Privacy Policy — Vibe Check

This Privacy Policy explains how Vibe Check (stylized *vibeCheck*) ("Vibe Check," "we," "us," or "our"), operated by Creative Labs AI LLC, collects, uses, discloses, and protects information in connection with the Vibe Check mobile application for iOS, our website at vibecheck.cre8ivelabs.ai, and related services (collectively, the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service. The Service is intended only for users 18 years of age or older.

Vibe Check is a for-entertainment product: you upload a photo and receive a playful, AI-generated "vibe" read. It is not a real assessment of any person and does not detect, measure, or predict any person's character, personality, behavior, trustworthiness, attractiveness, intentions, or safety.

1. Information We Collect

Information you provide.

• Account information. When you register with Sign in with Apple, Google Sign-In, or email, we create an account and store your email address, your authentication provider identity, a unique user identifier (UUID), and, optionally, a name you provide. We do not receive your Apple ID or Google Account password. We also record your language preference, the version of our Terms you accepted and the time you accepted it (terms_version and terms_accepted_at), and your account creation timestamp.
• Photos you upload. To use the Service, you upload a photo that depicts a face. Uploaded photos are facial images. They are stored in a private cloud storage bucket, in a location scoped to your account and protected by row-level security, so that they are not publicly accessible.
• Analysis results. For each photo you submit, our AI generates a structured description (a 26-field JSON result) consisting of facial-feature descriptors (such as face shape, jawline, and gaze) together with playful, entertainment-only "vibe" fields. We store this result in association with your account, along with operational metadata such as the AI model name, processing cost, and latency, and any error text if the analysis fails.
• Purchase records. When you buy credits or premium access, we store a purchases ledger entry: the source of the purchase (for example, Stripe or Apple), an external transaction identifier, a description of what was purchased (for example, "10 credits" or "premium"), the amount, the currency, and a timestamp. Vibe Check does not collect or store your full payment card information; card data is handled directly by our payment processors. Purchases made in the iOS app are processed exclusively through Apple In-App Purchase; Stripe processes only purchases made on our website.
• Account state. We store your current credit balance and, if applicable, the date through which your premium access is valid (premium_until).
• Communications. Information you send when you contact us or submit feedback.

Information collected automatically. Standard app and usage data and diagnostic data generated as you use the Service, and backend structured logs of Service activity. Our logs are written through a logger that sanitizes and redacts sensitive values such as signed-URL tokens and user UUIDs.

Information from third parties. From Apple, we receive the sign-in identifier above and, for in-app purchases, purchase and transaction status (not your full payment card details). From Google, we receive the sign-in identifier when you use Google Sign-In. From Stripe, we receive the status and result of web payments.

We do not collect, and ask that you not provide, more sensitive information than necessary for the Service.

2. Facial Images and AI Processing

The Service works by processing photos you upload that depict faces. To generate your entertainment result, your photo is analyzed by Anthropic ("Claude") vision, which produces a playful "vibe" description as described in Section 1.

Face data we collect and store. For App Review and privacy-law clarity, the face data Vibe Check collects is limited to: (1) the facial photos you choose to upload for a vibe check; (2) derived, entertainment-only AI result text and structured descriptors generated from those photos; and (3) operational metadata needed to run the analysis, such as model name, processing status, cost, latency, and error state. We store uploaded facial photos and analysis results in Supabase, in private account-scoped database rows and storage paths protected by row-level security. We do not collect live camera frames unless you choose to capture and submit a photo, and we do not collect depth maps, TrueDepth data, ARKit face geometry, face landmarks, face templates, or any other device-generated biometric template.

We do not create a faceprint or biometric identifier. Vibe Check does not use your photos to create, and does not derive, a unique biometric identifier, faceprint, or facial-recognition template for the purpose of identifying or verifying any person. We do not use uploaded photos to recognize you or anyone else, and we do not sell or share biometric information.

How your image reaches the AI. When your photo is analyzed, we generate a short-lived signed URL to the image and send that URL, together with our prompt, to Anthropic. The signed URL is time-limited and expires (approximately 600 seconds). Anthropic references the image via the URL to perform the analysis and does not permanently store your image as part of the Service's flow.

