camera access at any time in Settings → Privacy & Security → Camera on your iPhone.

06

Push Notifications

VibeSync requests permission to send push notifications to alert you when a friend sends you a Vibe, and to refresh your home screen widget. Notifications are delivered via Apple's APNs infrastructure.

You can disable notifications at any time in Settings → Notifications → VibeSync. Disabling notifications does not affect your ability to view Vibes inside the app.

07

Data Retention

We retain your account data for as long as your account is active. Message records and associated images are retained to provide your conversation history within the app.

When you delete your account, we permanently delete your user record, all friendship connections, all message records, and all associated images from Amazon S3. This process is irreversible.

08

Your Rights

You have the following rights over your data:

Access — request a copy of the personal data we hold about you.
Correction — request correction of inaccurate data (e.g. your display name).
Deletion — delete your account and all associated data directly inside the app via Profile → Delete Account. This permanently removes all your data from our systems and from Amazon S3.
Objection — object to processing of your data in certain circumstances.
Portability — request your data in a portable format.

To exercise any of these rights, contact us at hi@ayyoub.io. We will respond within 30 days.

09

Children's Privacy

VibeSync is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately. If you believe a child under 13 has used our service, please contact us at hi@ayyoub.io.

10

Security

We take reasonable technical and organisational measures to protect your data. All data in transit is encrypted via HTTPS/TLS. Images stored in Amazon S3 are access-controlled and served via authenticated, time-limited URLs.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please disclose it responsibly to hi@ayyoub.io.

11

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where changes are material, notify you via a push notification or in-app message.

Continued use of VibeSync after changes are posted constitutes your acceptance of the updated policy.

Privacy Policy