Privacy Policy

Last updated: July 13, 2026

At vibecodly we collect the minimum needed for the platform to work. We don't sell your data or use it for third-party advertising.

1. Data controller

vibecodly, operated from Argentina. Privacy contact: hola@vibecodly.app.

2. What data we collect

• Account: your email and, if you sign in with Google, your name and profile picture. We never receive your Google password.
• Content: the ideas and prompts you write, the apps generated, and the files you upload (icons, images).
• Usage: product events (you visited, generated, published), credit balance and billing activity.
• Technical: IP address and basic request data, used for security and usage limits (anti-abuse).
• Payments: processed by Stripe. We never see or store your card details; only a customer identifier and your subscription status.
• Third-party credentials you connect (Mercado Pago, Supabase, GitHub, Apple, Google Play): we store them encrypted and use them only for what you connected them for.

3. What we use it for

• Provide the Service: generate, preview, save, build and publish your apps.
• Charge and track your credit balance.
• Prevent abuse and fraud (per-IP limits, detection of automated use).
• Improve the product with aggregate metrics and answer your support requests.

Legal basis: performance of the contract (providing the service you signed up for), our legitimate interest (security and product improvement) and your consent where applicable (for example, showing your app in the public gallery, which is opt-in).

4. Artificial intelligence

To generate your apps we send your prompts and the project code to AI model providers (Anthropic and/or OpenAI), which process them as data processors. Under their API terms, that content is not used to train their models. We don't send your email or billing data to those providers.

5. Who we share data with

Only with providers needed to operate, each with its own policy:

• Supabase — database and authentication.
• Vercel — hosting of the website and the app.
• Anthropic / OpenAI — code generation and the AI that runs inside your apps.
• Stripe — payments and subscriptions.
• Expo (EAS) — building the apps in the cloud.
• Plausible — site analytics, cookieless and without personal data.
• Railway — build and publish worker.

We also share data if required by a competent authority. We never sell your data. Some providers are outside your country; in those cases the transfer relies on the contractual clauses and safeguards each one offers.

6. The users of the apps you build

If your app stores data, it does so against your own database (for example, your Supabase project) and payments go to your account on Mercado Pago. For your app's end users, you are the data controller, not vibecodly: it's up to you to publish your own privacy policy and comply with applicable regulations. The analytics vibecodly includes in apps records usage events (screens and actions), not your users' personal data.

7. Cookies

We use essential cookies to keep you signed in. We don't use advertising or cross-site tracking cookies. The site analytics (Plausible) uses no cookies and doesn't track individuals.

8. How long we keep it

As long as your account is active. If you close it, we delete your projects and personal data, except what we must keep for legal or accounting obligations (for example, billing records).

9. Your rights

You can request access, rectification, erasure, portability or object to the processing of your data, and withdraw your consent where you gave it. Write to hola@vibecodly.app and we'll handle it. If you're in the European Union or Spain, you can complain to your supervisory authority (in Spain, the AEPD). In Argentina, the Agency for Access to Public Information is the oversight body for Law 25.326.

10. Security

We encrypt third-party secrets at rest (AES-256-GCM), isolate each user's data at the database level (row-level security), and generated code runs in a sandboxed environment. No system is foolproof: if you find a security issue, write to us and we'll treat it as a priority.

11. Minors

The Service is not directed at children under 16. If we detect a minor's account, we delete it.

12. Changes

We may update this policy. If the change is material, we'll let you know by email or in the product. See also the terms of service.