Privacy
Policy

Welcome to VibeCut. This Privacy Policy offers a clear and comprehensive explanation of how we — VibeCut ("we", "us", "our") — collect, use, safeguard, and otherwise handle your personal information when you interact with the VibeCut mobile application (the "App") and the associated services we deliver (the "Service").

In this document, the term "Personal Data" means any information that identifies, relates to, describes, or could reasonably be linked — directly or indirectly — to you as an individual. This definition aligns with the data protection laws applicable in your region.

This Policy operates alongside our Terms of Service, which together form the complete agreement governing your relationship with VibeCut. If any part of this Policy raises concerns for you, we invite you to contact us or to discontinue use of the Service until those concerns are resolved to your satisfaction.

By installing or using VibeCut, you acknowledge that you have read and understood the practices described below.

VibeCut receives information about you through three primary channels: data you actively and voluntarily submit while using the App; technical signals your device and usage patterns generate automatically; and information passed to us by trusted third-party service providers who help power the Service. The categories and volume of data we handle depend directly on which features you choose to engage with — not every category described in this Policy applies to every user.

We are committed to collecting only what is necessary to provide and improve the Service, and we do not monetize your personal information through sale or rental.

When you engage with VibeCut, you may voluntarily submit the following categories of information:

• Media uploads. Photos and videos you submit are processed exclusively to fulfill the specific creative task you initiated. They are not repurposed for any unrelated objective.
• Gender preference for creative features. Certain AI tools within the App allow you to indicate a gender option (Female, Male, or Other) to influence stylistic outputs. This selection applies solely to that generation and has no bearing on your profile or identity within the Service.
• Account registration details. When you create an account, we collect your email address and generate an internal user identifier to manage your account.
• Transaction metadata. When you make an in-app purchase, the platform — Apple App Store or Google Play — may relay limited details to us, such as your subscription tier, payment confirmation status, transaction reference, and verification URLs. Your full payment credentials (credit card numbers, banking details) are never transmitted to or stored by VibeCut.
• Support correspondence. If you reach out to our customer support team, we receive your name, email address, and the full content of your inquiry so that we can respond appropriately.
• Other voluntary submissions. Any additional information you choose to share with us in the course of interacting with the Service.

How Visual Content Is Processed

When you upload images, video clips, or other visual media to VibeCut — including content that contains people or faces — that material is processed to generate the AI-powered creative result you requested. This processing may involve automated analysis of visual elements such as subject positioning, composition, or the presence of faces, all carried out exclusively to fulfill your request (for example: photo animation, style transfers, frame generation, or template-based transformations).

Any facial information encountered during this process is not used to identify you personally, authenticate your identity, enable surveillance, fuel advertising targeting, or build any biometric record of any kind.

Faces in Uploaded Content

VibeCut is an AI-powered creative tool. When images containing people are uploaded, our systems may perform limited technical operations — such as determining whether a face or human figure is present — to produce coherent, high-quality results across frames or sequences.

This analysis is purely functional in nature: it exists to help animate a still photo, maintain visual consistency across a generated video, or apply template effects accurately. It plays no role in identity recognition, authentication, behavioral tracking, advertising, biometric profiling, or surveillance of any kind.

We do not retain face templates, facial geometry data, biometric identifiers, or any comparable persistent record from which an individual could later be recognized.

AI Partners & Data Handling

Delivering AI-powered creation features, running content safety checks, and maintaining service quality requires us to route relevant data — including your uploaded images, videos, text prompts, generation parameters, template selections, and supporting technical metadata — to our own infrastructure and to contracted third-party AI providers.

Our current AI service partners include:

• OpenAI — content safety screening and text/image AI processing;
• Alibaba Cloud Model Studio — AI video, image, and related generative processing;
• Google Gemini / Google AI — large language model processing;
• xAI / Grok — large language model processing.

Each of these providers receives only the data necessary to complete the specific task — nothing beyond that scope. We do not permit them to use your uploaded images, videos, facial information, or derived analysis for identity recognition, identity verification, surveillance, behavioral tracking, advertising targeting, facial recognition database construction, or biometric profiling.

