Privacy Policy

1. Information we collect

Information you give us. Your email address when you join the waitlist or create an account; your name, username, profile photo, and bio; the shows you log along with ratings, rankings, notes, photos, and videos; and any messages you send us for support.

Information collected automatically. Device and app version, general location inferred from IP address, log data such as timestamps and error reports, and basic usage analytics about which screens and features are used.

Optional permissions. With your consent, the app may access your precise location (to surface nearby concerts), your camera, and your photo library (to attach media to a logged show). You can withdraw these permissions at any time in your device settings.

Third-party content. Event, venue, artist, and song data we display comes from providers including the Ticketmaster Discovery API and the iTunes and Deezer catalogs. Requests for that content may transmit limited technical information to those providers.

2. How we use information

• To create and operate your account and deliver the core features of the Service.
• To generate your rankings, statistics, lists, and personalized concert suggestions.
• To show your content to the audience you choose through your privacy settings.
• To send transactional messages, waitlist and launch announcements, and product updates you can unsubscribe from at any time.
• To monitor performance, debug problems, and improve the Service.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms of Service.

Where the GDPR applies, we rely on the following legal bases: performance of a contract (operating your account), your consent (marketing email, precise location, camera and photo access), our legitimate interests (security, analytics, product improvement), and legal obligation.

3. How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

• Other users: content you post to a public profile or share with approved followers is visible to them, according to your settings.
• Service providers: hosting, database, storage, analytics, email delivery, and crash reporting vendors that process data on our behalf under contract.
• Legal and safety: when required by law, subpoena, or to protect the rights, property, or safety of Balkanski LLC, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

4. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, to withdraw consent, and to appeal a decision we make about your request. California residents have the rights to know, delete, correct, and to opt out of sale or sharing (which we do not do), and to not be discriminated against for exercising those rights.

You can update your profile and privacy settings, switch between a public and private account, request a full export of your data, and delete your account directly in the app. To make any other request, email privacy@vibra.app. We will verify your identity before acting and respond within the time required by law.

5. Data retention

We keep your personal information for as long as your account is active. When you delete your account, we delete or de-identify your personal information within 30 days, except where we must keep it longer to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in encrypted backups for a limited period.

6. Security

We use encryption in transit, access controls, row-level database security, and least privilege practices to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law.

7. Children's privacy

Vibra is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact privacy@vibra.app and we will delete it.

8. International transfers

We operate in the United States, and your information may be processed in the United States or other countries whose data protection laws differ from those where you live. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.

9. Cookies and similar technologies

This website uses only cookies and local storage that are strictly necessary to serve the site and remember your preferences. We do not run advertising or cross-site tracking cookies. The app uses local device storage to keep you signed in and to cache content.

10. Changes to this policy

We may update this Privacy Policy as the Service evolves. We will post the new version here with an updated date and, for material changes, notify you in the app or by email before the change takes effect.

11. Contact us

Privacy questions or requests: privacy@vibra.app. If you are in the EEA or UK and believe we have not resolved your concern, you may lodge a complaint with your local supervisory authority.