Privacy Policy

Last updated: October 31, 2025

ByeBadVibes (“we”, “us”) is operated by JYT STUDIO LTD, registered in United Kingdom. This policy explains how we collect, use, and protect personal data when you access https://www.byebadvibes.com and our related apps in line with UK GDPR and the Data Protection Act 2018.

Data controller

• JYT STUDIO LTD
• 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom
• Privacy contact: contact@byebadvibes.com

What we collect

• Account data: email address and authentication data supplied via Supabase when you create an account or sign in with Google.
• Release content: thoughts you enter, the selected ritual method, and timestamps. Stored locally by default; synced to our database only if you enable cloud history.
• Telemetry & diagnostics: event logs (e.g. feature usage, errors) captured after you grant analytics consent.
• Billing data: Stripe handles payment information. We receive transaction metadata (plan type, status) but never store full card details.
• Device data: IP address, browser/OS, and security headers for abuse prevention and to deliver the Service reliably.
• Cookies & local storage: essential cookies maintain your session, remember preferences, and protect against CSRF. Analytics/marketing cookies only run if you opt in via the cookie banner.

How we use data

• Run the Service, including syncing releases across devices and providing customer support.
• Process payments, manage subscriptions, and issue refunds.
• Improve stability and user experience through aggregated analytics (when consented).
• Maintain security, prevent fraud, and comply with legal obligations.

Legal bases

• Contract: delivering the features you request, such as saving releases or providing Pro access.
• Legitimate interests: safeguarding the platform, debugging issues, and understanding core feature usage.
• Consent: enabling optional analytics, marketing messages, or cloud sync (you can withdraw consent at any time).

Processors & third parties

• Vercel – hosting, CDN, and server logs (EU/US with SCCs).
• Supabase – managed Postgres, authentication, and encrypted storage for cloud releases (EU regions available).
• Stripe – payment processing and billing portal (data stored in Stripe’s PCI-compliant environment).
• Resend – transactional email delivery.
• PostHog – optional analytics (EU data residency available); we load it only with your consent.

We only share the minimum necessary data with each provider and have data processing agreements in place where required.

International transfers

Data may be processed outside the UK/EU when required by our processors. We rely on standard contractual clauses or equivalent safeguards to protect these transfers.

Retention

• On-device data: remains until you clear it or uninstall the app.
• Cloud releases: retained until you delete them, request account deletion, or your subscription lapses.
• Billing records: stored for at least 6 years to comply with tax and accounting law.
• Telemetry: anonymised or deleted within 12 months.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing. Email contact@byebadvibes.com and we will respond within the statutory timeframe. If you are unsatisfied, you can escalate to the UK Information Commissioner’s Office (ICO).

Data deletion & refunds

Use the in-app export tools for a copy of your data. To delete your account or escrow encryption keys, contact contact@byebadvibes.com. For billing questions or refund requests, reach out via contact@byebadvibes.com or see our Refunds page.

Children

The Service is designed for users aged 13+. If we learn that a user under 13 has enabled cloud sync, we will delete the account on request.

Security

We use TLS, per-user encryption keys for cloud releases, role-based access controls, and logging to protect data. No system is 100% secure, so please avoid uploading highly sensitive personal data.

Changes to this policy

We may update this policy. Material changes will be highlighted in-app or by email. Continued use of the Service means you accept the updated policy.

Contact

For privacy questions email contact@byebadvibes.com.

This summary is provided for transparency and does not replace professional legal advice.