For details on how each provider independently handles faces, biometric data, model training, data retention, and security, please refer to their official documentation:

• OpenAI:
  • "Respect privacy" — Usage Policies;
  • "Our commitments" and "Model training FAQ" — Enterprise Privacy at OpenAI.
  • https://openai.com/policies/usage-policies/
  • https://openai.com/enterprise-privacy/
• Alibaba Cloud Model Studio:
  • "Privacy protection" — Security Certifications and Privacy.
  • https://www.alibabacloud.com/help/en/model-studio/privacy-notice
• Google Gemini / Google AI:
  • Section 1 "Do not engage in dangerous or illegal activities" — Generative AI Prohibited Use Policy;
  • "How We Handle Data" — Gemini API Abuse Monitoring.
  • https://policies.google.com/terms/generative-ai/use-policy
  • https://ai.google.dev/gemini-api/docs/usage-policies
• xAI / Grok:
  • "2. Personal information we collect" and "3. How we may use personal information" — Privacy Policy.
  • https://x.ai/legal/privacy-policy

Regardless of which AI partner is involved in any given task, your uploaded images, videos, facial information, and any derived data are never sold, rented, or transferred for commercial exploitation. We do not use them to train VibeCut's own machine learning models unless you have given your explicit, informed consent to that specific use.

Retention of Visual Data

Uploaded images, video files, prompts, generation parameters, outputs, and associated task data are held only for as long as is necessary to deliver the Service to you. Facial analysis data, biometric templates, and facial geometry records are not stored — any facial information processed during a generation request is discarded once that task completes.

Generated results and task history may be retained for a reasonable period to support features like viewing your creation history, assisting with content moderation, resolving technical issues, handling user requests, and fulfilling legal obligations. You may contact us at any time to request deletion of your data.

What We Categorically Do Not Do

To be unambiguous: VibeCut does not sell or rent your uploaded visual content, facial data, or any derived information to third parties. We do not apply this data to identity verification, authentication, surveillance, behavioral tracking, or advertising targeting. We do not use your uploads to construct biometric profiles. We do not feed your visual content or facial information into our own AI training pipelines without your explicit, prior consent.

Content Moderation & Safety

VibeCut employs automated screening systems to prevent the generation or display of content that violates our Terms of Service — including sexually explicit material, violence, or other harmful content. A visible Report function is available on every template and output page so you can flag anything that concerns you.

When our safety systems flag a generation request or output, the App may display an in-app notice, halt or withhold the result, and where applicable return any credits consumed by that request.

In addition to the information you actively provide, VibeCut automatically gathers certain technical and usage data as you interact with the App. This collection is always subject to any consent requirements applicable in your jurisdiction.

Device & Interaction Data

• Technical attributes of your device, including IP address, device identifier, operating system version, system language, and connection type;
• Interaction patterns within the App — which features you access, frequency of use, and session timing;
• Your App version and the regional storefront associated with your device.

Purchase & Subscription Records

• Subscription status and limited transaction metadata (such as tier and payment status) — your complete financial details are never accessible to us.

All billing and payment processing is conducted by Apple App Store or Google Play. We receive only what those platforms choose to forward; your full financial information does not reach VibeCut.

Advertising & Attribution Identifiers

• Device-level advertising identifiers — including Apple's IDFA or IDFV, or Google's Advertising ID (GAID) — collected only where your device settings and applicable regulations permit.

Ad tracking can be disabled through your device's settings at any time:

• iOS: Settings → Privacy & Security → Tracking
• Android: Settings → Privacy → Ads (or Google Settings → Ads → Delete advertising ID)

Opting out may still allow us to receive limited, aggregated, non-identifying attribution signals in some cases.

Diagnostics & Performance Data

• Event timestamps, crash reports, error traces, and performance metrics used to maintain stability, diagnose issues, and improve the Service over time.

