Vibeswap Privacy Policy

This Privacy Policy explains how Vibeswap collects, uses, and shares information when you use the Vibeswap mobile application and related services (collectively, the “Services”), including real-time audio/video features such as “Vibeswap Live”.

1) Who this is for (18+ only)

Vibeswap is intended for adults only. You must be 18+ to use the Services. If we learn we’ve collected personal data from someone under 18, we will delete it and may terminate the account.

2) Information we collect

A) Information you provide

• Account details (e.g., username, date of birth, profile photo, and profile info).
• If you purchase a ticket to an event, we record the event ID, quantity, amount paid, currency, and a Stripe session reference. We do not store your card number or full payment details — those are handled directly by Stripe (see Section 5).
• If you are a venue organiser and connect a Stripe account to receive ticket payments, we store your Stripe Connect account ID alongside your venue profile.
• If you sign in with Google, we receive your Google display name and profile photo from Google as part of the authentication flow.
• Content you create (e.g., videos, images, captions, vibe tags, venue tags).
• Reactions, check-ins, likes, saves, and comments you make.
• Personal notes you add to venues saved in your library. These notes are private to your account and not shown to other users.
• Reports, feedback, and support requests you submit (including reports about misleading tags, venue information, or safety signals).
• Suggestions you submit (for example, new vibe suggestions).

B) Information collected automatically

• Device info (model, OS version).
• App activity (views, taps, interactions).
• Location information (if you enable location permissions). This may include precise device coordinates when needed for features like venue distance, or an approximate location (for example, derived from general device signals) if precise location is not available.
• Crash/diagnostic logs.
• Certain app preferences and session data stored locally on your device (for example, to remember your settings between sessions).

C) Push notifications

If you enable notifications, we collect and store a push token (e.g., an FCM/APNs token) to deliver notifications.

D) Vibeswap Live (real-time audio/video)

• Live audio/video: If you start a live session, your device microphone/camera may capture audio/video that is transmitted to viewers in real time.
• Viewer interactions: If you watch a live session, we may process your interactions (e.g., joining/leaving, “Good Vibes”, questions/prompts) to deliver the live experience.
• Technical data: To provide live streaming, we and our service providers may process technical information such as device/network details, session identifiers, timestamps, and connection quality metrics.

2A) Ticketing and payment data

When you buy a ticket through Vibeswap, payment is processed by Stripe, our third-party payment processor. Stripe collects and processes your card details directly — Vibeswap does not store your card number, CVV, or full payment credentials. Stripe's privacy policy governs the processing of your card data: stripe.com/gb/privacy.

We store a ticket record in our systems containing: your user ID, the event ID, venue ID, Stripe session reference, quantity purchased, amount paid, currency, and timestamp. We use this to confirm your ticket, display it in the app, and handle any support queries.

If you are a venue organiser connecting a Stripe account to receive payouts, Stripe collects identity verification and bank details as part of their Connect onboarding. Vibeswap stores only your Stripe Connect account ID and onboarding status — we do not store your bank account details or identity documents.

3) How we use your information

We use information to:

• Provide and operate the Services.
• Provide real-time features like Vibeswap Live (including streaming, session management, and viewer interactions).
• Show content and social interactions.
• Personalize or improve feeds and discovery.
• Send notifications you request/enable.
• Prevent abuse, spam, fraud, and safety issues.
• Moderate content and enforce our Terms (including reducing distribution of content that appears misleading or incorrectly tagged).
• Display venue information sourced from third-party providers (such as Google Places) alongside community-sourced signals such as vibe tags, check-ins, and safety badges.
• Compute anonymised, aggregated audience insights — such as average age and gender breakdown — from the profile data (date of birth, gender) of users who purchase tickets to an event. These statistics are only generated when at least 5 attendees have purchased tickets, are shown only to the event organiser, and are never linked back to any individual attendee.
• Comply with legal obligations.

We may use automated systems to rank and recommend content, and to detect spam, fraud, and policy violations. Where appropriate, you can contact us to ask questions or contest a moderation decision.

4) Legal bases (UK/EU style)

Where applicable, we process personal data based on:

• Contract (to provide the Services).
• Legitimate interests (security, abuse prevention, product improvement).
• Consent (e.g., location permissions, push notifications).
• Legal obligation (compliance, law enforcement requests).

