privacy policy

1. information we collect

account information: when you sign in we collect your email address via supabase authentication. we use magic links — we never store your password.

profile information: if you choose to set up a profile, we collect your username, bio, and profile photo. this is entirely optional.

photos and captions: when you post, we store your image and optional caption on supabase storage. all posts are automatically deleted after 24 hours.

anonymous session id: we store a randomly generated session id in your browser's local storage to track your emoji reactions. this id is not linked to your email or identity.

usage data: we use vercel analytics to collect basic, anonymized data about how the app is used such as page views and traffic sources. no personally identifiable information is collected through analytics.

2. how we use your information

• to authenticate you and send magic link sign-in emails
• to display your posts and profile on the app
• to track your reactions anonymously so you can't react more than once per post
• to moderate content and enforce our community guidelines
• to improve the app based on usage patterns

3. data retention

posts and their associated reactions are automatically deleted after 24 hours. your account information and profile are retained until you request deletion. anonymous session ids are stored locally in your browser and are not retained on our servers beyond the life of a reaction.

4. third party services

we use the following third party services to operate the app:

• supabase — database, authentication, and file storage. supabase privacy policy
• vercel — hosting and deployment. vercel privacy policy
• resend — transactional email delivery. resend privacy policy

5. data sharing

we do not sell, rent, or share your personal information with third parties for marketing purposes. we only share data with the third party services listed above as necessary to operate the app. we may disclose information if required by law or to protect the safety of users or the public.

6. your rights

you have the right to:

• access the personal data we hold about you
• request correction of inaccurate data
• request deletion of your account and associated data
• withdraw consent at any time by stopping use of the app

to exercise any of these rights, contact us at hello@dropavibe.live

7. children's privacy

instant [vibe] check is not directed at children under the age of 13. we do not knowingly collect personal information from children under 13. if you believe a child has provided us with personal information, contact us immediately at hello@dropavibe.live and we will delete it promptly.

8. security

we take reasonable measures to protect your information including encrypted connections, row level security on our database, and access controls on stored files. however no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

9. changes to this policy

we may update this privacy policy from time to time. when we do, we'll update the date at the top of this page. continued use of the app after changes constitutes acceptance of the updated policy.

10. contact

if you have any questions about this privacy policy, contact us at hello@dropavibe.live