Who we are and what this covers
Vibra Technologies Inc. (“Vibra”, “we”, “us”) makes Vibra, a tool that lets teams keep their sound and haptic design in one place and hand it to developers. Our customers are businesses, and their designers and developers use Vibra under the customer’s account. Vibra Technologies Inc. is a Delaware corporation at 1505 Hamiota Ridge, Milton, GA 30004, USA.
This policy covers:
- Our website at www.vibra.dev. getvibra.dev and vibra.dev redirect here.
- The Vibra web app at app.vibra.dev.
- The Vibra apps for iPhone and Android, which use the same account and servers as the web app.
Where these handle data differently, this policy says so. Questions about privacy go to adam@getvibra.dev.
What we collect
Account information
- Email address and password. You enter these to create an account or sign in. Our sign-in provider, WorkOS, checks your password. Vibra does not store it.
- Name, which you enter when you set up your profile, and an organization name if you create one.
- Profile picture, if you add one. In the mobile apps you pick it from your photo library; the apps do not use your camera. We store small copies of it with location and other hidden information removed, and delete the original you uploaded.
- Email verification codes and password reset requests.
- When you were last active in an organization.
Workspace content
What you and your team put into Vibra: projects, events, platforms, Interruption Matrix rules, asset libraries, and the sound and haptic files you upload, including their file names. We read a file’s length and format so it plays correctly. We do not read or keep other information embedded in audio files, such as artist or title tags.
We also keep a history of changes in your organization: who changed what and when, with the values before and after, so your team can review and undo work.
Invitations and access requests
When someone invites you, we receive your email address, who invited you and the role offered. When you ask a workspace Owner for access, we send them your name and email address.
Billing information
If your organization subscribes:
- Card details are entered into forms run by our payment provider, Stripe. They go straight to Stripe and never reach Vibra's servers.
- Billing name and address go to Stripe. We do not keep them in our own database.
- We keep your plan, subscription status, seat counts, any discount code, and your card's brand and last four digits.
Developer and integration use
If you create an API key or connect an AI tool through Vibra’s MCP server, we keep the key’s name and when it was last used, and a record of each call: which tool, the inputs sent to it, whether it succeeded and how long it took. We store only a scrambled (hashed) copy of the key itself.
Usage and analytics
- Web app. We record a fixed list of actions, such as creating a project or opening the Interruption Matrix, using PostHog. We do not record your screen, your keystrokes or every click. These events are linked to your email address and name, and one of them includes the name you type for an event. When someone opens a share link without signing in, we count the visit without a name or email. Vercel, our hosting provider, measures page views and loading speed.
- Mobile apps. No analytics, crash reporting or advertising tools.
- Website. No analytics.
Device and technical information
- Web. Our hosting provider receives standard request information, such as IP address, browser type and time, to serve pages. When you sign in, your IP address and browser information go to WorkOS for security checks. To stop repeated sign-in attempts, we keep a scrambled (hashed) form of your IP address and email for one hour.
- Mobile apps.Each request to our servers includes the app’s version number. The app checks whether your phone supports custom haptics and whether Low Power Mode or Battery Saver is on, so playback is accurate; those checks stay on your phone. The apps do not collect your location, contacts, advertising ID or any device identifier.
Communications
We send email about your account and workspace through Resend: invitations, notices that you were added to a workspace, access requests and password resets. We do not add tracking pixels to them. If you email us, we keep the message to answer it.
On the website
The website collects nothing about you unless you choose Log in or Sign up, which take you to WorkOS’s sign-in pages. If you try the sound demo with your own audio file, the file stays in your browser and is never sent to us.
How we use it
- To provide Vibra: create and run your account, sign you in, store and sync your workspace, show it to your team, and play your sounds and haptics. This is needed to perform our contract with you or your organization.
- To send account email and take payments, as part of that contract and to meet tax and accounting obligations.
- To keep Vibra secure and stop abuse, which is in our legitimate interest and yours.
- To understand which parts of Vibra are used so we can improve it, which is in our legitimate interest.
We do not sell your personal information, and we do not use it for advertising.
Content you create for your organization
Your organization controls its workspace content, and we process it to provide Vibra to that organization. If you use Vibra through your employer, your employer may be able to see, keep or delete what you added. We may refer requests about workspace content to the organization that controls it.
How long we keep it
- Account information and workspace content: while your account is open, and until we complete a deletion request.
- Hashed sign-in security records: 1 hour. API key usage counts: 1 hour. Live-update records: 24 hours. Mobile sign-in renewal records: up to 1 year.
- Invitation links expire after 7 days.
- Change history and integration call records: for as long as the organization exists, so the team can review its work.
- Billing records: as long as tax and accounting law requires.
- Data held by our service providers: under their own retention settings.
- On your phone: your sign-in is removed when you sign out. Downloaded sounds and recently played items are removed when you uninstall the app.
Your rights
Wherever you live, you can ask us for a copy of your personal information, or ask us to correct or delete it.
California residents have the right to know what personal information we collect, use and disclose; to delete and correct it; to opt out of its sale or sharing (we do not sell it); to limit use of sensitive personal information; and not to be treated differently for using these rights.
Residents of the EEA and UK have the right to access, correct and erase their data, to restrict or object to how we use it, to receive it in a portable format, to withdraw consent where we rely on it, and to complain to their data protection authority.
To make a request, email adam@getvibra.dev from the address on your account. We confirm the request by replying to that address before we act, and respond within the time the law allows.
Deleting your account
You can ask us to delete your Vibra account at any time. One account covers the web app and the Vibra apps for iPhone and Android, and this works whether or not you still have the app.
- Email adam@getvibra.devfrom the address on your account, with the subject “Delete my account”.
- We confirm the request with you by email, delete the account, and tell you when it is done.
- We delete your name, email address, profile picture and sign-in, and organizations where you were the only member, with their content and files.
- In organizations shared with others, the content you added stays for the rest of the team, and their change history continues to show your earlier changes.
- We keep billing records as the law requires. Copies held by our service providers are removed under their own retention settings.
Deleting the app from your phone does not delete your account.
Children
Vibra is a business tool and is not directed to children under 13, or under 16 in the EEA and UK. We do not knowingly collect their personal information. If we learn we have, we will delete it. Contact adam@getvibra.dev.
Where your data is stored
Vibra is based in the United States, and our database, file storage, hosting and analytics are in the United States. If you use Vibra from elsewhere, your information is transferred to and processed in the United States.
Security
We protect information with measures that include:
- Encryption in transit (HTTPS), including the connection to our database.
- Database rules that keep each organization's data separate from every other organization's.
- Sign-in through WorkOS; we never store passwords.
- Scrambled (hashed) storage of API keys, invitation links, share links and sign-in tokens.
- Limits on repeated sign-in attempts and API calls.
- Private file storage, reached only through links that expire within minutes.
- On phones, your sign-in is kept in secure storage tied to that device.
No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
Changes and contact
We will post any change on this page and update the effective date. If a change is significant, we will tell you by email or in the app before it takes effect.
Vibra Technologies Inc., 1505 Hamiota Ridge, Milton, GA 30004, USA. adam@getvibra.dev