Privacy Policy

1. Information We Collect

User-Provided Information

In current versions of Vibememo, your journal entries are stored locally on your device in an encrypted database. Vibememo does not store or retain your journal entries on its servers. If you enable optional cloud backup, your backup is stored in the app data area of your personal Google Drive account.

AI-powered features are optional and only used when you choose to enable them. When AI features are used, the journal content sent to our AI provider, Google Vertex AI/Gemini, may include your journal entry, the prompt you are responding to, and relevant earlier journal entries with their prompts for context.

We do not use your journal entries to train AI models. Journal content is processed only to provide the requested AI feature.

Identifiers & Device Data

We collect specific technical identifiers to manage subscriptions, ensure security, and provide the service. This includes:

Local Service Metadata: We use local service metadata, such as AI usage counters and a random support identifier when needed, to provide app features and prevent abuse.
Firebase Installation IDs & Subscription IDs: To manage your subscription status via App Store providers.
Device Integrity Signals: (via Firebase App Check) To prevent abuse and protect the app.
Google Account Email: If you connect Google Drive backup, we may use your Google account email to show which account is connected in the app and to manage backup access.
Google Play Age Signals: We may use this API to verify that you meet the minimum age requirements to use the Service (18+) without requiring you to share your exact date of birth.
IP Address: IP addresses may be processed automatically by our service providers for security, abuse prevention, diagnostics, and service delivery.

Reported Content & Feedback

If you choose to report an AI response, only your selected report reason and the AI model description are sent to Firebase for safety review, abuse prevention, and tracking. Your journal entry and the AI response itself are not included in the report.

2. Use of Information

Providing Services & Quota Management

The app uses your data to display journal entries, generate statistics, and manage your subscription status (Free vs. Premium). We track the number of API requests you make to enforce subscription quotas.

Safety & Improvements

We use voluntarily reported feedback and reasons to monitor for AI safety issues and improve the quality of our AI features.

AI Features

When you use AI features, we use Google Vertex AI/Gemini to provide AI-powered reflections and insights. The journal content sent to our AI provider may include your journal entry, the prompt you are responding to, and relevant earlier journal entries with their prompts for context. This processing is automatic; Vibememo does not manually review or tag your private journal content. See "Third-Party Services" below for provider terms.

•

Paid Tier & Privacy: We use paid Google Vertex AI/Gemini services for AI features. Your data is not used to train AI models.

•

AI Data Handling: Google Cloud/Vertex AI terms, privacy policies, and security measures apply. If we change AI providers or this handling changes, we will update this policy.

3. Third-Party Services

App Store Providers

We use Google Play Store and Apple App Store services to handle payments and subscription management. We do not process or store your credit card information directly.

Third-Party AI Provider

Google Vertex AI/Gemini: We use this provider for the automatic AI processing needed to power Vibememo's optional AI features. AI processing is subject to Google's applicable terms, privacy policies, and security measures.

AI Data Handling: Your journal content is not used to train AI models. If we change AI providers or this handling changes, we will update this policy.

Google Firebase

We use Firebase for backend logic, service metadata, app configuration (Remote Config), security (App Check), and AI integration. Firebase is not used to store your private journal entries on Vibememo servers. Remote Config helps manage and update app features. The Firebase Terms of Service apply.

Google Drive

Optional Google Drive backup stores a copy of your Vibememo journal data and backup metadata in the app data area of your personal Google Drive account. Vibememo uses Google's app-data access for this feature, not general access to your Google Drive files.

Google API Services User Data Policy

Vibememo's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. International Data Transfers

We use third-party services (like Google Firebase and Google Vertex AI/Gemini) that may process your data globally. This means your data (such as AI prompts or service metadata) may be transferred to and processed in servers located outside your country of residence (e.g., in the United States), where data protection laws may differ from those in your jurisdiction. By using the App, you consent to this transfer, processing, and storage in accordance with applicable data protection laws.

