Privacy policy.
Vibecam keeps things minimal. An account is optional — you can use the app tied to an anonymous device id. If you choose to sign in with Google or Apple, we receive a few basic account details to sync your deck across devices (see Accounts & sign-in). To generate a reading, your photo is sent to an AI model. To power your deck, battles, and challenges, captured photos are stored on our servers. The app shows ads via Google AdMob, which collects limited device data as described below.
How the photo is used
When you tap to read, the captured photo is uploaded to our backend and forwarded to Google's Gemini model via OpenRouter to produce the reading. The photo is not used to train any model. Transmission is over HTTPS.
Where your photos are stored
To give you a deck that syncs across your devices and to power battles and challenges, captured photos are stored on our servers (Amazon S3) and shown back to you — and, in a battle or challenge, to the opponent you're playing against. Stored photos are tied to your device id, or to your account if you choose to sign in. Signing in is optional and only used to sync your deck across devices. Photos are not sold and not used to train any model.
Accounts & sign-in
Signing in is optional — the app works fully without it. If you sign in with Google or Apple, we receive your name, email address, and (where available) profile photo from that provider, plus a stable account identifier. We use these only to create your account, link your installs, and sync your deck, scores, battles, and challenges across your devices. With Sign in with Appleyou can use “Hide My Email,” in which case we only ever see Apple's private relay address. Authentication is handled by Google Firebase Authentication. We don't get your provider password, and we don't post anything to your Google or Apple account. Your account data is not sold and not used to train any model. You can sign out any time, and request account deletion as described under Your rights.
Your handle
The display handle (username) you choose is public — it appears on leaderboards and on cards you share or play in battles and challenges. Don't use a handle that reveals information you'd rather keep private.
What we don't collect
We don't collect names, emails, contact lists, precise location, motion sensors, or microphone data unless you choose to sign in and provide them. We don't build advertising profiles of you. Some device data is collected by our ads provider — see below.
Your deck
Your deck syncs from our servers so your cards follow you across devices. Sign in (optional) to keep your deck if you switch phones; without signing in, your deck is tied to your current device id.
Advertising
The app displays ads through Google AdMob. To serve ads, AdMob and its partners may collect device identifiers (such as IDFA on iOS or Advertising ID on Android), IP address, coarse location derived from IP, and basic app usage data. This data is handled under Google's privacy policy.
Tracking across apps and websites
On iOS, the app shows Apple's App Tracking Transparency prompt before any tracking for advertising purposes. If you decline, ads still appear but are non-personalized. Third-party ad partners may otherwise track activity across apps and websites to serve ads and measure performance.
Third-party services
We use third-party services for advertising (Google AdMob), AI inference (OpenRouter, Google Gemini), authentication (Google Firebase Authentication, plus Sign in with Apple), database and account storage (Google Firestore), photo storage (Amazon Web Services S3), push notifications (Firebase Cloud Messaging), and analytics and crash reporting (Firebase / Crashlytics). These providers process data under their own privacy policies. We don't control their practices.
Data retention
Captured photos are kept on our servers while they're part of your deck or an active battle or challenge. You can delete a card to remove its photo, and you can request deletion of all your data at any time (see Your rights). If you sign in, your account details and synced deck are kept until you delete your account, after which they're removed from our systems. Crash logs are kept up to 90 days. Data held by ad and analytics partners is retained per their own policies.
Deleting your account & data
If you signed in, you can permanently delete your account at any time from Settings → Delete accountin the app. This removes your account, your synced deck, and every stored photo tied to it — across all your linked devices — from our servers, and deletes your sign-in record. It cannot be undone. You can also request deletion by email (below). Anonymous (signed-out) data tied to a device id is removed when you delete the relevant cards or on request.
Your rights
You can request access to, correction of, or deletion of any data associated with you — including your stored photos and deck — by emailing developer@pklabs.in. Include your device id or, if you signed in, your account, so we can find your data. You may also reset your advertising ID at any time in your device settings.
Children's privacy
Vibecam is not directed to children under 13, and we don't knowingly collect data from them. If you believe a child has provided data, contact us and we'll remove any related data.
Crash reports
If the app crashes, an anonymized stack trace is sent to our developer console. It does not include any image data or identifiers. You can disable this in Settings.
Contact
Questions: developer@pklabs.in.