Privacy Policy — VibroAcoustics App

Who is responsible

VibroAcoustics Copenhagen ApS, Denmark, is the data controller for the information described below.

Contact: info@vibroacoustics.dk

What we collect

Your account. When you sign up we store your email address and a securely hashed password. You can optionally add a display name and a profile picture.

What you tell us you are interested in. The categories you pick during onboarding, so the “For You” row on your home screen is useful rather than random.

How you use the app. For each listening session we record which track you played, when it started and ended, how long it lasted, and the sleep timer you chose. If you rate a session afterwards, we store that rating. We also store your favourites, your playlists, your progress through guided programs, and where you stopped in a track so you can continue later.

Your country. Inferred from your device’s language and region settings. We use it to understand where the catalog is being listened to. We do not collect your location, and the app never asks for location access.

Messages you send us. If you write to us from the About screen, we store the message and your email address so we can reply.

Your subscription status. Whether your access is active and until when, and whether it came from a subscription or from a code that shipped with a ViBoard.

What we do not collect

We do not use advertising, third-party analytics or tracking SDKs. We do not build advertising profiles, and we do not sell or rent your data to anyone.

We never receive your payment details. Purchases are handled entirely by Apple or Google, who tell us only whether a subscription is active.

The app does not record audio and does not use your microphone. The Android build declares an audio permission required by an audio-processing library, but nothing in the app records.

If you add a profile picture, the app asks for access to your photo library at that moment, and only for the picture you choose.

Why we process this, and on what basis

• To provide the service — your account, your library, your playback position and your subscription access. Without this data the app cannot work. (Legal basis: performance of a contract.)

• To improve the catalog — understanding which sessions are used, for how long, and how they are rated tells us what to produce next. (Legal basis: legitimate interest.)

• To answer you — when you write to us. (Legal basis: legitimate interest.)

• To meet legal obligations — bookkeeping and tax records related to subscriptions. (Legal basis: legal obligation.)

Who else handles your data

• Supabase — hosts our database, file storage and authentication.

• RevenueCat — validates purchases with the app stores and tells our backend whether your subscription is active.

• Apple and Google — process payments and manage subscriptions. Their own privacy policies apply to that part.

These companies act on our instructions and only for the purposes above.

Where your data is stored

Our database and files are hosted in the European Union. Some of the providers above may process data outside the EU; when they do, the transfer is covered by the European Commission’s Standard Contractual Clauses.

How long we keep it

Your account data stays while your account exists. Listening history is kept while your account exists, because it powers your recents and your programs. Messages you send us are kept until they are handled, and are deleted with your account.

When you delete your account, everything tied to it is deleted — profile, listening history, favourites, playlists and messages. You can do this yourself in the app, under Profile → Delete account. It takes effect immediately and cannot be undone.

Records we must keep for accounting purposes are retained for as long as Danish law requires, regardless of account deletion.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on legitimate interest. You can also ask for your data in a portable format.

Write to info@vibroacoustics.dk and we will respond within one month.

If you believe we are handling your data improperly, you can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

Children

The app is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will delete it.

Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. Significant changes will be announced in the app.