Privacy policy
Last updated 11 October 2026.
This describes what the Vibeus app actually collects, why, who can see it, and how to delete it — checked against the running code while this was written, not copied from a template. Where something below changed since you read it, the app's own behavior is what's true; tell us and we'll fix this page.
Vibeus is operated by Viberostech ("we", "us"), a sole proprietorship registered to Yunus Emre Akgün: Doktor Mehmet Akarasu Mh., Ekrem Şerif Egeli Cd. No: 56/3, Demirci / Manisa, Türkiye.
What we collect, and why
Everything below is something the app actually asks for or stores. Nothing here is aspirational.
| What | Why |
|---|---|
| Your phone number | To sign you in with a one-time code, delivered by WhatsApp or text message. It's never shown to other users. |
| Display name, username, bio, occupation | Shown on your profile so people you meet through a plan know who you are. |
| Birth date and gender | Collected once, at signup, and never editable again afterward. Neither is ever used to filter, target, or rank anything — there is no age or gender search in this app, on purpose. We ask because a small number of trust and safety decisions need to know an age exists on file; we don't use it for anything you'd notice day to day. |
| Email address | Optional. Only used if you need to recover access to your account — never shown to anyone, never used to contact you otherwise. |
| A profile photo | You choose to upload it. It's reviewed before it becomes visible to anyone else, and stored on servers we operate. |
| Interests | A short list you pick from, shown on your profile. |
| Availability (which nights/hours you're usually free) | Used only to help you and people you plan with find a time — never shown to anyone as a schedule of when you're "usually out." |
| Coarse location | Rounded to roughly a 1 km grid, refreshed only when you open the app. Used to show you plans nearby and to estimate how far a plan you host might reach. We never store your exact, continuous, or background location for this. |
| A single "were you actually there" check per plan | If you check in at a plan, your device's location is compared against the plan's location once, and only the result — near enough, or not — is kept. The coordinate itself is discarded; it never becomes a location history. |
| Plans you create, messages you send | Used to arrange plans and communicate with their participants. Authorized administration and moderation staff can also access messages for safety, report and support reviews. |
| Reports and blocks you file | Used to review reports and apply blocking rules to plans and messages. |
| A push notification token | So we can deliver a push to your device when something you'd want to know about happens. It identifies your device, not you: iOS can reissue it at any time — on reinstall, restore, or on its own — and by itself it's useless to send anything through; only our own signing key can use it. |
| Notification preferences | The on/off switches in Settings that control which pushes you get. See "Push notifications" below. |
What we don't do
- No background location. The app never reads your location while it's closed or backgrounded — only the two cases above, both foreground, both one-shot.
- No age or gender targeting. The fields exist on your profile; there is no code path anywhere that filters, searches, or ranks by them.
- No advertising software and no ad identifier. The app contains no advertising SDK and never asks for or uses Apple's advertising identifier. It does use Google Firebase for usage statistics and crash reports, described under "Services that handle your data" below.
- No selling your data. We don't sell personal data to anyone, for any reason.
Who can see what
Your device's precise location is not shared with other users. The meeting point you add to a plan is shown precisely to its host and confirmed participants; other viewers see an approximate point. Plan cards can show the names and profile photos of up to three confirmed participants. The full participant list is available to the host and confirmed participants.
Blocking works in both directions: plans involving a blocked host or confirmed participant are hidden from each other, and each person's messages are hidden from the other in shared rooms. Blocking does not notify the other person.
Messages and moderation
Messages are not end-to-end encrypted. They are processed in a form our server can read. A plan's host and people with access to its room can read its history, including eligible former participants. Authorized administration and moderation staff can also access the contents for safety, report and support reviews.
A message removed through moderation is hidden from app users but retained for review. Access to the administration panel is restricted by staff roles; ordinary users cannot use it to read other rooms.
Services that handle your data
Your account data is stored on cloud infrastructure we run (Railway). A few outside services handle part of it, each only for the job listed:
- Apple delivers push notifications (see below) and processes in-app purchases.