Use, sharing, retention, and deletion of face data. We use facial photos and analysis results only to provide, secure, troubleshoot, and improve the Service, including generating and displaying your vibe check, showing your prior results, supporting optional sharing you initiate, detecting abuse, and honoring deletion requests. Face data is shared only with the service providers listed in Section 4 where needed to provide the Service, primarily Anthropic, PBC for AI vision analysis (the third-party AI provider that operates the Claude service) and Supabase for private storage and database hosting. These third parties are contractually bound to provide the same or equivalent level of data protection as this Policy, to use your face data only to provide their service to us, and they do not use your photos or results to train or improve AI models and do not sell them. Face data is retained while your account is active and while needed to provide the Service. When you delete your account, account deletion removes your uploaded facial photos and analysis results from our systems generally within thirty (30) days, except for limited records we must retain for legal, security, fraud-prevention, dispute, or payment-record obligations as described in Section 5. Short-lived signed URLs expire separately and do not provide permanent access to images.

Consent obtained in the App before any photo is sent. Before your first vibe read, and separately from and in addition to your acceptance of the Terms of Use and this Privacy Policy, the App presents a dedicated in-app consent screen ("Before your first vibe read") that discloses, in plain language, that the photo you choose or capture is sent to a third-party AI service for analysis, names Anthropic (the provider of the Claude AI vision service) as that third party and Supabase as the provider of private account-scoped storage, and states that the photo is deleted after analysis, is not used to create a biometric identifier, is not used to train AI models, and is not sold. No photo is sent for AI analysis until you affirmatively agree on that screen.

Consent under biometric-privacy laws. Some U.S. states (for example, Illinois under the Biometric Information Privacy Act, as well as Texas and Washington) regulate the processing of facial or biometric data and may require your consent. Where such consent is required, your use of the photo-analysis feature, together with any consent you provide in the App, constitutes your consent to the processing described in this Section. You may withdraw that consent at any time by discontinuing use of the feature and deleting your account, after which your uploaded photos and results are deleted as described in Section 5.

3. How We Use Information

We use information to: provide, operate, maintain, and secure the Service; process the photos you upload and generate your AI "vibe" results; store and display your results to you and, where you choose to share, to the people you share them with; manage your account, credit balance, and premium access; process and record purchases (in coordination with Stripe, Apple, and Google); communicate with you about the Service; detect, investigate, and prevent fraud, abuse, and violations of our Terms, and keep the Service safe; analyze and improve the Service; and comply with legal obligations and enforce our agreements.

We do not use the content of your submissions to train or improve AI models.

4. How We Disclose Information

We do not sell your personal information and do not share it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers and sub-processors. With vendors who perform services for us, under contracts that limit their use of the information to providing those services and that require them to provide the same or an equivalent level of data protection as this Policy. As of the date below, these include:
• Anthropic, PBC ("Claude"), the third-party AI provider that performs the AI vision analysis; receives your image via a short-lived signed URL together with our prompt, to generate your "vibe" result. Anthropic is contractually bound to provide equivalent protection, uses the image only to return the result to us, does not use it to train or improve AI models, and does not sell it.
• Supabase, cloud hosting for our database, authentication, storage, and realtime services.
• Vercel, hosting for our web application and public share pages.
• Stripe, payment processing for purchases made on our website.
• Apple, authentication (Sign in with Apple) and in-app purchase verification on iOS.
• Google, authentication (Google Sign-In).
• Sentry, optional backend error monitoring and diagnostics, where enabled, to help keep the Service reliable and secure.

Our mobile clients do not include any third-party analytics, tracking, or advertising SDKs, and we do not use your information for cross-context behavioral advertising. For a current list of providers, contact support-vibecheck@cre8ivelabs.ai.

• People you share results with (public sharing). If you choose to share a result, we generate a unique link to a public share page at vibecheck.cre8ivelabs.ai/share/[code]. Anyone who has that link can view the shared result without logging in. Sharing is optional and entirely at your choice; do not share a result you do not want others to be able to view or forward.
• Legal and safety. When reasonably necessary to comply with law, enforce our Terms, respond to lawful requests, or protect the rights, property, or safety of Vibe Check, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Data Retention

We retain your personal information for as long as your account is active and as needed to provide the Service, then for the period necessary to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements.

You may delete your account at any time within the App or through the web at vibecheck.cre8ivelabs.ai. When you delete your account, the deletion cascades and removes your account, your analyses and results, your uploaded images (deleted from storage), and your purchase records, generally within thirty (30) days, except for limited records we are required to retain by law or that are retained by our payment processors (for example, Stripe or Apple) for their own tax, accounting, or fraud-prevention purposes.

Signed URLs to your images are always time-limited: the signed URL used to send an image to the AI expires in approximately 600 seconds, and the signed URL used to cache a shared image on the public share page expires in approximately one (1) hour.

