Privacy Policy
Last updated June 20, 2026 · Effective June 20, 2026
vibecodii.com ("vibecodii," "we," "us") operates a learning platform for AI-first software building ("vibe coding"). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use https://vibecodii.com and related services (the "Service").
What we collect
We do not intentionally collect passwords (Clerk stores credentials) or payment card data until a paid tier launches (then via Stripe).
| Category | Examples | Source |
|---|---|---|
| Account data | Email, name, profile image | Clerk (sign-up / Google OAuth) |
| Profile data | Display name, bio, social links | You (settings) |
| Learning data | Lesson completions, streaks, badges | Your use of the Service |
| Challenge data | Prompts you submit, scores | Your submissions |
| Newsletter | You (opt-in forms) | |
| Technical data | IP address, browser type, device | Vercel logs, PostHog |
| Communications | Support emails | You |
How we use data
| Purpose | Lawful basis (GDPR) | DPDP basis |
|---|---|---|
| Provide accounts and lessons | Contract | Consent / legitimate use |
| Save progress and streaks | Contract | Legitimate use |
| Send transactional email | Contract | Legitimate use |
| Newsletter | Consent | Consent |
| Analytics and product improvement | Legitimate interest | Legitimate use |
| Security and fraud prevention | Legitimate interest / legal obligation | Legitimate use |
| Legal compliance | Legal obligation | Legal obligation |
International transfers
Data may be processed in the United States and other countries where our providers operate. We rely on vendor standard contractual clauses and DPAs where applicable.
Retention
Account data: until deletion plus a short backup window
Challenge prompts: up to 24 months after submission
Newsletter: until unsubscribe plus 30 days
Analytics: per PostHog settings (default 12 months)
Your rights
All users may request access, correction, or deletion by emailing privacy@vibecodii.com.
EEA/UK (GDPR): rights to access, rectification, erasure, restriction, portability, objection, and lodge a complaint with your supervisory authority.
India (DPDP): rights as a Data Principal including access, correction, erasure, and grievance redressal.
California (CPRA): we do not sell personal information; rights to know/delete may apply — contact us.
We respond within 30 days or timelines under applicable law.
Children
The Service is intended for users 16 and older. We do not knowingly collect data from children under 16. Contact us to delete such data.
Security
We use encryption in transit (TLS), Row Level Security on databases, and access controls described in our security playbook. No method is 100% secure.
India — Digital Personal Data Protection Act, 2023
Consent: clear sign-up and Privacy Policy acceptance; separate consent for newsletter
Grievance redressal: privacy@vibecodii.com, response within 30 days
Cross-border transfer: disclosed above; safeguards via processor contracts
Breach notification: we notify affected users and authorities as required by law
Changes
We post updates on this page and update the "Last updated" date. Material changes will be notified by email or in-app notice where appropriate.
Contact
Privacy: privacy@vibecodii.com
Security: security@vibecodii.com
General: hello@vibecodii.com
Questions: privacy@vibecodii.com