- Google Firebase Analytics receives app usage events (for example, opening the app, creating or joining a plan, a purchase) together with your account ID, so we can see whether the app works for people. No ad identifier is collected.
- Google Firebase Crashlytics receives crash and error reports with your account ID, so we can fix what broke.
- RevenueCat receives your account ID and your App Store purchase records, to unlock Pro.
- Meta (WhatsApp) receives your phone number and the message we send you there: your sign-in code when available and, if you chose WhatsApp updates at sign-up, a message confirming your account was created. You can turn this off in Settings at any time.
- Google Maps Platform receives the text of a place search and the approximate area it is for, to suggest meeting points.
None of these services receive your messages, profile photo, birth date or gender. We don't sell your data or share it with advertisers or data brokers. Deleting your account doesn't automatically erase what these services already hold; email us and we'll ask them to delete it. If this list changes, this page changes first.
Push notifications
Sending you a push is one case where something you wrote, or someone else's name, leaves our infrastructure for a third party. To deliver a notification, its title and body — which can be another person's display name ("Selin is coming") or part of a plan's text — go to Apple's push notification servers, because that's how iOS actually gets it onto your device. That only happens for a notification you're eligible to receive under the preferences below; nothing goes to Apple that we haven't also sent, at the same moment, to you.
Three switches in Settings control this:
- Plans inside my hours — a plan posted near you during a time you've said you're usually free. The only one on by default.
- Someone joins my plan — someone confirming for a plan you're hosting.
- Room messages — a message in a room for a plan that's currently running.
There is no fourth kind of push behind those three. We don't send marketing, promotional, or re-engagement notifications — there's no code path in the app that does, and turning all three switches off leaves nothing running quietly in the background.
Your device token and your preferences are deleted, not just turned off, when you delete your account — see "How long we keep it, and how to delete it," below.
How long we keep it, and how to delete it
We don't have a fixed retention timer for messages — they're kept for as long as the app is running. What we do have is account deletion: when you delete your account, the link between you and your messages is removed, but the message text itself remains visible to the people who were in that conversation with you (details below). Personal information you included in the message itself is not automatically removed by deleting your account.
You can delete your account and its personal data at any time — from Settings inside the app, or by emailing yunus@viberostech.com if you'd rather not use the app to do it.
Deleting your account, right away and in one step:
- Clears your phone number and deletes your profile, photos, interests, availability, and email — for real, not a flag that hides them.
- Cancels any plans you're hosting that haven't started yet, and notifies whoever had joined.
- Removes your blocks and any app entitlements tied to your account.
Two things deletion does not do, on purpose, because they aren't only your data: a room you were in keeps existing for the other people who were in it, and any message you sent stays visible in that room's history with its authorship removed — it shows as sent by a removed account, not attributed to you, but the text isn't erased out from under a conversation other people are still part of. There's no thirty-day grace period and no way to reactivate — once it's gone, it's gone immediately.
Your choices
Location, camera, and photo-library access are all requested by the operating system, not by us directly — you can deny or revoke any of them at any time in your device settings, and the app degrades rather than breaking (you just won't see nearby plans, or won't be able to attach a photo). Editing your display name, bio, occupation, interests, and availability is available any time from your profile; birth date and gender are asked once and are not editable afterward, by design.
Age requirement
Vibeus is for people 18 and older. The core thing this app does is help you meet someone you don't know yet, in person, often at night, with your location shared to make that possible — that's not something we're willing to put a minor into, anywhere we operate. You confirm you're 18 or older when you sign up; we don't run a separate age-verification check on top of that.
Changes to this policy
If what the app actually does changes, this page is meant to change with it — not the other way around. We'll update the date at the top when we do.
Website waitlist
When you join the waitlist, we store your email address, chosen language, signup source and signup date. We use your email address to let you know when the app becomes available. Joining does not create an app account or link this record to an app profile.
When configured on the server, a salted digest of your IP address is also stored to help limit abuse; the waitlist table does not store your raw IP address. Entries are not automatically deleted. To leave the list or have your record deleted, email yunus@viberostech.com.
Contact
Questions about this policy, or about your data specifically: yunus@viberostech.com.