Privacy Policy
This Privacy Policy explains how VYBR ("we", "us", "our") handles information when you use the VYBR Android app and this website (together, the "Service"). By using the Service you agree to the practices described here.
1. Information we collect
Account data (Firebase Authentication)
When you create an account or sign in, authentication is handled by Google Firebase Authentication. This may include your email address, a unique user identifier, and authentication metadata (such as sign-in timestamps). We do not store your password; it is managed by the authentication provider.
Synced data (Supabase)
If you have an account, your app preferences, playlists, favorites and related settings are stored and synced using Supabase so your experience is consistent across sessions and devices.
Listening data
To power personalized recommendations and your listening history, we process information about your activity in the app, such as tracks played, searches, favorites, and playback events. This data is associated with your account when you are signed in.
Offline downloads
When you download supported tracks for offline listening, the downloaded content and related records (for example, which items are available offline) are stored locally on your device. Offline downloads are intended for your private, personal use only.
Guest mode
If you use the Service in guest mode, you can listen without creating an account. In this mode we collect less personal information; certain data may be stored locally on your device to operate basic features, and is not synced to an account.
Device & technical data
We may process limited technical information (such as app version, device model, operating system version, and diagnostic/crash logs) to operate, secure and improve the Service.
2. How we use information
- To provide core features: playback, search, recommendations, playlists, favorites and history.
- To authenticate you and keep your account secure.
- To sync your preferences and library across sessions.
- To maintain, troubleshoot and improve the Service.
- To comply with legal obligations and enforce our Terms.
3. Third-party services
VYBR relies on third parties to operate. Their handling of data is governed by their own policies:
- Firebase Authentication (Google) — account sign-in and identity.
- Supabase — storage and syncing of preferences, playlists and listening data.
- Spotify — music catalogue metadata (titles, artists, albums, artwork) is retrieved via our UME backend. VYBR does not keep a duplicate catalogue.
- YouTube Music — audio streams are resolved through this source for playback.
We encourage you to review the privacy policies of these providers to understand how they process data.
4. Data sharing
We do not sell your personal information. We share data only with the service providers listed above as needed to operate the Service, or where required by law.
5. Data retention
We retain account and listening data for as long as your account is active or as needed to provide the Service, unless a longer retention period is required by law. Locally downloaded content remains on your device until you delete it or uninstall the app.
6. Children's privacy
The Service is not directed to children under the age required by your local law (for example, under 13, or the applicable minimum age in your region). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
7. Your rights & data deletion
Depending on your location, you may have rights to access, correct, export or delete your personal data. You can request deletion of your account and associated synced data by contacting us at the email on our Contact page. We will process verified requests in accordance with applicable law. You can also remove offline downloads at any time from within the app.
8. Security
We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International transfers
Our third-party providers may process data in countries other than your own. Where applicable, we rely on appropriate safeguards for such transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.
11. Contact us
If you have questions about this Privacy Policy or your data, reach us via our Contact page.