| Data | Why |
|---|---|
| Name, username, email, phone | Create and secure your account |
| Photos, videos, statuses, messages, listings | To provide the service you asked for |
| Purchases, sales, wallet activity | Process orders, gifts and payouts |
| Identity documents (sellers only) | Legally required identity checks (KYC) |
| Approximate location (optional) | Friend map and nearby streams — off in Ghost mode |
| Device identifiers and security signals | Fraud prevention and enforcing bans |
| Usage and diagnostics | Keep the app working and improve it |
Location is optional and only used while you are using the app. Turning on Ghost mode hides your location from everyone. You can revoke location permission at any time in your device settings.
Only service providers who help operate Vybez, and only for that purpose: hosting, database, sign-in and file storage (Supabase); live video and streaming (GetStream); payments (Stripe, SumUp and app store billing — card details go directly to the payment provider and never touch our servers); crash reports, only if you opt in (Sentry, with messages and personal content stripped before sending); GIF search (Giphy, requested through our server so your IP address is not shared); map tiles and city-level place lookup (OpenStreetMap / Nominatim, and Apple Maps where configured); sign-in (Apple, Google); marketplace search (Typesense); crypto deposit monitoring (Alchemy) and, if you choose to connect a wallet, Phantom. Currency and crypto price rates are fetched from public APIs (CoinGecko, Coinbase, Binance, Frankfurter), which receive your IP address but no account data. We also disclose data where legally required, or to protect people from harm — including reporting child-safety matters to the appropriate authorities.
Your profile, posts, listings and streams are public unless you set them to private. Your social profile and your shop are separate: they are only shown as connected if you choose to link them. Direct messages are private and protected by strict server-side access rules; they are encrypted in transit and at rest on our infrastructure, but they are not end-to-end encrypted — like most social apps, our systems can process them for safety and moderation.
We retain personal information only while needed for its purpose or a justified legal obligation. The account-deletion flow schedules processing after a 31-day recovery period; cancellation requires an explicit cancellation action. A scheduled request is not proof that deletion has completed.
You can request statutory erasure without installing the app by emailing help@vybez.uk. We respond without undue delay and normally within one month; where a lawful extension applies we explain it within the initial period. The recovery period does not automatically override this right. See Account & Data Deletion for the process and complaint routes.
Limited transaction, tax, safety and legal-claim records may be retained where lawfully justified. We will explain retained categories, reasons and applicable retention periods or criteria when responding. Backups must be put beyond ordinary use and expire under a documented schedule. Unresolved transactions do not justify retaining unrelated personal information indefinitely.
Depending on where you live (including under UK/EU GDPR and California law) you can request access to your data, correction, deletion, a portable copy, or object to certain processing. Use Settings, or email help@vybez.uk. You may also complain to your local data protection authority (in the UK, the ICO).
Vybez is 17+ and includes 17-year-olds, who are children for applicable UK online-safety and data-protection purposes. Creating an account with an email address requires a date of birth, which is checked on our servers and then discarded — we do not keep your exact date of birth. On iOS, Apple's Declared Age Range can also be used. If we learn that someone under the minimum age has an account, we remove it.
Data may be processed outside your country under appropriate safeguards. We protect it with encryption in transit, server-side access rules on every table and file, short-lived signed links for private media, and access controls. No system is perfectly secure, but we act quickly on any incident.
We will notify you in-app about material changes. Contact: help@vybez.uk.