GDPR, CCPA, and most modern data laws give you specific rights over the information a company holds about you. Here are yours, in plain English, with the actual button to do them.
Last reviewed · April 30, 2026
Your rightsYou have the right to ask for a copy of all data we hold about you. We respond with a JSON export covering your profile, sent vibes, received vibes, reactions, hashed contacts, and any sessions logged in the past 90 days. How: in the app, Settings → Privacy → Export My Data. Email privacy@vibes.app if the in-app export fails.
You have the right to ask us to delete your account and all associated data. We honor every deletion request within 30 days; in practice it happens within 24 hours. How: in the app, Settings → Account → Delete Account. The vibes you sent to other people get anonymized (their copy stays, your name is replaced with "former friend"). Your sent and received history, your profile, your hashes — gone.
If anything we hold about you is incorrect, you can correct it. Most fields are user-editable in the app (display name, bio, profile picture). For anything else (account-level settings, billing if any), email privacy@vibes.app.
The export you can download under Right 01 is a machine-readable JSON file with every piece of data we hold about you. It's portable in the GDPR sense — bring it anywhere you want. (Practically speaking, no other music app accepts our export format yet, but the file is yours.)
You can ask us to stop processing your data for specific purposes (e.g., you want your account preserved but don't want us to compute the weekly recap). Most processing is essential to the app working at all, but where alternatives exist, we'll honor the request. Email privacy@vibes.app with what you want stopped.
GDPR and CCPA both give us up to 30 days to respond. We aim for 7. The in-app actions (export, delete) usually run in seconds; email-based requests get a real human reply within 2 business days.
If we need to verify your identity before honoring a request, we'll ask you to confirm via the email or phone associated with the account. We won't ask for additional documents unless we have reasonable suspicion of fraud.
If you're unhappy with how we handled a data request, you can lodge a complaint with your local data protection authority — for EU residents, that's the supervisory authority in your country; for UK residents, the ICO; for California residents, the California Privacy Protection Agency.
We'd much rather you tried us first. Direct email to privacy@vibes.app reaches a human who can fix things faster than any regulator can.
Tallies for every category of request appear in our quarterly transparency report.