Device Permissions

Some features rely on device-level permissions to function. The App may request access to:

• Your photo library or media storage, to let you select content for upload;
• Your device camera, for capturing photos or videos within the App;
• Push notifications, for service updates or subscription-related alerts;
• Ad tracking (e.g., IDFA on iOS or Advertising ID on Android), requested with your consent and used solely for attribution and measurement purposes.

All permissions can be changed or revoked at any time through your device settings. Disabling certain permissions may limit specific features within the App.

Your Personal Data is used for a defined and limited set of operational purposes: delivering and maintaining the Service and its features; executing your AI content generation requests; responding to and resolving support inquiries; monitoring and improving App performance, stability, and user experience; detecting and preventing fraud, abuse, and misuse of the Service; complying with our legal and regulatory obligations; enforcing our Terms of Service; and any other uses we disclose to you at the time of collection or for which we obtain your consent.

Where applicable law requires us to establish a legal basis for processing, we rely on one or more of the following: the performance of our contract with you to deliver the Service (contractual necessity); your consent, where specifically and explicitly sought; our legitimate interests in operating, securing, and improving VibeCut, subject to a careful balancing against your rights and freedoms; and compliance with a legal obligation we are required to meet.

We share Personal Data only when there is a lawful, necessary, and proportionate reason to do so — always within the boundaries of the purposes described in this Policy.

Service Providers

Operating VibeCut requires us to engage specialist third-party companies. These vendors receive only the data required to perform their specific function on our behalf, and each is contractually bound to uphold appropriate confidentiality and data security standards. The categories of service they cover include:

• App analytics and user behavior measurement;
• Advertising attribution and campaign performance tracking;
• Cloud infrastructure, hosting, and storage;
• Sign-in and user identity management;
• Crash reporting and App performance diagnostics;
• Customer support and user communications.

Legal Obligations

We may disclose Personal Data without prior notice when required or permitted in good faith by law, including in order to:

• Comply with applicable legislation, regulation, legal process, or lawful government requests;
• Enforce or defend our Terms of Service, policies, and contractual rights;
• Investigate or address security incidents, fraud, or technical vulnerabilities;
• Protect the rights, property, or safety of our users, our organization, or the public, as permitted by law.

Business Transfers

In the event that VibeCut undergoes a merger, acquisition, asset transfer, restructuring, or insolvency proceeding, Personal Data may be included among the assets involved. Where required by applicable law, we will take reasonable steps to provide notice and ensure continued protection of your data under any such transaction.

VibeCut and certain of our partners use cookies, mobile SDKs, and similar tracking technologies to understand how the App is used and to support performance measurement and marketing activities. These technologies broadly fall into three groups: those required for core App functionality; those that analyze usage and performance; and those used for marketing or attribution purposes — applied only where permitted by law and your consent.

Your device settings give you meaningful control over your tracking preferences. Disabling certain technologies may affect the functionality of some App features.

Protecting Your Data

VibeCut implements reasonable technical and organizational safeguards to protect Personal Data from unauthorized access, loss, misuse, alteration, or destruction. These measures include encryption in transit, access controls, and regular security assessments. That said, no data transmission or storage system can be guaranteed to be completely secure, and we are unable to make absolute warranties regarding the security of your information.

How Long We Keep Data

Personal Data is retained only for as long as is genuinely necessary — to provide the Service, comply with applicable legal obligations, resolve disputes, and uphold our agreements. The specific retention period for any category of data depends on what it is and the purpose for which it was collected. Upon account deletion or a verified erasure request, we will delete or de-identify your Personal Data unless legal obligations require otherwise.

Account Deletion

You may permanently delete your VibeCut account at any time from the Account settings within the App. Doing so triggers deletion of your associated Personal Data, subject to any legally required retention periods. Please note that deleting your account does not automatically cancel any active subscriptions managed through Apple App Store or Google Play — those must be cancelled separately through the respective platform.

VibeCut is intended solely for adult users and is not directed at or designed for anyone under the age of 18 (or the higher minimum age established by the laws of your jurisdiction). We do not knowingly solicit or collect Personal Data from minors.