6. Your Privacy Rights

6.1 Your rights. Depending on where you live, you may have rights to access or obtain a copy of your personal information; correct it; delete it; obtain portability; opt out of the sale or sharing of personal information or of targeted advertising; and appeal a denied request. We do not sell your personal information or use it for cross-context behavioral advertising, and we do not discriminate against you for exercising these rights.

6.2 How to exercise rights, and appeals. Use the in-App controls (including account and data deletion) or email support-vibecheck@cre8ivelabs.ai. We verify requests through your account and respond within the time required by applicable law. If we decline a request, you may appeal by emailing support-vibecheck@cre8ivelabs.ai with the subject line "Privacy Request Appeal," and we will respond in writing, generally within 45 to 60 days, including the reasons for our decision.

6.3 California residents. Under the CCPA as amended by the CPRA, in the preceding 12 months we have collected and disclosed for a business purpose the following categories of personal information:

We do not sell personal information and have no actual knowledge of selling the personal information of consumers under 16 (and the Service is limited to users 18 and older). You may use an authorized agent and may be asked to verify your identity.

6.4 Other U.S. state residents. If you reside in Virginia, Colorado, Connecticut, Texas, Florida, or another state with a comprehensive privacy law, you have the rights in Section 6.1 to the extent your state's law provides, including the right to appeal. We do not sell your personal information, do not use it for targeted advertising, and do not engage in profiling that produces legal or similarly significant effects. Where your state's biometric-privacy law applies to the facial images you upload, we process them only as described in Section 2.

6.5 EEA, UK, and Switzerland. Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract (to provide the Service, including generating and storing your results); your consent (for the processing of facial images to generate results); our legitimate interests (security, abuse prevention, and improvement of the Service); and compliance with legal obligations. You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. International transfers are protected by appropriate safeguards such as Standard Contractual Clauses. Creative Labs AI LLC is the controller of your personal information; if you are in the EEA or UK, you may contact us at support-vibecheck@cre8ivelabs.ai regarding your rights or the controller of record.

7. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, private storage buckets protected by row-level security, per-user access scoping, short-lived signed URLs for image access, and logging that redacts sensitive values such as signed-URL tokens and identifiers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding access to your device and your Apple ID, Google Account, or email credentials.

8. Cookies, Analytics, and Do Not Track

On vibecheck.cre8ivelabs.ai we use only the cookies and similar technologies necessary for the website and share pages to function and to keep you signed in, which you can control through your browser settings. Our mobile clients do not include any third-party analytics, tracking, or advertising SDKs, and we do not use your information for cross-context behavioral advertising. We may use a backend error-monitoring provider (such as Sentry) to capture diagnostic logs to keep the Service reliable and secure. Do Not Track: the Service does not currently respond to browser "Do Not Track" signals, because there is no common industry standard for interpreting them. To learn whether the third-party services we use honor DNT, review their privacy policies.

9. Children

The Service is for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and you may not upload photos depicting anyone under 18. If we learn we have collected information from a person under 18, we will suspend the account and delete the information.

10. International Users

We are based in the United States and process information there and in jurisdictions where our service providers operate. By using the Service, you understand that your information, including the photos you upload, may be transferred to and processed in the United States and other countries, which may have different data-protection laws than your own.

11. Account and Data Deletion

You can delete your account at any time within the App through account settings, and you can also request account and data deletion through the web at vibecheck.cre8ivelabs.ai without reinstalling the App. Deletion cascades to your account, analyses, results, uploaded images (removed from storage), and purchase records, and generally completes within thirty (30) days, except for limited information retained as described in Section 5 (including records required by law or retained by payment processors). Once you initiate deletion, your account can no longer be used and you will lose access to any remaining credits and premium features. To avoid additional charges, cancel any active subscription through your Apple account or our web billing controls before deleting your account, as described in our Terms.

12. Changes to This Policy

We may update this Policy from time to time. We will revise the "Last updated" date below and, where changes are material, provide notice through the Service or by other reasonable means. Your continued use after the effective date constitutes acceptance. This Policy is provided in English; any translation is for convenience only, and the English version controls in the event of any conflict.

13. Contact and Data Controller

Data Controller. The controller of your personal information is Creative Labs AI LLC. If you are in the EEA or UK, Creative Labs AI LLC is the controller, and you may contact us at support-vibecheck@cre8ivelabs.ai regarding your rights.

Vibe Check Creative Labs AI LLC Email: support-vibecheck@cre8ivelabs.ai

Last updated: 2026-07-23