Privacy Policy

Effective 1 October 2026

In short: VibeVault is a desktop app. Your workspace stays on your computer. We run no servers, collect no analytics and never receive your data. If you turn on Google Drive backups, the app stores encrypted backup files in your own Drive using the narrowest permission Google offers.

Who we are

VibeVault (“the app”, “we”) is a Windows desktop application for organising your development and AI tools and tracking your subscriptions. Contact: abdelrahmanhesham1100@gmail.com.

Data the app keeps on your computer

Everything you enter stays in a local database in your Windows user profile, for example:

• tools, links, file locations, launch profiles, categories, tags, icons and screenshots you add;
• subscriptions, prices, payments, renewal dates and notes;
• app settings, and, if you set one, a hash of your app-lock password.

This data is never sent to us. You can move, export or delete it at any time from the app or by deleting its data folder.

Google user data

Google Drive backups are optional and off until you connect your Google account. When you do:

• Permission requested: https://www.googleapis.com/auth/drive.file only. It lets the app see and manage only files the app itself creates in your Drive. The app cannot see, read or change any other file in your Drive.
• What is accessed: the backup files the app creates in its own Drive folder, and your account's email address (shown in the app so you know which account is connected).
• How it is used: only to upload, list, download and delete your own VibeVault backups when you ask for it or on the schedule you choose.
• Encryption: every backup is encrypted on your computer with a recovery key that only you hold, before it is uploaded. Neither we nor Google can read the contents.
• Storage of credentials: the sign-in token Google issues is stored only on your computer, encrypted with Windows' data protection for your user account. It is never sent to us.
• Sharing: Google user data is not shared with, sold to, or transferred to anyone. It is not used for advertising and not used to train AI or machine-learning models.
• Revoking access: use “Disconnect” in Settings › Backup, or remove VibeVault at myaccount.google.com/permissions. Backup files you no longer want can be deleted from your Drive at any time.

VibeVault's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Other network requests

• Exchange rates: to convert subscription prices, the app asks the public Frankfurter service (api.frankfurter.dev) for currency rates. The request contains only currency codes and dates, nothing about you or your subscriptions.
• Links you open: websites and programs you launch from the app are opened by your browser or Windows, under their own privacy policies.

What we do not do

• No accounts with us, no analytics, no telemetry, no advertising, no cookies.
• No selling or sharing of personal data.

This website

This site is static and sets no cookies. It is hosted on Cloudflare, which may keep standard technical logs (such as IP address) to deliver and protect the site.

Children

VibeVault is not directed at children under 13.

Changes

If this policy changes, the new version will be published on this page with a new effective date.

Contact

Questions or requests: abdelrahmanhesham1100@gmail.com.