5) Sharing your information

We may share information with:

• Service providers that help us run the Services (for example, Firebase/Google for authentication, database, storage and notifications; Apple/Google push infrastructure such as APNs/FCM for notification delivery; LiveKit for real-time communications; Google Places API for venue information such as addresses, opening hours, and contact details displayed in the app; and Stripe for payment processing and payouts — Stripe processes ticket payments and venue payouts independently under their own privacy policy).
• Other users (your profile and public content visible inside the app, and — where you use the share feature — anyone with a share link).
• Event organisers — when you purchase a ticket to an event, the organiser can see your name and profile photo in their attendee list. Where there are at least 5 ticket purchasers, we may also show the organiser anonymised, aggregated audience insights (such as average attendee age and a percentage gender breakdown). These insights are computed across all ticket purchasers for that event and do not identify any individual attendee.
• Authorities when legally required, or to protect users/platform safety.
• Rights-holders in copyright investigations where appropriate.

We do not sell your personal information for money.

6) Music uploads

Vibeswap allows users to upload original music tracks ("Uploaded Music") to the platform. By uploading music you confirm that:

• You own or hold all necessary rights, licences, and permissions for the content you upload (including any underlying compositions, recordings, samples, and artwork).
• Your upload does not infringe the intellectual property rights, privacy rights, or any other rights of any third party.
• You are not uploading content that is subject to a record-label exclusive or any agreement that would prohibit you from licensing it to us.

By uploading music you grant Vibeswap a non-exclusive, worldwide, royalty-free licence to store, host, display, stream, and associate your music with posts and profiles within the app. You retain ownership of your music. We do not claim any ownership rights in your Uploaded Music.

Uploaded Music may be played by other users within the app. If another user's video post is shared via a link, the music associated with that post may also be audible to recipients of that link.

We reserve the right to remove Uploaded Music that we reasonably believe infringes third-party rights or violates our Terms of Service, without prior notice. Repeated infringement may result in account suspension.

Data collected: When you upload music we collect and store the audio file, any artwork, your title and artist name, your user ID, and an upload timestamp. This information is used to operate the music feature and associate your track with your profile.

7) Content visibility

User content (posts, venue profiles, user profiles) is primarily designed to be viewed inside the app by signed-in users. However, if you or another user shares a link to a post, venue, or profile using the in-app share feature, a preview of that content may be accessible to anyone with the link, including people who are not signed in to Vibeswap.

For Vibeswap Live, your live audio/video may be seen and heard by other users who join that live session.

Personal venue notes you add in your library are private to your account and are not visible to other users.

Please remember that other users can take screenshots or screen-record content, and may share it outside of Vibeswap. We can't control what other users do with content once they've viewed it.

8) Data retention

We keep data as long as needed to:

• Provide the Services.
• Meet legal/compliance needs.
• Resolve disputes and enforce terms.

If you delete content, we remove it from active systems, and it may remain in backups for a limited period (typically up to 30 days).

We may retain records of reports, moderation actions, and related metadata for safety, enforcement, and audit purposes.

Live sessions: Unless we explicitly tell you otherwise (for example, if a replay feature is enabled), Vibeswap Live is intended to be viewed in real time and we do not aim to store your live audio/video as recordings. However, we may retain limited technical logs and metadata necessary for security, troubleshooting, and enforcing our Terms.

9) Security

We use reasonable administrative, technical, and organizational measures to protect data. No system is 100% secure, so we can’t guarantee absolute security.

10) Your choices and rights

Depending on your location, you may have rights to access, correct, delete your data, request portability of your data, object to or restrict processing (including processing based on legitimate interests), and withdraw consent (e.g., location, notifications).

To request access, correction, or deletion, or to raise a privacy concern: privacy@vibeswap.app (or support@vibeswap.app for general help). You can also disable notifications and location permissions in your device settings.

If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can find details at ico.org.uk.

11) International transfers

Vibeswap is based in the UK, but our Services are designed to be usable globally. Depending on where you live and where our service providers operate, your information may be processed in countries outside your country of residence, including outside the UK or European Economic Area.

When we transfer personal data internationally, we use safeguards intended to protect your information, such as contractual protections (for example, UK International Data Transfer Addendum and/or EU Standard Contractual Clauses where relevant), and we assess the transfer risks where appropriate.

This can apply to third-party service providers used for core features (such as hosting, analytics, push notifications, and real-time communications for Vibeswap Live — e.g., LiveKit).

12) Changes to this policy

We may update this Privacy Policy. If changes are material, we’ll provide notice in-app or by other reasonable means.

13) Contact

General enquiries: hello@vibeswap.app.
Support: support@vibeswap.app.
Privacy questions or requests (including Vibeswap Live): privacy@vibeswap.app.
Legal notices: legal@vibeswap.app.
Security reports (vulnerabilities): security@vibeswap.app.
Copyright notices: dmca@vibeswap.app.