Overview
VibeWidgets helps builders show product metrics on their iPhone Home Screen. This policy explains what information the website and app collect and how it is used.
Waitlist email
If you join the early-bird waitlist, we collect your email address so we can record eligibility and contact you about launch access. You can ask us to remove your email at any time by contacting [email protected].
Connected services
The iOS app connects only to services you choose, such as Supabase, RevenueCat, Cloudflare, Google Analytics, Stripe, and Vercel. Manually supplied credentials and device-held OAuth credentials are stored using Apple Keychain. VibeWidgets uses them only to fetch the metrics you select for the app and widgets.
To avoid exposing durable Stripe and Vercel provider tokens to a mobile client, provider access, refresh, or installation tokens and limited account/team/installation identifiers are encrypted at rest in our Cloudflare database. Your device receives a separate high-entropy, revocable credential; only its one-way hash is stored by the service. Stripe charge totals, charge/refund counts and available balance, and Vercel deployment names, states and timestamps pass through our broker when you refresh, but the broker does not persist those metric responses.
OAuth retention and deletion
Short-lived OAuth setup sessions expire after ten minutes and app completion records after two minutes. Stripe and Vercel broker grants become unusable no later than 400 days after the server record is created or renewed. Disconnecting in VibeWidgets requests deletion of the broker grant and removes the device credential. You can also revoke VibeWidgets from the connected provider’s dashboard or contact us for help with deletion.
Website security and anti-abuse
The website may use Cloudflare services, including Turnstile, to protect the waitlist from automated abuse. Cloudflare may process technical request information for security purposes.
Analytics and diagnostics
We may use privacy-conscious analytics or diagnostic tools to understand whether the website and app work correctly. If our data practices change, this policy will be updated before launch.
Data sharing
We do not sell personal information. We only share information with service providers needed to operate the website, waitlist, app, security, or support.
Contact
For privacy questions or deletion requests, contact [email protected].