Vibe Privacy Policy

Vibe is a campus social app for people with an Indiana University or Purdue University email address. It is run by CONNECTVIBE. LLC, an Indiana limited liability company. In this policy, “we” means that company. Vibe is independent. It is not run or backed by Indiana University, Purdue University, or any campus, school or club.

This page says what Vibe knows about you, who can see it and how to delete it. It covers connectvibe.app and the Vibe apps for iPhone and Android once they are in the stores. We wrote it to be read. If a line is unclear, write to hello@connectvibe.app and tell us.

Only on the waitlist? Section 11 is written for you. In short: we keep your entry for up to 40 days. If you never confirm your email and we have not sent you an access code, it is up to 30 days. Every waitlist email has a “Take me off the list” link.

1. Who runs Vibe, and who there can see my information?

Vibe is built and run by the three cofounders of CONNECTVIBE. LLC. This policy calls them “the Vibe team” when they moderate. All three moderate Vibe. Their admin tools show them:

• every report, with the reporter's words and handle (their @name) and a copy of what was reported;
• for any account: handle, name, verified or not, join date, any suspension or ban with its reason and private note, and the moderation actions about it;
• every club and its posts, hidden ones included;
• the photos an account, club or group chat shows. For two minutes at a time they can also open a photo that was removed, including the photo or video of a removed post;
• totals of how Vibe is used, such as sign-ups, posts and chat messages per day. The totals do not say who did what, but on a quiet day a daily total can come from one person;
• the waitlist (section 11).

In the app itself, they can also see the events a club marks “Members only” (section 5b).

They can look an account up by its exact email address, and the result does not show the address. The admin tools do not show email addresses (except on the waitlist), passwords, résumés or billing details. They do not show messages that were not reported, who viewed what, or IP addresses. An IP address is the number that identifies your internet connection.

One cofounder also has direct access to the systems that store Vibe's information and to our accounts at the companies in section 6. This policy calls that person “the cofounder with direct access”. With that access, the person can read everything Vibe stores, including both your email addresses, every message and the sign-in records in section 3d. The other two cofounders do not have it. The same cofounder's personal Gmail inbox receives the mail you send us (section 3g).

Vibe's own database does not log what is read through direct access or in the admin tools. One exception: each time a full waitlist address is shown, that is logged first.

When and why we read private messages is in section 5h.

2. Who can use Vibe, and what does “verified” mean?

Age and agreement. You must be 18 or older (section 12). Sign-up has one checkbox: “I'm 18 or older and I agree to the Terms of Service and Privacy Policy.” Checking it is how you agree to this policy. We do not ask for a date of birth or check age any other way.

Making an account. Sign-up asks for your school email, a password and the checkbox. While we let people in one group at a time (a wave), it also asks for an access code: the one we emailed you, or a shared one a cofounder gave you. Signing up through a club link needs no access code (section 11). We email a code to your school email. Typing it confirms your account and verifies your school email in one step. The password that works is the one chosen by the person who types the code, so confirming removes any password set for your address before then. If you type the code on the page where you just typed your password (the sign-up page or Log in), Vibe sets that password again at once. If you confirm anywhere else, Vibe asks you to choose a password. Unless you confirm on the sign-up page, Vibe also asks you to check the box again. You then set up a profile. Some accounts sign in with a different email and verify a school email as a separate step: accounts made before sign-up worked this way, and a few that we add ourselves.

What “verified” means. We send a verification code to your school email and you type it into Vibe. That proves you could read mail at that address at that moment. It does not prove that you are enrolled, employed or admitted, or that you are who your profile says. A school email here means an address whose part after the @ is iu.edu or purdue.edu, or ends in .iu.edu or .purdue.edu. University staff and faculty have these addresses too. We do not contact the university. One school email is meant to verify one account. Your campus is your own choice, and we do not check it.

One exception: we can mark a test account that we run ourselves as verified by hand, such as the account an app store's reviewer signs in with. Those accounts are not students.

Without a verified school email you cannot post, comment, message or join a club, or read a club's Board as a follower. You can still like, save, follow and report. Verifying does not hide anything from other accounts. An account that has not verified can still read everything in section 5b. It cannot open résumés (section 5c).

3. What does Vibe collect about me?

3a. What do I give when I make an account?

• Sign-in email. Shown to you in Settings. No other user is shown it. The one exception is your starter name, below. A short form of it (its first character and the part after the @) can also be emailed to your own school email or personal email (section 4). Whoever can read that inbox can read the short form.
• Password. We never store the password itself. Supabase, the company that runs our sign-in, stores a scrambled version that cannot be read back. When confirming your email removes a password, we note the time until you have chosen one and accepted the Terms.
• Starter name. If you made your account before October 8, 2026 and have not chosen a name, your display name is the part of your sign-in email before the @. Anyone who sees your name on Vibe can read it. An account made since then starts with the name "Member".
• School email. Stored once you confirm it. No other user is shown it. Section 10 names one gap.
• Personal email. Optional. After sign-up you can add a personal email, so that your account stays yours when your school closes your school inbox. We email it a code first, and store it once you type the code. It is shown to you in Settings, where you can remove it. No other user is shown it.
• Proof that you agreed (section 13) and, if you joined with an access code or a club link, a record of it (section 11).

3b. What is on my profile?

Your profile holds:

• everything on your profile page (section 5a);
• what you typed in the optional “Department / school” box at set-up. It is stored but not shown on your profile page (section 5b);
• up to three résumé or portfolio documents. Each is a file or an outside link;
• the redaction bars you draw on them. These are black bars that cover parts of a résumé;
• the list of profile parts you hid (section 9);
• which of your clubs show on your profile, in what order, and whether the title a club gave you shows (section 9);
• your “What are you here for?” answers.

3c. What about the things I post and do?

• Posts, drafts, comments, likes, reposts and saves.
• Who you follow and who follows you.
• Clubs: memberships and roles, the title a club's owner or an officer gave you, clubs you follow, requests to join with your message, and invites. Asking to join a club also follows it. If a club's owner or an officer takes you out of the club, adds you to a room, gives you a title or removes you as a follower, we store who did it and when.
• Club events and whether each is marked “Members only”, the cover photo and the icon its club picked for it, your RSVPs (Going or Interested) and personal calendar entries.
• Event check-ins: the club events you checked in at. You check in yourself, with the 4-digit code or the QR code on the club's check-in screen, or the club's owner or an officer marks you as here. Our database does not store the time you checked in or which way you did it, but Vercel's visit logs can show both (section 6).
• Messages and everything in them.
• Which messages are pinned in a chat, who pinned each one, and when.
• Your settings in each chat, and your poll votes and sign-ups in club rooms.
• Reports you file, your block and mute lists (people, and clubs whose posts you muted), and the suggested people you dismissed.
• Otto settings, your answers to Otto's set-up questions, and reminders. Otto, Vibe's built-in helper, runs on our own software, not an AI service.

