Privacy Policy

1. Who we are

Vybeto ("we", "us", "our") is an emoji-based social discovery platform. Contact: vybetoapp@gmail.com · Website: vybeto.com

This Privacy Policy applies to the Vybeto mobile application available on Google Play and the Apple App Store, and the website vybeto.com.

2. What data we collect

Account Data

• Email address (login and recovery only)
• Nickname — your real name is never required
• Profile photo (optional)
• Age range and gender (optional)
• Emoji interests and activity preferences

Location Data

• Approximate location when you post an activity pin
• We apply a fuzzy offset of 300–800 metres — your exact GPS is never stored or shared with other users
• Location accessed only when app is in use (foreground only)
• Revoke location permission at any time in device settings

What we do NOT collect

• Your real name
• Exact GPS coordinates
• Contacts, camera, or microphone without explicit permission
• Any data when the app is not open
• Data from other apps

3. How we use your data

• To show your emoji pins to nearby users matching your criteria
• To enable mutual connections and real-time chat
• To process Pro subscription payments via Razorpay (India) or Stripe (International)
• To send push notifications with your permission
• To improve the app using anonymised aggregated data only
• To comply with legal obligations

We never use your data for advertising and never sell it to any third party.

4. Third-party services

• Firebase (Google) — authentication, database, storage. Privacy Policy
• Mapbox — map rendering. Privacy Policy
• Razorpay — India payments. Privacy Policy
• Stripe — International payments. Privacy Policy

5. Data retention

• Activity pins expire and are deleted per the duration you set (24h–1 month)
• Ghost pins deleted 7 days after expiry
• Account data retained until you delete your account
• Safety-report records and enforcement evidence may be retained as needed to investigate abuse, prevent repeat violations, or comply with law
• All personal data permanently erased within 30 days of account deletion unless law requires longer retention

6. Your rights

• Access — request a copy of all data we hold about you
• Correction — update inaccurate data in your profile
• Deletion — delete your account and all data at any time
• Portability — request your data in machine-readable format
• Withdraw consent — revoke location permission in device settings at any time

GDPR (EU) and DPDP Act 2023 (India) rights are fully respected. Email vybetoapp@gmail.com to exercise any right.

7. Security

• All data encrypted in transit via TLS/HTTPS
• Firebase encryption at rest for all stored data
• Firestore security rules restrict per-user data access
• No passwords stored — we use OAuth and email link sign-in only

8. Children's privacy

Vybeto is not intended for users under 13. If you believe a child under 13 has created an account, contact vybetoapp@gmail.com immediately — we will delete it within 48 hours.

9. Child safety and reporting data

Vybeto provides in-app reporting tools for profiles, posts, and chat messages. We may process report content, moderation notes, account identifiers, timestamps, and evidence needed to review abuse, remove CSAM, report confirmed CSAM to NCMEC or relevant authorities, and comply with child safety laws.

Dedicated child safety contact: Vybeto Child Safety Response Team via vybetoapp@gmail.com. Public standards: Safety Standards.

10. Changes to this policy

When we update this policy we update the date above and send an in-app notification for significant changes. Continued use constitutes acceptance.