5. Security

We prioritize the security of your data:

Local-First: In current versions of Vibememo, your journal entries are stored on your device in an encrypted database. The database key is generated on your device and protected by Android's secure key storage; Vibememo does not store the local database key in plaintext.
In-Transit Encryption: Data transmitted to our AI services or to your Google Drive for cloud backup is encrypted in transit (HTTPS/SSL).
Cloud Backup Storage: If you use Google Drive backup, your backup is stored in the app data area of your personal Google Drive account. In current versions of Vibememo, encrypted cloud backup is optional. If you turn it on, Vibememo encrypts the backup on your device before upload.
Backup Password: Your backup password is never sent to Vibememo's servers. When you set or use it, Vibememo may offer to save it to your device's password manager (such as Google Password Manager) through the system save prompt; that storage is optional and under your own account and control. An already-authorized device may keep the needed backup key locally, protected by Android's secure key storage, so automatic backups can work on that device. If you lose your backup password, Vibememo cannot recover the encrypted cloud backup.
Unencrypted Cloud Backups: If you enable Google Drive backup but do not turn on encrypted backup, Vibememo uploads the backup to Google Drive without adding its own encryption. You are responsible for the overall security of your Google account.
Manual Backups: If you perform a manual backup or export of your data within the app, the file is saved locally to your device's Downloads folder as a standard file. You are solely responsible for securing this file and ensuring it is not accessed by unauthorized individuals or other apps on your device.

6. Data Retention

Local Data (Vibememo): In current versions of Vibememo, your data is stored locally in an encrypted database and retained as long as the app is installed on your device.

AI Provider Data: AI data is processed only to provide the requested feature and is subject to the AI provider's applicable terms, privacy policies, and security measures.

Google Drive Backup: If you enable cloud backup, your backup is stored in the app data area of your personal Google Drive account. To delete cloud backup data, see the Data Deletion section below.

7. Data Deletion

Journal Entries: You can delete specific journal entries directly in the app.
Local Data: You can delete local app data from within Vibememo. Uninstalling Vibememo also removes the local data stored on your device.
Cloud Backup: Delete your cloud backup from within Vibememo — this also turns off automatic backup. Uninstalling the app does not delete the cloud backup.
Revoking Drive Access (recommended): You can also remove the backup in Google Drive settings under Manage Apps; disconnecting Vibememo there revokes its access to your Google Drive entirely, so no new backup can be created.
Manual Backups: Any manual backup or export you create is saved outside Vibememo and remains your responsibility to delete.

8. Your Rights

Export: You can export your journal data directly from the app anytime.
Deletion: You can delete entries, local app data, and cloud backups as described in the Data Deletion section above.
Correction: You can edit or correct your journal content directly within the app.

9. Age Requirements & Children's Privacy

Our Service is strictly directed to individuals who are eighteen (18) years of age or older. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, please do not use or access the Service.

10. GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. It is available directly in the app via Export Data.
The right to rectification – You have the right to correct any information you believe is inaccurate directly within the app.
The right to erasure – You have the right to delete your data using the options described in the Data Deletion section above.
The right to restrict processing – You have the right to request that we restrict processing. AI analysis is optional and can be disabled in Settings. If disabled, new entries are stored locally without AI analysis.
The right to data portability – You can export your data in JSON format from the settings.

Sensitive Journal Content: Your journal entries may include sensitive personal information. Vibememo keeps this content local unless you choose to use AI features or cloud backup. By enabling those features, you consent to the processing described in this policy.

11. CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business disclose the categories and specific pieces of personal data collected.
Request that a business delete any personal data about the consumer.
Request that a business not sell the consumer's personal data.

We do not sell your personal information. Since we do not maintain a central user database, you can exercise these rights directly by managing the data on your device and any cloud backup you enabled.

12. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time to reflect changes in our practices or services. Please review this page periodically. Your continued use of the Services after the effectiveness of such changes will constitute acceptance of and agreement to any such changes.