Privacy Policy

1. Information We Collect

2. Use of Information

3. Third-Party Services

4. International Data Transfers

We use third-party services (like Google Firebase and Google Vertex AI/Gemini) that may process your data globally. This means your data (such as AI prompts or service metadata) may be transferred to and processed in servers located outside your country of residence (e.g., in the United States), where data protection laws may differ from those in your jurisdiction. Where personal data is transferred outside the EU/EEA, our providers rely on recognized safeguards such as an adequacy decision, certification under the EU–U.S. Data Privacy Framework, and/or Standard Contractual Clauses. Details are available in the respective provider's privacy documentation.

5. Security

We prioritize the security of your data:

• Local-First: In current versions of Vibememo, your journal entries are stored on your device in an encrypted database. The database key is generated on your device and protected by Android's secure key storage; Vibememo does not store the local database key in plaintext.
• Logging & Data Minimization: We design the Service so that your journal entries are not intentionally written to our server logs. Our systems are designed to record technical information — such as timestamps, error codes, and request identifiers — rather than the content of your entries. If entry content is ever captured in a log by mistake, we work to remove it and limit how long such logs are retained. Third-party AI and infrastructure providers may separately retain their own technical logs under their own policies, as described elsewhere in this Policy.
• In-Transit Encryption: Data transmitted to our AI services or to your Google Drive for cloud backup is encrypted in transit (HTTPS/SSL).
• Cloud Backup Storage: If you use Google Drive backup, your backup is stored in the app data area of your personal Google Drive account. In current versions of Vibememo, encrypted cloud backup is optional. If you turn it on, Vibememo encrypts the backup on your device before upload.
• Backup Password: Vibememo is designed so that your backup password is not sent to its servers. When you set or use it, Vibememo may offer to save it to your device's password manager (such as Google Password Manager) through the system save prompt; that storage is optional and under your own account and control. An already-authorized device may keep the needed backup key locally, protected by Android's secure key storage, so automatic backups can work on that device. If you lose your backup password, Vibememo cannot recover the encrypted cloud backup.
• Unencrypted Cloud Backups: If you enable Google Drive backup but do not turn on encrypted backup, Vibememo uploads the backup to Google Drive without adding its own encryption. You are responsible for the overall security of your Google account.
• Manual Backups: If you perform a manual backup or export of your data within the app, the file is saved locally to your device's Downloads folder as a standard file. You are solely responsible for securing this file and ensuring it is not accessed by unauthorized individuals or other apps on your device.

No Absolute Security: No method of electronic storage or transmission is completely secure. While we and our service providers apply the safeguards described above, we cannot guarantee absolute security.

Breach Notification: If we become aware of a personal data breach affecting you, we will notify you and the competent supervisory authority where and as required by applicable law (including Articles 33 and 34 GDPR).

6. Data Retention

Local Data (Vibememo): In current versions of Vibememo, your data is stored locally in an encrypted database and retained as long as the app is installed on your device.

AI Provider Data: AI data is processed to provide the requested feature and is subject to the AI provider's applicable terms, privacy policies, and security measures. The provider may temporarily retain operational logs and diagnostics under its own retention practices.

Service Metadata (Firebase): Technical identifiers such as installation IDs, subscription status, and voluntarily reported feedback are retained for as long as needed to provide the Service, manage subscriptions, and prevent abuse, and are subject to Firebase's retention practices.

Google Drive Backup: If you enable cloud backup, your backup is stored in the app data area of your personal Google Drive account. To delete cloud backup data, see the Data Deletion section below.

7. Data Deletion

• Journal Entries: You can delete specific journal entries directly in the app.
• Local Data: You can delete local app data from within Vibememo. Uninstalling Vibememo also removes the local data stored on your device.
• Cloud Backup: Delete your cloud backup from within Vibememo — this also turns off automatic backup. Uninstalling the app does not delete the cloud backup.
• Revoking Drive Access (recommended): You can also remove the backup in Google Drive settings under Manage Apps; disconnecting Vibememo there revokes its access to your Google Drive, which stops Vibememo from creating new backups.
• Manual Backups: Any manual backup or export you create is saved outside Vibememo and remains your responsibility to delete.

8. Age Requirements & Children's Privacy

Our Service is strictly directed to individuals who are eighteen (18) years of age or older. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, please do not use or access the Service.

9. GDPR Data Protection Rights

If you are in the European Union or European Economic Area, the GDPR gives you the following rights (we extend these self-service options to all users where possible):

• The right to access – You have the right to request copies of your personal data. It is available directly in the app via Export Data.
• The right to rectification – You have the right to correct any information you believe is inaccurate directly within the app.
• The right to erasure – You have the right to delete your data using the options described in the Data Deletion section above.
• The right to restrict processing – You have the right to request that we restrict processing. AI analysis is optional and can be disabled in Settings. If disabled, new entries are stored locally without AI analysis.
• The right to data portability – You can export your data in JSON format from the settings.
• The right to withdraw consent – AI features and cloud backup are based on your consent and can be turned off in Settings at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• The right to lodge a complaint – You have the right to complain to a data protection supervisory authority, in particular in the EU/EEA member state of your habitual residence.

Legal Bases: We process journal content for AI features and cloud backup on the basis of your consent (Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR); subscription and service metadata on the basis of performance of contract (Art. 6(1)(b) GDPR); and security, abuse prevention, and diagnostics on the basis of our legitimate interests (Art. 6(1)(f) GDPR).

Sensitive Journal Content: Your journal entries may include sensitive personal information. Vibememo keeps this content local unless you choose to use AI features or cloud backup. By enabling those features, you consent to the processing described in this policy.

10. California & Do Not Sell

We do not sell or share your personal information for advertising purposes. Since we do not maintain a central user database, you can access, correct, and delete your data directly by managing it on your device and any cloud backup you enabled, as described above.

11. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time to reflect changes in our practices or services. Please review this page periodically. Your continued use of the Services after the effectiveness of such changes will constitute acceptance of and agreement to any such changes.