Photo details. A camera saves hidden details inside a photo or video, such as where it was taken.

• We strip them from: your profile photo and cover, photos on your own posts, work logos and résumé images. Photos uploaded before late September 2026 may still carry theirs.
• We do not strip them from: videos, photos on a club's posts, club logos and banners, event cover photos, photos and videos sent in chats, group chat photos, and résumé PDFs.

Chat photos. Since our release of October 12, 2026, the app often makes a large photo (over about 1 MB) smaller on your device before it is sent in a chat. When it does, only the smaller copy is sent. The copy is a new picture and does not carry the hidden details the camera saved. This happens on your device, and we do not promise it for every photo. GIFs, videos and photos of about 1 MB or less are sent exactly as you picked them. So is any photo the app leaves as it is, for example a picture with see-through parts, a very long or very wide picture such as a scrolling screenshot or a panorama, or one your device could not make smaller. Photos sent in chats before that release were stored exactly as they were picked.

Posts and club pages are public (section 5a), so a location inside one of those files is public too.

3d. What does Vibe record without my typing it?

• Views. When you are signed in, we record a view when you open a profile or open a post. We also record one when a post stays on your screen in the feed for about a second. The record holds who you are, what you viewed and the day. We keep one record per day for each profile or post. For a profile we also record the time of your first look that day. Until October 7, 2026 we also recorded the web address of the page you came from (up to 80 characters). We no longer record it, the addresses recorded before then are still stored, and nothing in Vibe reads them. Your own views, and signed-out views of profiles and posts, are not recorded.
• Last active. While you are signed in and Vibe is open on your screen, your browser checks in with our server every few minutes, from any page. We store the latest time it checked in, to within a minute. It shows how many people are active right now, and it tells us when you are active for the first time in a day or a week, for the use totals below. The “active now” number that people see in the app counts each campus on its own. It leaves out a campus unless at least 5 people besides the viewer are active there and at least 5 besides the viewer are not, so it never shows for a campus of fewer than 10 people. It is never under 5, and it can be lower than the number of people active. The Vibe team's own usage page shows the exact number.
• Use totals. We count how many people use Vibe each day and each week. The first time your browser checks in on a day, we add one to that day's count, to the count for your school system (IU or Purdue), and to the count for the kind of device: a phone, a computer, or Vibe added to your Home Screen (or installed from your browser on a computer). Your browser works out the kind itself, and we keep only that word, never the browser's name or details. The first time you check in during a week, we add one to that week's count and, in your first few weeks on Vibe, to a count of people who joined Vibe in the same week as you, so we can see how many come back. We also count how many times Otto and the campus map are opened. Each browser tab counts an open at most once every 10 minutes, and a day's opens stop at ten times the number of people active that day (at least ten), so one account cannot inflate them without limit. These totals are numbers for each day or week and nothing else: no account, no IP address, no browser name or version and no time of day. To know a check-in is your first that day or week, we compare it with your last-active time, and we store nothing else about you for this. The Vibe team's own accounts are not counted. A total does not say who was active, but on a quiet day, or for a small sign-up week, it can come from one person.
• Page opens. We count how many times three pages are opened by a browser that is not signed in: the front page, the waitlist page and the sign-up page. The count is one number for each day, page and link label. The label is the short tag on the link you came in on, if it had one, for example one that says the link was posted on Instagram. The tally holds no account, no IP address, no browser or device details, no cookie, no address of the page you came from and no time of day. Opens by search engines and other automated tools that name themselves are left out. To tell them apart, our server looks at the name your browser gives itself. The tally does not keep it. To stop someone inflating the numbers, we also count the opens from each network in an hour and in a day. We keep that count under a scrambled code made from the network (an IP address or part of one), the day and a secret only our servers hold, not under the address, and the code changes every day.
• Abuse counts. We count how often some actions happen, mostly per account. A few counts are kept under a scrambled code made from an email address, not under the address. A few are kept under a scrambled code made from a network (an IP address or part of one), the day and a secret only our servers hold, and a network's code changes every day. The network counts include how often a browser that is not signed in opens a profile, a club page or a post's share link, in an hour and in a day. They do not say which page was opened. We delete each count within three days. The parts of the database that we built hold no IP address.
• Sign-in records. The sign-in system, which is software made by Supabase, keeps its own records in the same database. They can hold the IP address and browser of each device you are signed in on. They can also hold a log of sign-in activity, with your email address and IP address. No other user can read them. The cofounder with direct access can (section 1).
• Email log. We log each email our own software sends. The log holds its kind, your account if there is one, the part of the address after the @ and the time. It also holds whether it worked, and the reference number that our email service (Resend) gives the message. In place of the address, the log holds a scrambled code. Nobody can turn the scrambled code back into the address. Our servers do hold a secret key that lets us test whether a particular address matches it.
• Error reports. When something breaks, a report goes to Sentry, the service we use to find bugs. A speed report also goes for about one page load in ten, and for about one in ten requests to our servers. (A request is your browser or app asking our servers for something.) Sentry also gets a small signal each time you open or change a page, so it can count what share of visits hit an error. That signal holds no page address and nothing about your account.

  Our own code does not put your name, account or email on these reports, and we strip sign-in links, access codes, club link codes and profile handles from web addresses. A report can still hold things that point to you. It can include a club's handle, the ID (a random label) of a post or chat, or search words. It also carries a short trail of what happened just before it. The trail lists the pages you opened, the requests your browser made and lines our own software logs. Until October 8, 2026 it also listed the buttons you tapped, by their labels and never what you typed. Until October 12, 2026 a speed report could also name the thing you tapped, or the largest thing on your screen, by its label, and some labels hold a person's name, such as the button that opens their profile.

  Until our release of October 5, 2026, an error report or a speed report about a request to our servers could also hold four things:

  • What your browser sent. That could be the thing you were sending at that moment. Examples are the text of a message or a post, a report you were filing, the waitlist form, or an email address you typed.
  • Your sign-in cookie. It identifies your account. Someone who could read the report could use it to act as you. Signing out in Settings stops that, within about an hour (section 7).
  • A rough location. Our hosting company (Vercel) works it out from your IP address and adds it to each request. We have not confirmed that the IP address itself was always left out.
  • What our server asked the database. To answer a request, our server asks the database for things, and the report lists the address of each thing it asked for. Those addresses could hold account IDs (random labels), yours and other people's. At a few steps they could also hold an email address. Those steps were sending the waitlist form, typing or confirming a school email, and a cofounder looking an account up by email or adding someone to the waitlist.

