Privacy Policy

Vybz is published by [[Entity name]], a [[legal form]] registered under SIREN number [[000 000 000]], with its registered office at [[full address]] ("we"). We are the controller of the personal data described here, within the meaning of the General Data Protection Regulation (GDPR) and the French Data Protection Act.

For any question about your data, or to exercise your rights, write to [[privacy@vybz.site]]. We reply within one month.

Your account: your email address and profile picture (provided by our sign-in service, Clerk), a username, your timezone (followed automatically from your device unless you pick one), the hour you want reminders at, and — if you fill them in — your date of birth and phone number. We also note when the account was created and when it was last active.

Your content: life lines, moments (title, description, date, place, coordinates, tags, mood rating, the fields of each moment type), the photos and PDF documents you attach, your comments, your likes, your Flows. Photo metadata (EXIF) is stripped before upload: only the GPS position, if the photo has one and you keep it, is carried onto the moment.

Your health data: a medical moment records a prescription — medicines, doses, duration. That is health data under article 9 of the GDPR. We record it only with your explicit consent, asked the first time you pick that moment type, and you can withdraw it at any time from Account → Privacy & data. Withdrawing stops new ones being created; those already recorded stay until you delete them.

Your location: only when you ask for it — by pressing the locate button, choosing a point on the map, or keeping a photo's position. We never track your location in the background.

Technical data: if you turn on notifications, the notification channel address your browser issues and a description of the device (user agent). Your device settings, the way you have arranged your timeline, your photo and map caches, and any moments waiting to be sent never leave your device. That copy stays there after you sign out, so that signing back in on your own phone does not download your whole library again: it is erased as soon as another account signs in on this browser, and when you delete yours. See “Cookies and local storage”.

What we do not record: our server keeps no log of IP addresses or requests; we do no advertising tracking; your photos are analysed only on your device, and only to frame their thumbnails. Audience measurement happens only with your agreement (see "Cookies").

To provide the service you asked for — showing your timeline, syncing it between your devices, sending your reminders, showing a moment to the people you share it with: the performance of the contract between us (GDPR article 6.1.b).

With your consent (article 6.1.a, and 9.2.a for health data): audience measurement and the recording of health data. Each is withdrawn as simply as it is given.

For the security of the service, the prevention of abuse and backups: our legitimate interest (article 6.1.f) in running a reliable service — an interest that does not override yours, since it consists of protecting your data.

To meet a legal obligation, when an authority requires it in the forms the law provides.

You, and the people you choose to share a moment or a Flow with. Nobody else sees your content — not even us, except to fix a technical problem you report to us.

Our processors, who handle data on our behalf and under contract: Clerk, Inc. (United States) for sign-in — your email, your password or social logins, your profile picture; Fly.io, Inc. for hosting the servers and the database, on machines in Frankfurt (Germany); Tigris Data, Inc. for storing photos and documents, also in Frankfurt; Google Ireland Ltd for Google Analytics, only if you accepted it.

Third-party services the app calls from your device: the OpenStreetMap Foundation, which receives your IP address and the coordinates or place you search for whenever you open a map, look up a place or download maps for offline use; and the notification services of Apple, Google and Mozilla, which deliver your notifications and see their content (a moment's title, the name of whoever shared it).

We do not sell or rent your data to anyone, and pass none of it on for advertising.

Your content — moments, photos, documents, database, backups — is stored in Germany. Two processors are based in the United States: Clerk (sign-in) and Google (audience measurement, with your agreement). These transfers are covered by the European Commission's standard contractual clauses and, for companies certified under it, the EU–US Data Privacy Framework.

Your account and content: for as long as your account exists. A life timeline is meant to last, and we never delete an account for inactivity. When you delete your account everything is erased immediately — moments, photos, documents, comments, the login. Photos you added to other people's moments stay with them.

Backups: a daily copy of the database is kept for 30 days, then erased. It is the only trace that outlives an account deletion, and it disappears on its own within that time.

The rest clears itself: invitation links, 30 days after they expire; notifications, 6 months after being read (12 months if never read); the record of reminders sent, 90 days; a device's notification registration, after 6 months without you opening the app; your cookie choice, 6 months, in your browser.

Access and portability: "Download my data", in Account → Privacy & data, hands you everything your account holds as one machine-readable file.

Rectification: your account details are edited in Account; each moment is edited on its own page.

Erasure: "Delete my account", in the same place, erases everything immediately. You can also delete a moment, a photo or a document one at a time.

Withdrawing consent: health-data consent is withdrawn in Account → Privacy & data; cookie consent through the "Cookies" link in the footer.

Objection and restriction: to object to processing based on our legitimate interest, or to ask that it be restricted, write to [[privacy@vybz.site]].

Complaints: if you believe your rights are not being respected, you can lodge a complaint with the French supervisory authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr — or with the authority of your own country.

Everything is private by default. A moment is visible only to you until you share it, and sharing is done moment by moment, with named contacts or through a single-use invitation link that lasts 30 days.

Nothing is ever listed publicly. A shared link opens only for whoever holds it, and you can revoke access at any time from the moment's page.

People you share a moment with can add their own photos and comments to it. What you share also concerns the people who appear in your photos: make sure you have their agreement.

Strictly necessary: the session cookies Clerk sets to keep you signed in, and your browser's local storage (IndexedDB, caches), which lets the app work without a connection and remember your device settings. These need no consent. This browser holds one account's copy at a time: signing out does not erase it, but another account signing in erases it in full before opening its own, and deleting your account erases it too. You can reclaim the space the photos take at any time by switching off “Keep photos on this device”, and the maps with “Keep maps on this device”.

Audience measurement, only with your agreement: Google Analytics, which sets "_ga" cookies and sends Google the pages you visit on Vybz, your language and whether you are signed in — never who you are or what your moments contain. Nothing is loaded until you accept. Your choice stands for 6 months and can be changed at any time through the "Cookies" link in the footer.

No advertising cookies, no social-network trackers.

Vybz is for people aged 15 and over, the age from which a minor can consent alone to the processing of their data in France. Below that, signing up requires the agreement of a parent or guardian. If you believe an account was created in breach of this rule, write to us and we will delete it.

All communication is encrypted (HTTPS). Sign-in is handled by Clerk, which never passes us your password. Links to your photos are signed and expire, so a copied address stops working. Server access is limited to the publisher. In the event of a data breach that puts you at risk, we will inform you and notify the CNIL within the time the GDPR sets.

We update this policy as the service changes. The date at the top marks the latest version; a significant change will be flagged in the app.