Privacy Policy
Last updated June 2, 2026
Vibo is a maker-first learning app for kids, teens, and families. We are committed to collecting the minimum data needed to run the app and to being transparent about it — especially because Vibo is used by children. This policy explains what we collect, why, who we share it with, and the rights you and your child have.
Information we collect
- Email and User ID — when you create an account, your email and a unique account identifier are stored by our backend (Supabase) to authenticate you and save your learning progress.
- Name — if you sign in with a third-party provider (e.g. Google or Apple), the display name on that profile may be used to personalize your account.
- Coarse Location — only if you choose to use the optional real-world map feature. An approximate location is sent once, on demand, to an open mapping service (OpenStreetMap / Overpass) to show nearby points on the map. It is used in the moment and is not stored on our servers.
- Usage Data — lessons started and completed, courses and battles played, and similar in-app activity. We use this to track learning progress, award energy and rewards, and improve the app.
- Push Tokens — if you enable notifications, a device push token (via Firebase Cloud Messaging) is stored so we can send reminders and updates. You can turn notifications off at any time in your device settings.
- Search history — for players 13 and older, course search queries may be retained to improve search. For users under 13, search queries are redacted (see "Children's privacy" below).
How we use your information
We use the data above to provide and operate the app: to sign you in, save and sync your progress across devices, power the learning and game features (energy, battles, the Multiple Intelligences radar), send notifications you opt into, and keep the service secure. We do not sell your personal data, and we do not use it for third-party advertising.
Third parties we share data with
- Supabase — our backend and authentication provider. It stores your account, progress, and the usage data described above.
- Stripe — our payments processor for subscriptions and purchases. Card and payment details are handled directly by Stripe and are never stored by Vibo.
- Firebase Cloud Messaging — delivers push notifications when you enable them.
- OpenStreetMap / Overpass — receives an approximate location only when you actively use the map feature, to return nearby map data.
- OpenRouter — receives what you type when you ask the in-lesson tutor a question, or when you describe a course you want generated. OpenRouter passes the request to the model answering it: today those are models from Google and Anthropic. Your question is sent as written. We do not attach your name, your profile, or your account to it.
- fal.ai — receives the description you write when you generate a picture, and the picture you started from if you are editing one. fal.ai runs the image models behind this, from Black Forest Labs, Google, and OpenAI. As above, nothing identifying you is attached.
Because the tutor sends your words exactly as you write them, please don't type your full name, your address, or your school into it. It doesn't need them to help you, and we can't take them back out once they've been sent.
What these companies do with the text after they receive it — how long they keep it, and whether they use it to improve their own models — is governed by their terms, not ours. We describe what we send; we don't make claims on their behalf.
Children's privacy (COPPA)
Vibo is designed for children and complies with the Children's Online Privacy Protection Act (COPPA). For users under 13:
- Parental consent is obtained in-app before a child's account is set up, under a parent-owned account.
- Search-query redaction — search terms entered by users under 13 are redacted rather than retained.
- 90-day activity retention — children's activity logs are automatically deleted after 90 days.
- Parent controls — a parent can review their child's data and request deletion of the child's data at any time (see "Your rights" and our Support page).
Data retention
We keep account and progress data while your account is active. Children's activity logs are retained for 90 days. You can ask us to delete your account and associated data at any time — see the Support page for how to request account and data deletion.
Your rights
You (or, for a child, the parent who owns the account) can review, export, or delete your data, and withdraw consent. To make a request, contact us at support@ai4life.com.
Contact us
Questions about this policy or your data? Email support@ai4life.com and we will respond as soon as we can.