Personal data processing policy

PRIVACY POLICY

Vybes Private Enterprise

UNP: 192851634

Address: 24 Olshevskogo St., office 434, Minsk, Frunzensky District, Republic of Belarus

Effective date: September 1, 2026

Last updated: September 1, 2026

Approval date: September 1, 2026


1. GENERAL

1.1. This Privacy Policy describes how Vybes Private Enterprise ("Operator", "we", "us") processes personal data of users of the Vibeek! mobile application ("App").

1.2. By using the App, you consent to the processing of your personal data as described in this Policy.

1.3. If you do not agree, please do not use the App.

1.4. The authoritative legal version of this document is the Russian text at `/privacy`. In case of discrepancy, the Russian version prevails. The in-app and website texts are the same.


2. DATA WE PROCESS

We may process:

  • Account data: name, in-app nickname, Apple ID / VK ID / Telegram ID and username, internal user ID;
  • Contact data: email and phone number if provided during VK ID or Telegram sign-in, and phone number confirmed in the App;
  • Profile data: avatar, profile color; sex and date of birth (age) if provided by the sign-in service (e.g. VK ID), used among other things to match sponsored campaigns;
  • App activity: questions, answers (including answers to sponsored/advertising questions), matches, notification and display settings;
  • Technical data: auth tokens, push token, device model/OS, IP address;
  • Contacts (with permission): device contacts for friend search; VK friends when using VK ID;
  • Public match data: anonymous answers and identifiers for public questions;
  • Rewards, certificates, and subscription: Vibeek coin balance and ledger; premium status and source; store/RevenueCat subscription identifiers (not your bank card number); certificate redemption records; certificate secrets (QR image, card number and CVC or code) stored encrypted and shown to you on request under "My certificates";
  • Sponsored campaigns: campaign answers, coin rewards, and anti-abuse signals (including confirmed phone);
  • Support and content reports: ticket text, related match/poll identifiers, device model/OS and App version;
  • Referrals: inviter–invitee link and confirmed phone number to prevent duplicate rewards.

3. PURPOSES

We process data to:

  • provide App functionality (sign-in, profiles, Q&A, matches, friend search, push notifications);
  • improve the App and fix issues;
  • comply with applicable law and protect users and the Operator;
  • show sponsored campaigns, match them using available demographic attributes (sex, age), award coins for voluntary answers, and measure campaign results;
  • moderate questions and answers (text only, without sending your account ID to the moderation service);
  • manage premium subscriptions, Vibeek coins, and gift certificates;
  • handle support requests and content reports.

4. LEGAL BASES

Processing is based on your consent, performance of the user agreement, and legal obligations under the law of the Republic of Belarus.


5. STORAGE AND RETENTION

5.1. Data is processed with and without automation on servers located in the Republic of Belarus (hostfly.by).

5.2. For push notifications we send a device token to Apple Push Notification service (APNs) on iOS and to Firebase Cloud Messaging (Google) on Android. Using the App with push disabled does not require that transfer.

5.3. Data is kept while your account exists. After account deletion, data is removed within 30 days unless longer retention is required by law. Issued certificate details may be kept while the account exists or until used, and support tickets/reports may be kept longer as needed to handle the request and comply with law.


6. SECURITY

We use HTTPS, access controls, encryption where appropriate (including gift-certificate secrets), monitoring, and reputable hosting providers in Belarus.


7. SHARING WITH THIRD PARTIES

We may share data with:

  • hosting provider (Belarus);
  • Apple (APNs for iOS push; App Store for subscriptions);
  • Google (FCM for Android push; Google Play for subscriptions; Firebase Crashlytics for crash reports on production iOS builds);
  • RevenueCat (US) — subscription status for store purchases (no bank card number);
  • VK (sign-in via VK ID);
  • Telegram (sign-in via Telegram);
  • Cloudflare (bot protection on the website support form);
  • other App users (name, nickname, avatar, answers within App features — not email/phone);
  • campaign sponsors: answers to that campaign and a technical response ID, without your name, nickname, avatar, phone, or email;
  • authorized support staff, including via an internal Telegram channel, solely to handle your request;
  • authorities when required by Belarus law.

Cross-border transfers occur only as described above and with your consent when using the relevant feature.


8. YOUR RIGHTS

Under Belarus personal data law you may request information about processing, access, correction, deletion, withdrawal of consent, and lodge a complaint with the supervisory authority.

Requests: use the in-app support form at https://vibeek.by/support or postal address above. We respond within 15 business days.


9. COOKIES AND SIMILAR TECHNOLOGIES

The App may use local storage and similar technologies for settings, security, and analytics. You can manage this in device settings where applicable.


10. CHILDREN

The App is intended for users aged 16+. If we learn we collected data from a child under 16 without parental consent, we will delete it.


11. CHANGES

We may update this Policy. Material changes will be communicated in the App or by email. Continued use means acceptance. The current version is always available in the App and at https://vibeek.by/privacy.


12. CONTACT

Vybes Private Enterprise

UNP: 192851634

24 Olshevskogo St., office 434, Minsk, Republic of Belarus

Web: https://vibeek.by

Email: support@vibeek.by

Support: https://vibeek.by/support

Supervisory authority (Belarus): Operational and Analytical Center under the President of the Republic of Belarus, 30 Engelsa St., 220030 Minsk.