  That release is built to strip the first three from new reports, and to take the account IDs and email addresses out of the fourth. We have not yet opened a live report, from before the release or after it, to confirm what one holds. Reports made before the release keep what they hold until Sentry deletes them, and we have not confirmed how long that is.

  One thing still gets through to a new report: an account ID that is part of the web address of one of our own pages or of a stored file.

• Search words are not stored in our database, but Vercel can log them as part of the web address.

3e. What does Vibe not collect?

• No advertising tracker, and no outside tool that builds a profile of you. Sentry is the one outside tool that measures how Vibe is used: errors, speed and visits (section 3d). One other outside tool looks at your browser, for one job: Cloudflare's check that you are a person on the sign-in and sign-up pages (section 6). What Vibe itself records about what you open is also in section 3d.
• We do not ask your device for its location, and we do not work one out from your IP address. Four things come close. Some photos and videos you upload carry a location inside the file (section 3c). Vercel adds a rough location to each request. Until our release of October 5, 2026, that could end up in a report to Sentry (section 3d). Each report your browser sends to Sentry carries the browser's language and time zone. And an event check-in records that you were at that event while it was on (section 3c). Vibe does not ask your device where it is to check you in.
• No date of birth, phone number, contact list or card number, and no sign-in through Google, Apple or anyone else.

Vibe makes one automatic check. Before your text is saved, messages included, it is checked against a short list of blocked words.

3f. What is built but switched off today?

Paying for Vibe+. Vibe+ exists today only on accounts we give it to (section 5d). Once billing is on, you pay on Stripe's own pages and card numbers never reach us. We send Stripe only your Vibe account ID (a random label Vibe gives each account). We store your Stripe customer and subscription numbers, your Vibe+ status and a list of payment events. Vibe+ is not sold inside the iPhone or Android app.

Notifications to your phone or browser. If you turn them on, we store the notification address your device gives us until you sign out, turn them off or delete your account. A notification shows the sender's name and, with previews on, up to 100 characters of the message. Browser notifications travel encrypted through the browser maker's service (Google, Apple, Mozilla or Microsoft). App notifications go through Firebase, a Google service, and on iPhone through Apple as well. Both companies can read them. After your first yes in the app, Firebase contacts Google each time the app opens, even after you turn notifications off or sign out.

3g. What if I email Vibe?

You need no account to email us a report, a request to take down an intimate image, or a child-safety tip. If you have an account, the Report button in the app is the fastest way. To recover an account we may ask for proof that it is yours.

Mail to hello@connectvibe.app or help@connectvibe.app passes through Cloudflare, which forwards it to the personal Gmail inbox of the cofounder with direct access (section 1). So Google holds it. That cofounder reads it, and it stays in that inbox until they delete it. The other two cofounders see a message only if it is passed on.

We aim to delete recovery proof within 90 days after your request closes. A person has to do that. Nothing does it automatically.

3h. What about the iPhone and Android apps?

The apps are not in the stores yet. When they are, they will show the same Vibe as the website, inside an app, and everything on this page will apply to them. They add only this:

• Permissions. The iPhone app asks for the camera, microphone and photo library only when you take, pick or save a photo or video. It asks for notifications only when you turn them on. The Android app asks only for notifications.
• Telling the site it is the app. Each request says it comes from the iPhone or Android app, so that we can show the right screens. We store that only next to a notification address, if you turn notifications on.
• Apple's notification service. The iPhone app registers with it each time it opens, even before you turn notifications on. No prompt shows, and Vibe's servers store nothing from that until you say yes.
• What they do not have. No location, no contacts, no advertising software, and nothing that follows you into other companies' apps or websites. Sentry's reports (section 3d) work the same inside the app. The check that you are a person (section 6) runs inside the apps too, because they show the same sign-in pages.
• The stores. If you install the app, Apple or Google knows you installed it and handles that under its own privacy policy.

4. What does Vibe do with it?

We use your information to run Vibe. That includes suggesting people and clubs to you, based on who you follow, your campus and your major. We use it to keep accounts secure, to review reports and act on them, to fix bugs, and to answer you. We also count things, so we can see in totals how Vibe is used.

Emails. The automatic emails Vibe sends you are these eleven: to confirm your account, reset your password, tell you which email your account signs in with, verify your school email, confirm a personal email you add, check once a year that you still have your school inbox, confirm your waitlist spot, send your access code, and three that tell you someone asked Supabase, the company that runs our sign-in, to reset your password, to send you a sign-in link, or to make your email the sign-in email of an account. The third one can be sent when someone types your school email or your personal email into the Forgot password form and your account signs in with a different email. It goes only to the address that was typed, at most once per calendar day for that address. It shows the first character of your sign-in email and the part after the @ (for example g•••@gmail.com). The screen shows the same sentence whether or not the address belongs to an account. An account that is suspended or banned is not sent it. The last three are sent when someone asks Supabase directly, not through Vibe. Vibe itself never asks for any of them: the second email above is how Vibe resets a password, and to change a sign-in email you write to us (section 9). The one about changing a sign-in email goes to both emails, the one asked for and the sign-in email of the account that asked. It names the email asked for. A person on the Vibe team may also write to you. They may answer you, write about a report, your account or a club you run, or tell you something you need to know. Examples are a security problem or a change to this policy. Vibe sends no bulk marketing email, and no other email about activity on your account.

What we do not do. We do not:

• sell your personal information to anyone;
• share it with advertisers;
• give it to other companies for their own marketing;
• give it to companies that buy and sell personal information (data brokers);
• use it to train AI models ourselves. Section 6 says what our AI coding assistant may see. We have not yet confirmed whether the company that makes it may use what it is shown to improve its AI models;
• track you across other companies' apps or websites.

One paid feature lets a person see who looked at them. With Vibe+, they see the names of the signed-in people who viewed their profile and posts. Vibe+ is not on sale yet. Section 5d says how an account can have it today.

Our marketing. We do not use your name, photo or posts in our marketing unless you say yes first. The film on our front page was recorded on a test copy of Vibe with made-up accounts. The real people in it are the three cofounders and friends in a cofounder's own photos, and they agreed to appear.

5. Who can see what I post, send and do?

The Vibe team and the cofounder with direct access can see more than this table shows. Sections 1 and 5h say what.

5a. What can anyone on the internet see?