If you are a parent or guardian and believe that your child has inadvertently submitted personal information to us, please contact us promptly — we will investigate and take appropriate steps to delete the information as quickly as possible.

In addition to protecting children's personal data, VibeCut has zero tolerance for the creation, processing, or distribution of any content that exploits or endangers minors. Our AI content partners are required to maintain safety filters for this purpose, and any suspected incidents of child exploitation may be reported to relevant authorities and child safety organizations including NCMEC and INHOPE. Detailed information about our child safety stance — including prohibited conduct, built-in protections, and reporting resources — is set out in our Terms of Service.

Delivering a capable AI creative application requires us to integrate a range of external SDKs, APIs, and specialist service providers (collectively, "Third-Party Partners"). These partners enable capabilities such as AI content generation, content safety screening, user authentication, payment verification, crash diagnostics, attribution measurement, and customer support.

Every partner is authorized to handle personal data only to the extent required to fulfill their designated function, and each is required to maintain appropriate confidentiality, security, and data protection standards consistent with this Policy.

The functional categories served by our current partners include:

• AI-driven content generation and processing;
• AI content safety and moderation screening;
• Cloud computing, hosting, and data storage;
• User authentication and identity management;
• App stability monitoring, crash reporting, and diagnostics;
• Usage analytics, performance measurement, and advertising attribution.

The services currently integrated into VibeCut are listed below. Each of these organizations operates under its own privacy practices, which are independent of VibeCut's control. We encourage you to review their policies directly. This list will be updated as our third-party integrations evolve.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable national data protection legislation govern how we process your Personal Data. These rules afford you a meaningful set of rights and protections.

Legal Bases for Processing

Every processing activity we carry out rests on at least one valid legal ground under the GDPR. The grounds we rely on, depending on the activity, include:

• Contractual performance — processing necessary to deliver the Service you have signed up for;
• Consent — where we have specifically requested and received your agreement;
• Legitimate interests — our reasonable business and operational interests, assessed against and balanced with your rights;
• Compliance with a legal obligation applicable to VibeCut.

Your Rights Under GDPR

Depending on your circumstances and the applicable law, you may be entitled to:

• Request access to the Personal Data we hold about you;
• Require correction of data that is inaccurate or incomplete;
• Request erasure of your Personal Data;
• Restrict or object to certain processing activities;
• Receive your data in a structured, commonly used, machine-readable format (data portability);
• Withdraw any consent you have previously given, at any time and without affecting processing that took place prior to withdrawal.

To exercise any of these rights, please reach out using the contact information provided at the end of this Policy. If you are dissatisfied with our response, you have the right to lodge a complaint with the data protection authority in your country.

If you reside in California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights with respect to how your Personal Data is collected, used, and shared.

Categories of Data We Collect

The categories of Personal Data we collect from California residents are those described throughout this Privacy Policy, processed for the same purposes outlined herein.

Your Rights as a California Resident

California law provides you with the right to:

• Know which categories of Personal Data we collect about you, and how that data is used, disclosed, and shared;
• Request deletion of Personal Data we have collected, subject to applicable legal exceptions;
• Request correction of inaccurate Personal Data;
• Opt out of any sale or sharing of your Personal Data for cross-context behavioral advertising, where applicable;
• Exercise all of the above rights free from discrimination or retaliation.

Opting Out of Data Sale or Sharing

To the extent required by California law, you may instruct us not to sell or share your Personal Data for targeted or cross-context behavioral advertising purposes.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require verification of both your identity and the agent's authority before processing any such request.

To make any CCPA or CPRA request, please contact us using the details provided in the final section of this Policy.

This Privacy Policy is a living document. We will update it as our practices evolve, as legal requirements change, or as the Service develops. For revisions that materially affect your rights or how we handle your data, we will provide appropriate notice — such as prominent in-app notifications or email communication — or seek your consent as required by law. The revised Policy becomes effective on the date published — we recommend checking back periodically to stay informed of any updates.

Questions about this Policy, or looking to exercise a privacy right? We're here to help — reach out anytime at help@thevibecut.com and we'll get back to you.