Privacy Policy
This Privacy Policy explains what data Graphin Vibes ("we", "us") collects through the Graphin Vibes iOS application, how it is used, and your rights.
1. Who we are
Graphin Vibes is a private limited company registered in England & Wales. Our registered office is . For data-protection enquiries, contact us at horizonshift001@gmail.com.
2. Data we collect
- Account data: your name, email address, and phone number, provided at sign-up or later through the profile editor.
- Authentication identifiers: your Firebase user ID, and — if you sign in with Apple or Google — the OAuth identifier from that provider.
- Content you create: messages you send in the app, comments you leave on deliverables, and new project or campaign requests you submit.
- Device data (minimal): iOS version and app version in crash reports we may gather to diagnose bugs. No advertising identifier (IDFA) is requested or stored.
3. How we use it
- To provide the service and show you your own projects, deliverables, brand assets, and campaigns.
- To let you communicate with the team members and collaborators you invite.
- To verify your identity on each request (we check your Firebase ID token against Google's public keys).
- To improve the product through aggregate, anonymised crash and usage telemetry.
4. Where it's stored
Data is hosted on Google Cloud Platform (Firebase Auth and Cloud Run / Cloud SQL services located in European Union data centres). All traffic between the app and our servers uses TLS encryption. Sensitive session tokens on your device are stored in the iOS Keychain with kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly protection.
5. Who we share it with
We do not sell your data. We share it only with the subprocessors required to operate the service:
- Google LLC — Firebase Authentication, Cloud Run, Cloud SQL, Cloud Logging (data-processing agreement in place).
If you use Sign in with Apple or Continue with Google, those providers also process the authentication step under their own privacy terms.
6. How long we keep it
Personal data is retained while your account is active. You can delete your account at any time from the app (Profile → Danger Zone → Delete Account). Deletion is immediate and permanent — we remove your profile, projects, campaigns, messages, and uploaded content from our servers and delete your Firebase Authentication record. Anonymised aggregate analytics that cannot be tied back to you may be retained.
7. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Port your data to another service in a common format
- Withdraw consent where processing is based on it
- Lodge a complaint with the UK Information Commissioner's Office
Email horizonshift001@gmail.com to exercise any of these rights. We respond within 30 days.
8. Tracking and advertising
The app does not use third-party advertising, analytics, or tracking SDKs. It does not request permission under App Tracking Transparency. We do not set advertising identifiers or sell data to advertisers.
9. Children
The app is intended for users aged 13 and over and is not directed to children under 13. We do not knowingly collect data from children under that age.
10. Changes to this policy
If we make material changes, we'll notify you through the app and by email at least 30 days before they take effect. The date below reflects the latest revision.