No account is needed to see these:

• Your profile page: your name, handle, photos, tagline, location line, website link, interest tags, major and year, campus and the verified badge. It also shows three counts: your followers, the people you follow, and your connections (people you follow who follow you back). Your published posts that were not made as a club show too, including which one you pinned. So do your bio, experience, skills and “Working on”, unless you hid them (section 9). It also lists the clubs you are in, each with any title the club gave you and the month you joined it on Vibe, unless you hid that club, the title or your whole Clubs section. Your role in a club is not shown there. Not shown: either email address, résumés, “here for” answers, the clubs you hid or your list of the clubs you follow.
• Photos and videos: anyone who has the exact link can open a profile photo, a cover, a logo, or a photo or video on a post or club page. For most photos that link does not expire.
• A post's share link: you must sign in to open a post from its link, though a post you made as yourself also shows on your public profile. The preview that shows when the link is shared gives the author's name, up to 140 characters of the text, and the photo.
• Club pages: name, description, links, philanthropy, logo, banner, who can join, when it meets, and the member and follower counts once each reaches 5. Also the 12 newest posts with each author's name, handle and photo, even for clubs you must ask or be invited to join.
• Search engines and link previews: profile and club pages can appear in search results and in link previews. We cannot pull back those copies.

These need a signed-in account, or more (5b to 5g): your reposts, follower and following lists, chats, RSVP lists, event check-in lists and member lists. A club the Vibe team has hidden, or the profile of a suspended or banned account, looks like a page that does not exist.

Blocks. A block only works while the other person is signed in. Signed out, they still see your public profile and posts. Vibe does not notify a person you block. If they open your profile while signed in, though, Vibe tells them this account has restricted them.

5b. What can every signed-in account see?

This means every account, verified or not, at every campus.

• Everything above, plus your comments and reposts, and the lists of the people you follow and who follows you.
• Totals of likes, views and saves on each post. The author gets a notification naming each liker. Vibe shows nobody else who liked, and shows nobody who saved.
• Club events, with Going and Interested totals and, once at least 5 people have checked in at one, how many did. One exception: an event its club marks “Members only”, which only its members see. Only they can RSVP to it or check themselves in. An event's cover photo is shown to whoever can see the event.
• Search finds verified accounts that finished setting up, across both universities. The Map lists people by campus and major. For a club that anyone can join, it also lists the members who show that club on their profile.
• For any account: when it was made, when its handle last changed and its total profile views. No screen shows the department or school an account typed at set-up, but a signed-in account could still read it.

5c. Who can open my résumé?

Another person can open your résumé only if all four of these are true:

• they are signed in with a verified school email;
• neither of you has blocked the other;
• you are not suspended or banned;
• you have not hidden it.

If you drew redaction bars on a file, they get a copy with the bars made permanent, not the original. An outside link you drew bars on is not shown to others. Any other outside link you give as a résumé or work logo loads from that site, which then sees the viewer's IP address.

5d. Who can see that I looked at them?

Every signed-in view is recorded (section 3d). Any signed-in account sees how many views a profile or post has. With Vibe+, the person you looked at also sees who looked and when: profile viewers for the last 90 days, post viewers with no time limit. The names leave out anyone they blocked, anyone who blocked them and anyone they muted. Those views still count in the total.

Vibe+ is not on sale yet. We can give it to an account ourselves, and any account that has it sees names today.

5e. Who can see my messages?

Vibe has direct chats, group chats and club rooms.

• Direct and group chats. Everyone in the chat sees every message, photo, video, shared post and reaction. They also see who is in the chat, when the other side last read it and who is typing. Someone added later can read the whole history. A direct message from someone you are not connected with arrives as a request. (Connected means you follow each other.) The sender can see when you read it. In a group chat, a person you are connected with can add you with no request first. The others in that chat may be people you are not connected with.
• Pinned messages. In a direct or group chat, anyone who has accepted the chat can pin a message, yours included, for everyone in it, and can unpin it. Everyone in the chat sees the pinned messages, including someone added later. Vibe stores who pinned a message and when. People in the chat can see when a message was pinned, not who pinned it. The panel that shows pinned messages also has a “Shared” list: the photos, videos and posts shared in the chat. Club rooms have no pinned messages.
• Blocks. A block stops new messages and new reactions both ways, and a direct chat disappears from both inboxes. No message or chat is deleted. The block does delete the follows between the two of you, and unblocking does not bring them back. In a shared group chat, old messages stay visible and neither of you can send or pin while the block lasts.

Club rooms. Each club has these rooms:

In the app, the “only the owner and officers” choice reads “Only officers post”.

New members can read a room's whole history. A follower who can read the Board also sees its earlier posts by the club's current owner and officers. An event marked “Members only” cannot be shared on the Board, and a follower never sees one there. In a room where the club chose who can post, you can still read, vote in polls and take a sign-up spot. The room tells you the rule, for example “Only officers post here.” It does not list the people who were picked.

• Polls and sign-ups. With names on, the members who can open the room see who picked what, and sign-ups always show them the names. A follower reading the Board sees only the totals. In an “Anonymous” poll nobody in the club can see who voted. Your vote is still stored with your account, so the cofounder with direct access (section 1) could see how you voted.
• Blocks in club rooms. You each see a blank in place of the other's messages. One exception: a post on the Board by the club's owner or an officer shows to every member, and to every follower who can read the Board, block or not. If the club's owner or an officer blocks a follower, that follower can no longer read the Board. The blank only hides messages on screen, so treat what you write in a club room as readable by every member, including someone you blocked.
• Deleted messages. When someone deletes a message they sent, everyone who can read that chat or room sees a grey “Message deleted” note in its place, with the sender's name and when it was sent. They may also be able to tell when it was deleted. On the Board the note reads “Post deleted”, and the replies under the post stay. A follower reading the Board sees nothing in its place.
• Your chat settings. Other members of a chat may be able to tell when you last read it. They may also be able to tell whether you muted it, pinned it to the top of your list, hid it or cleared it.

5f. What can the people who run a club see?

A club is run by its owner and its officers. Only the owner makes a member an officer, or takes that back.

• Every member sees the club's member list: name, handle, photo, role, title and join date.
• The club's owner and officers see five more lists:
  • followers, with the date each first followed. You are on it from the moment you ask to join, unless one of you blocked the other;
  • invites and their outcome;
  • who RSVP'd to the club's events;
  • who checked in at the club's events, including people who are not members or did not RSVP, and who marked Going but did not check in. At an event marked “Members only”, only members can check themselves in;
  • the people added to a room, with the date each was added.

  They can give a member a title, which shows on that member's profile unless the member hides the club or the title. They can stop followers reading the Board. They can remove a follower without that person being told: that person can follow again, but cannot read the Board until they join. They can mark a person who marked Going or Interested as here, take one person's check-in off, and clear all of an event's check-ins. And they can delete any post made as the club.

• The club's owner and officers also see pending requests to join, with your message. If the club took you out before, the request carries a “Removed before” mark. They see how many people joined the club through its members' link, never who (section 11). They can remove a club room message. It is then hidden from everyone but its author, not deleted, and we record who removed it.
• Nobody who runs a club is shown email addresses, reports or who muted the club's posts. If they try to remove a message that has an open report, the app tells them one is open.

5g. What can only I see?

No other user is shown these:

• drafts and saved posts;
• personal calendar entries;
• your notifications;
• your mute list, including clubs whose posts you muted, and the suggested people you dismissed;
• the clubs you hid from your profile (the club's members still see you in its member list) and your list of the clubs you follow (a club's owner and officers still see that you follow it);
• Otto settings and reminders;
• your redaction bars, your list of hidden profile parts and your “here for” answers.

The cofounder with direct access (section 1) could still reach them.

5h. What can people at Vibe see, and do they read my messages?

Messages are not end-to-end encrypted. End-to-end encryption is a lock that lets only the people in a chat read it. Vibe does not have it. The cofounder with direct access (section 1) could open any message.

We do not open private messages to learn about you. We read them only in these six cases:

1. when one is reported to us;
2. when someone in the chat asks us to or agrees, for example for a copy of their own data;
3. when we have specific evidence that a conversation is being used for spam, threats, exploitation or another serious break of the Terms;
4. when the law requires it;
5. when a fault in Vibe's chat cannot be found or fixed any other way. Then we open as few messages as possible;
6. when we believe someone is in danger of death or serious injury, or a child is at risk (section 5i).

The admin tools only ever show a message that was reported (case 1). The other five cases need direct access, so they fall to that one cofounder. This is a rule we keep ourselves. No system enforces or records it.

Outside these cases, a copy of a message's text could reach Sentry, the service we use to find bugs. Until our release of October 5, 2026, about one message in ten could be copied this way as it was sent. Section 3d says what that release changed, and what we have not yet confirmed. The cofounder with direct access can read Sentry's reports. Section 6 says when the AI coding assistant may be shown one.

Before a message is saved, software checks its text against a short list of blocked words and refuses the message on a match (section 3e).

Reports. When you report something, we keep a copy of it as it was: its text, links to its photos and videos, and the owner's name and handle. All three cofounders can see that copy. A new report also emails the three cofounders that one came in, without its content. The person reported is not told about the report or who filed it, though they may guess. People on the Vibe team decide reports, suspensions and bans, not software. We aim to look at each report within 24 hours.

Removed content. If the Vibe team removes your post or comment, you still see its text, marked as removed with the reason. A message they remove also stays visible to you and to nobody else, marked as removed. A removed post's photo is hidden from everyone, and the comments under it are hidden from everyone but their writers. Nobody else sees removed content, apart from the Vibe team.

5i. Does Vibe tell my university or the police anything?

Universities. Vibe sends nothing to IU or Purdue automatically, and no university has special access to Vibe. If one asks us about you, we treat it the way we treat the police (below). When we email your school email, the university's mail system delivers the message and can see it. Vibe is not your university and holds none of its records. The federal student-records law (FERPA) covers what your university keeps about you, not what you put on Vibe. If you asked your university to keep you out of its public directory, that does not carry over to Vibe. This policy and your own settings decide what people see here.

Courts and the police. We hand over information when the law requires it, for example under a search warrant, a subpoena (a written legal demand) or a court order. For the content of private messages we ask for a search warrant, unless someone in the chat agrees, it is an emergency, or the law requires a report (below). We aim to tell you before we hand over your information, unless the law forbids it or telling you would put someone in danger.

Child safety. If we learn of sexual images of a child on Vibe, US law requires us to report them to the National Center for Missing & Exploited Children (NCMEC). The same goes if we learn that someone is trying to sexually exploit a child. The law also requires us to keep what we reported for a time. We follow that law.

Emergencies. We may also go to the police or emergency services ourselves when we believe someone is in danger of death or serious injury, or a child is at risk.

A sale or a shutdown. If Vibe is ever sold, merged or handed to another company, your information would move with it. We aim to email your sign-in email and post a notice on this page first, so you can delete your account before it moves. If Vibe shuts down, we plan to delete the database and the stored files, not sell them, unless a court or the law stops us.

6. Which other companies handle my information?

These outside companies hold your information or are contacted by your device. We use them to run Vibe. Each works under its own published terms and privacy policy. We have given none of them permission to sell your information or to use it for advertising. Vibe uses no advertising company. Each company your browser contacts sees your IP address and browser.

• Supabase (database, sign-in, file storage). It holds the whole database. That includes what the sign-in system keeps: your email, a scrambled password and the sign-in records in section 3d. It also holds public photos, private résumés and the photos we keep as evidence. Evidence files are photos and videos we keep because of a report or a removal (section 9). On some pages your browser talks to Supabase directly. They are the pages where you sign in, sign up, confirm or verify an email, set a new password or read a suspension notice. During set-up on a phone, the account sheet (Sign out and Delete account) does the same. Your browser also talks to Supabase when a profile page checks that you are signed in, and each time a profile or post photo loads. Supabase writes the “confirm your account” email and passes it to Resend to send. When you sign in, sign up or ask for a new email, Supabase sends the one-time code from the check that you are a person, with your IP address, to Cloudflare to confirm it.
• Vercel (hosting). It runs the site, our server software and the daily waitlist clean-up. Its visit logs record the web address requested, your IP address and browser. Some web addresses carry personal details, such as search words or the link in one of our emails. Checking in at an event, with the link or the code, puts that event in the log, with the time and your IP address. When the club's owner or an officer marks you as here, or takes your check-in off, the log holds that event and your account ID (a random label), with the time. It also stores the short film on our front page. Your browser loads the film from Vercel's file storage when the film comes into view or you press Play.
• Cloudflare (media storage, incoming mail and the check that you are a person). It holds post videos, a club's photos and videos, chat photos and videos, and group chat photos, including ones kept as evidence. Your browser fetches them straight from Cloudflare. It also serves the small program that shows a résumé PDF, and looks after the connectvibe.app name. And it forwards every email sent to hello@ or help@ (section 3g). It also runs the check that you are a person. The sign-up page, the sign-in page and any page that shows “Send a new email” load a small box straight from Cloudflare. The check starts when the page shows the box, not when you press the button. So on the “Check your email” screen it runs even if you never ask for a new email. Through the box Cloudflare sees your IP address, details of your browser and device, the address of the Vibe page you are on, and which of the three forms it is. We send Cloudflare nothing you type. Cloudflare says it uses what it sees only to tell people from bots and to make the check better. The box gives your browser a one-time code that lasts five minutes, and your browser sends that code to Supabase with the form. Cloudflare tells us pass or fail for each try. We also see totals of passes and fails, never who. We have turned off the box's link for sending feedback to Cloudflare. Cloudflare publishes its own notice for this check, the Turnstile Privacy Addendum.
• Resend (sending email). It gets the address and full content of every automatic email Vibe sends, with the access codes and links inside. Resend sends them through Amazon's email service.
• Sentry (finding bugs). It gets the error reports, speed reports and visit signals in section 3d. That section says what a report can hold, and what our release of October 5, 2026 changed.
• Google (fonts, and the inbox our mail lands in). Fonts: your browser loads them from Google on almost every page, and your mail app may load them when you open one of our emails. Inbox: email to hello@ or help@ ends up in the personal Gmail inbox of the cofounder with direct access (section 3g). So Google holds your address and whatever you write to us. Both come under Google's own terms for the public, not under an agreement with us.
• Anthropic (AI coding assistant). We build and maintain Vibe with Claude, an AI assistant made by Anthropic. Its job is our software, not your information. What it can be shown is below.

  Our rule for the live database (the real one, which holds people's accounts): the assistant may be shown counts (how many), settings and code fingerprints. A code fingerprint is a short code that shows whether a piece of our software has changed. The assistant may not be shown anyone's records: no profile, post, message, email address or waitlist entry. This rule is new. Before October 4, 2026 the assistant could be shown records while a problem was being fixed.

  The rule covers the database only. Outside it:

  • Testing the live site. The cofounder with direct access can test the live site with the assistant. When that happens, it sees the screens that cofounder's own account sees, the admin tools in section 1 included.
  • Logs and reports. The assistant may be asked to read the logs at Vercel or Supabase, or Sentry's reports, to fix a bug. Then it sees what they hold. That can include an IP address or an email address. In a Sentry report made before our release of October 5, 2026, it can also include a sign-in cookie or the text someone was sending (section 3d).
  • The inbox and our other accounts. We have not yet written a rule for the inbox (section 3g) or for our accounts at the other companies on this list.

  The rule is one we keep ourselves. No system enforces it. Whatever the assistant is shown passes through Anthropic, which handles it under its own terms. We have not yet confirmed whether Anthropic may use it to improve its AI models.

Not in use today: Stripe and the notification services (section 3f). Apple and Google will join this list as app stores when the apps are published (section 3h).

These companies use providers of their own. Supabase and Resend, for example, run on Amazon's servers.

Where. Our database and the files Supabase stores are in the United States (Ohio). We have not confirmed where each of the other companies keeps what it holds. Cloudflare, Vercel and Google also use servers around the world to deliver files quickly. Ask and we will tell you what we know.

7. What does Vibe keep on my phone or computer?

Cookies. The only cookies Vibe sets are the ones that keep you signed in. Our sign-in software, which is made by Supabase, sets them on connectvibe.app. They last up to 400 days and are refreshed as you use Vibe. There are no advertising or tracking cookies. A short notice on the signed-out pages of the website says so. When you close it, your browser remembers that, so it is not shown again. Nothing about that is sent to us.

Kept in your browser. To load faster, Vibe keeps copies of some of your own information in your browser, such as your profile card, your own posts, follow list, recent searches and which of the clubs you run your Profile tab shows. They are cleared when you sign out or delete your account in that browser, and stay in your other browsers until you sign out there. Your theme, the email you just signed up with, the note that you closed the cookie notice and a few similar notes can stay until you clear your browser data for Vibe. Cloudflare's check that you are a person may keep its own data in your browser, inside its box and under Cloudflare's own address. Vibe cannot read it. The check sets no cookie under connectvibe.app.

Sign out. Signing out in Settings signs your account out on every device. Another device can stay signed in for about an hour more.

Do Not Track. Vibe does not follow you from site to site. So it works the same whether or not your browser sends a “Do Not Track” or “Global Privacy Control” signal. We have put no advertising software in Vibe, and nothing that follows you to other sites. The companies in section 6 do see your IP address and browser when your device contacts them.

8. How long does Vibe keep things, and what happens to my files?

The two words again: deleted means gone from Vibe's systems. Removed means hidden by the Vibe team or by a club, and still stored.

Vibe does not delete things just because they are old. They stay until you, a club or we delete them. Three things are deleted on a schedule today: waitlist entries and any place on a club's link that was never tied to an account (section 11), and the abuse counts, within three days (section 3d). The page-open tally and the use totals (section 3d) are not deleted either, and deleting an account does not take anything out of them. They hold day and week totals, with no account in them.

Deleting one thing.

• A post. When you delete a post:
  • it is deleted right away, with its likes, comments, saves, reposts and view records;
  • we then try to delete its files. If that fails, they stay until your account is deleted, or until the club is, for a club post;
  • if a report about the post is open, its files are kept as evidence;
  • The servers Supabase uses to deliver files can hold temporary copies of a public photo for longer. We have not measured how long.

  You cannot delete or edit a post the Vibe team removed.

• An edit replaces the old text. A report filed before the edit keeps the text as it was.
• A message. When you delete a message:
  • its words, its photo or video, any poll or sign-up in it (with the votes and names), its reactions, any pin on it and the notifications about it are deleted right away, for everyone. A post or event it shared is not touched. A notification already on someone's phone or computer can still show it there;
  • a grey “Message deleted” note stays in its place (“Post deleted” on the Board). The note keeps that a message was there, who sent it and when, and we store when it was deleted. The note is kept as long as a message would be (the table above);
  • the replies under a Board post you delete stay;
  • we then try to delete its photo or video file. If the Vibe team or a club removed the message, or a report about it is open or was acted on, the file is kept as evidence. It is also kept while another message in the chat points to the same file. If the delete fails, the file stays in our storage, even after you delete your account. While the file is still stored, a link to it opened before the delete can work for up to an hour.
• A profile photo, cover or résumé file. When you replace a profile photo or cover, we try to delete the old file, or we keep it as evidence if a report about you is open. When you take a résumé file off your profile, we try to delete it. If a delete fails, the file stays until you delete your account.
• An event's cover photo. When a club's owner or an officer replaces or removes an event's cover photo, or cancels or deletes the event, we try to delete that photo's file. If a report about the event is open, the file is kept as evidence. If a delete fails, the file stays until the club is deleted. While the file is still stored, a link to it opened before the delete can work for up to an hour. Deleting the club also deletes its events' cover photos. It keeps any the Vibe team removed, and the cover an event had when it was reported, if that report is still open.

What Vibe does not delete yet.

• Group chat photos.
• A work logo you replaced, and a photo you uploaded but never used. They stay at their public links until you delete your account.
• The files of posts you made as a club, when you delete your account. The posts go. The files stay until the club is deleted.
• The cover photo of an event that was deleted with the account that made it, and a cover photo uploaded for an event but never saved with it. They stay until the club is deleted.
• Comments. There is no delete button. A comment goes when its post or your account does.
• Your messages in a chat or club you have left. They go when you delete your account.

  For a comment, or for your messages in a chat or club you have left, you need not delete your account. Write to help@connectvibe.app from your sign-in email. We reply to that address, and once you answer that reply we aim to delete the comment or the messages by hand.

• A direct or group chat itself. “Clear chat history” and “Delete conversation” only clear your view.
• A request to join a club once its owner or officers have answered it. While it is still waiting you can cancel it, which also takes back the follow it made. Asking also follows the club. If the club says no, you keep following until you unfollow, and you can ask again after 14 days.
• The date you first followed a club. It stays after you unfollow, until the club or your account is deleted. While you are not following, no other user is shown it. If you follow again, the club's owner and officers see that first date (section 5f).
• An account that never confirmed its email or never finished setting up. If you cannot sign in to delete it, write to help@connectvibe.app.
• Our email log, the abuse counts, the sign-in log and emails you send us (section 9).
• Reports, the moderation log (our record of what moderators did), suspension and ban records, and evidence files. No end date is set yet (section 9).

Backups. We keep no database backups, and our plan with Supabase, our database company, includes none. So we cannot bring back something you delete by mistake. And if the database were ever lost or damaged, we could not restore it: accounts, posts and messages would be gone. We cannot speak for short-lived copies our providers may keep inside their own systems.

9. How do I see, change or delete my information?

See and change. You can edit your profile, and hide six parts of it: bio, experience, skills, “Working on”, résumé and your Clubs section. Your name, handle, photos, tagline, location line, website link, interest tags, major, year, campus, verified badge, three counts (followers, following and connections) and posts cannot be hidden. Your clubs show on your profile unless you hide one, and hiding one takes it off at once. Hiding the Clubs section takes them all off, the club names under your name too. You can also hide the title a club gave you, and choose the order your clubs show in. The club's members still see you in its member list. When you leave a club, you choose whether to keep following it. If you do, you can read its Board as a follower can (section 5e). Settings lists the events you checked in at, and you can remove any of your check-ins there. Settings shows your sign-in and school emails. To change your sign-in email, write to help@connectvibe.app from your current sign-in email. We reply to that address, and change it only after you answer that reply.

Block, mute, report. Block or mute someone from their profile. Mute a club's posts from its page or from one of its posts: they leave your feed, you stay in its chats, and the club is not told. Any account that has accepted the Terms can report, verified or not, unless it is suspended or banned.

A copy of your data. Email hello@connectvibe.app from your sign-in email. There is no export tool. The cofounder with direct access (section 1) puts the copy together by hand, and has to open your records to do it, messages included. We aim to send it within 30 days. We send it only to your sign-in email, never to another address.

Taking back your agreement. You agreed by checking the box at sign-up. To take that back, delete your account. That is the only way, because Vibe cannot run an account without the information on this page. On the waitlist, use “Take me off the list”. In the phone apps, once they are out, you can turn off the camera, microphone, photos and notifications for Vibe at any time. You do that in your phone's settings, and Vibe keeps working without them.

Delete your account. In Settings, under “Danger zone”, type your handle to confirm. The account is deleted right away, with no waiting period and no undo. The same button is on the “verify your campus” screen and the suspended notice.

If you cannot sign in, write to help@connectvibe.app or see connectvibe.app/legal/delete-account. We reply to your sign-in email and delete only after you answer that reply. If you can no longer read mail at that address, we ask for other proof that the account is yours (section 3g). The cofounder with direct access then deletes the account by hand: its files first, then its records.

The yearly school check-in. A school closes your school inbox after you leave, and nothing tells us when. So if you sign in with a school email and have not added a personal email, once a year we email a code to your school email. If you type it into Vibe, nothing changes for another year. If you do not within 14 days, a 90-day countdown starts, and Vibe shows you its last day each time you open Campus. Typing the code or adding a personal email (section 3a) ends the countdown. If you do neither by that day, we delete your account and what is in it, as in the steps below. An account that signs in with a personal email, or has added one, is never checked.

What happens, in order:

1. Vibe+, if you have it, is cancelled with no refund.
2. Your files are deleted, except evidence files (below) and the files section 8 says we miss.
3. Your account is deleted from the sign-in system, and with it every record tied to the account:
   • both email addresses, your profile and your proof of agreement;
   • everything you posted, sent, liked, saved or voted on;
   • your follows, club memberships and titles, RSVPs, event check-ins, blocks and mutes, club mutes included;
   • the records of what you viewed and of who viewed you;
   • your notifications, your waitlist entry and the record of which club link let you in.

   One log is not tied to the account, so step 3 does not reach it. It can still hold your email address (see “The sign-in log” below).

If step 1 or 2 fails, the account is not deleted and you can try again. If step 3 fails, your files are already deleted, and trying again finishes the job.

What do other people lose when I delete my account? Messages you sent are deleted from other people's chats, with any pins on them, the replies under your Board posts and the votes on polls you posted. Other people's comments, likes and reposts on your posts go with the posts. Posts and events you made as a club are deleted, and each event takes everyone's RSVPs, check-ins and its whole chat with it.

What stays with Vibe after deletion.

• Suspension and ban records. For either one we keep which it was, its dates, the reason and the team's private note. We also keep up to two scrambled codes (section 3d): one made from your school email and one from your sign-in email. The scrambled code from your school email stops that address being verified on another account while the suspension or ban lasts.
• Reports about you, with the copy of what was reported. Reports you filed stay, with your name taken off.
• The moderation log: your old account ID, your handle at the time and, for a photo that was removed, the old photo's address.
• Evidence files. These are:
  • the photos and videos of a post, if the Vibe team removed it or if a report on it is open or was acted on;
  • a photo or video you sent in a chat, if the Vibe team or a club's owner or officer removed that message or if a report on it is open or was acted on;
  • a photo, cover or logo the Vibe team removed;
  • your profile photo and cover, if a report about you was open.

  A photo already kept as evidence stays, even if the report was dismissed.

• The files that deleting your account misses (section 8).
• Messages you pinned. A message someone else wrote stays pinned. The record of who pinned it is emptied.
• Club records of things you did as a club owner or officer, such as titles you gave and followers you removed, with your name taken off. A club you owned stays, with no owner.
• Our email log, without the scrambled code or your account ID. It keeps the reference number Resend gave each message.
• The sign-in log. The sign-in system's log of sign-in activity (section 3d) sits in our database at Supabase. It can hold your email address and IP address. It is not tied to your account, and nothing in Vibe clears it today.
• Abuse counts, until they are cleared.
• Our list of payment events, once billing is on.
• Anything a court order or the law makes us keep. If we get a valid order to keep an account's records before you delete it, we copy and keep them.

What stays with other companies.

• Resend's record of emails sent to you, Vercel's visit logs and Sentry's reports. We have not confirmed how long each is kept.
• Emails you sent us. They stay in the Gmail inbox until they are deleted there.
• Stripe's payment records, once billing is on.

Your handle is not held for you. Someone else can take it right away.

No end date yet. Reports, the moderation log, suspension and ban records and evidence files have no end date today. We will set one with our lawyer and write it here. Until then you can ask help@connectvibe.app to delete a report copy or an evidence file that is about you or that shows you. You do not need an account to ask. We will, unless safety, the law or an open case needs it.

If we suspend or ban your account. You can still sign in, read the notice and the legal pages, sign out and delete your account. Everyone else stops seeing your profile, posts and comments, but messages you already sent stay visible in chats. Your name, handle and photo can still show in the member list of a club you are in. The notice gives the kind, the end date of a suspension and the reason, not the private note. To appeal, email help@connectvibe.app. A ban cancels Vibe+ with no refund.

10. How does Vibe keep my information safe?

What we do. Everything sent between your device and Vibe travels over an encrypted connection (HTTPS). Résumés, chat photos and videos and group chat photos are served through links that expire. Vibe is built so that no other user can read your email addresses (apart from the starter name in section 3a), your proof of agreement or your moderation records. One gap is named below.

What we do not have. Sign-in is by email and password, with no second sign-in step such as a code on your phone. Messages are not end-to-end encrypted (section 5h). We keep no backups (section 8), and no log of what is read through direct access (section 1).

One more gap. A signed-in person who types a school email at the “verify your campus” step is told if that address is already on another account. They are also told if it cannot be used on Vibe, which means a suspension or ban. They are not told whose account it is. Each account gets three tries an hour.

If someone gets at your personal information without permission, and we learn of it, we will email each person affected at the address we hold. We will also put a notice on this page. We will say what happened, what information was involved and what we are doing about it. We will do that as fast as we reasonably can, and no later than 30 days after we find out. Two things can change that: the police may ask us to wait, or the law may set a shorter time. Vibe keeps few records of who read what (section 1), so we may not be able to tell exactly whose information was reached. If we cannot tell, we tell everyone. Where a state's law requires it, we also tell that state's attorney general.

12. What if someone is under 18?

Vibe is for adults. You must be 18 or older to join the waitlist or to make an account, even if you already have a school email. Some people start college at 17, and some high-school students are given an IU or Purdue email address. Vibe is not for them until they turn 18.

We ask for no date of birth, so we rely on the checkbox and on what people tell us. Vibe is not meant for children. We do not knowingly collect information from anyone under 18. That includes children under 13.

If we learn an account belongs to someone under 18, we ban it, which hides its profile, posts and comments at once. We then delete the account, which also deletes its messages from other people's chats. We aim to do that within 7 days, unless a report or the law needs something kept first. We keep the ban record and the scrambled codes in section 9, and anything the law requires us to keep. That school email cannot be verified again until the person is 18 and asks help@connectvibe.app. If we learn a waitlist entry belongs to someone under 18, we delete the entry.

If you think someone under 18 is on Vibe, report something of theirs and choose "This person is under 18", or write to help@connectvibe.app. If you are their parent or guardian, write to help@connectvibe.app.

13. How do I agree to this policy, and what happens when it changes?

When you check the box at sign-up we record the Terms version and the time on our server, and we record it again once you confirm your email, because only then do we know the box was checked by the person who reads that inbox. We also record that you confirmed you are 18 or older, and whether you accepted at sign-up, after confirming your email or on a later screen. The record is deleted with your account.

One version. Your checkbox covers the Terms and this policy together. We record the two as one version number. When that number changes, Vibe asks you to accept again the next time you open it. Using Vibe does not count as agreeing.

This version. We published this policy on October 5, 2026 without changing that number. So if you made your account before that day, Vibe has not asked you to accept it. Until it does, this page is our notice to you. Vibe will ask you the next time the number changes, which we expect when the Terms change later in October 2026.

If you decline a new version, you cannot use Vibe beyond Settings, where you can still delete your account.

How you hear about changes. When we change this page we put the new date at the top. For a change that matters, we also aim to tell people with accounts in the app or by email. If you are on the waitlist or just visiting, the date at the top is how you can tell.

14. Does it matter where I live, and what are my rights?

Vibe is run from Indiana, in the United States. Your information is handled there and on the servers of the companies in section 6, wherever they run them. If you use Vibe from another country, your information comes to the United States, where the law may protect it less than the law at home.

Rights for everyone. Wherever you live, you can ask us to do any of these, at no cost:

• tell you what we hold about you and send you a copy;
• fix something that is wrong;
• delete your account or your waitlist entry, or a comment or message you cannot delete yourself (section 8);
• stop an optional use, such as Vibe news.

Section 9 says how. Write from the email address on your account or waitlist entry. Before we delete or change anything, we reply to that address and wait for your answer. If you have no account and think Vibe holds something about you, write to help@connectvibe.app.

Who answers, and when. The cofounder with direct access (section 1) does the work, because nobody else can reach the records. We aim to answer within 30 days, and within 45 at the latest. If we need more than 30, we tell you. If we cannot do what you ask, we say why, and you can ask us to look again. We never charge for a request or treat you worse for making one.

State privacy laws. Some states, Indiana and California among them, have laws that give people rights over their personal information. Most of those laws cover companies much bigger than Vibe is today. We give the rights above to everyone anyway.

Outside the United States. Vibe is built for two universities in Indiana and is not aimed at people in other countries. If European or UK data protection law does apply to you, these are our reasons for using your information:

• to run the service you asked for;
• to keep Vibe safe and working;
• because you said yes, where we ask (the waitlist, Vibe news, notifications);
• because the law requires it.

You can also object to a use or ask us to limit it, and you can complain to the data protection authority where you live. We have no office or representative outside the United States.

15. How do I reach Vibe?

CONNECTVIBE. LLC, an Indiana limited liability company. We have no office. To send us legal papers, use our registered agent. That is the person the state lists to receive them, named in the Indiana Secretary of State's public business records.

Both addresses reach the same inbox (section 3g).

This policy: connectvibe.app/legal/privacy. Terms: connectvibe.app/legal/terms.