Privacy

Updated 29 Sep 2026 by DevSparks

Vibepanions is a local app. Almost nothing leaves your Mac, and the parts that do are listed here in full. This notice covers the app and vibepanions.com, and is written to meet Singapore's Personal Data Protection Act 2012 (PDPA) and, for visitors in the EU and UK, the GDPR.

Who we are

Vibepanions is made by DevSparks, a brand of Origene Ventures Pte Ltd (UEN 202542190C), a company registered in Singapore. We decide how the personal data described here is used.

Data protection officer: support@devsparks.io. Write to this address for any question, request or complaint about your data.

What the app reads

• Local files only: ~/.claude, ~/.codex, and its own state in ~/.vibepanions.
• It counts characters you typed in prompts and characters your agents wrote into files. Prompt text is counted and discarded, never stored and never sent.
• It never asks for your Claude or OpenAI password, and it cannot sign in to either.

What we collect, and why

• Little, by default. Apart from the licence check below, the app makes no request that carries anything about you unless you sign in or send feedback.
• Your purchase. Lemon Squeezy, our reseller and the merchant of record, handles checkout: your card, name, email address and billing country go to Lemon Squeezy, not to us. It shares with us your email address, your order, whether it was paid or refunded, and your licence key. We keep a record of your email address and that status so we can support you and send the messages a purchase needs (for example a fix you need to install). The basis for this is our contract with you.
• The licence check. When you enter your key, and then about once a day while the app runs, it sends the key to vibepanions.com/api/licence, which asks Lemon Squeezy whether its order is paid or refunded. When you first enter the key the app also tells Lemon Squeezy your Mac's model (for example "Mac14,2"), never its name, to count it against the Macs your key allows. Nothing about your sessions is sent.
• Earlier sign ups. If you signed up for the download on the site before 1.0, we keep that email address, the time you signed up and whether you asked for news, and use it only as you agreed then. You can ask us to delete it at any time.
• The update check. Once a day the app fetches vibepanions.com/version.json to see whether a newer build exists. That is an ordinary web request: it sends no identifier and nothing about your sessions.
• Online play, which is opt in. If you sign in with GitHub, your GitHub login, avatar and character totals are stored to keep your score online. Counts, a character id and a coarse state, never prompts or code. The schema and its row level security policies are in the open under supabase/.
• Feedback, only when you send it. The feedback window sends what it shows you: your message, its category, whether you asked for a reply and, only if you did, your email address, the screenshots you added, and, if the box is ticked, the one diagnostics line printed below it. Never file paths, project names or transcript text. We use it to answer you and fix the app.
• Site analytics. vibepanions.com uses Vercel Web Analytics, which counts page views without cookies and without building a profile of you. The app itself has no analytics at all.

What we never do

• Read or transmit your code, your prompts or your agent's replies.
• Call undocumented Anthropic or OpenAI endpoints, or read stored login tokens.
• Sell, rent or trade your personal data, or use it for advertising.

Who handles it for us

We use these service providers, each bound by its own data protection terms and allowed to use your data only to provide its service to us:

• Airtable: stores customer and sign up records and a copy of feedback, for tracking.
• Hostinger: sends email from hello@vibepanions.com and hosts our mail.
• Lemon Squeezy: sells Vibepanions as the merchant of record, takes payment and issues licence keys.
• Vercel: hosts the site and its licence, feedback and payment functions, and counts page views.
• Supabase: stores online play data if you sign in with GitHub. GitHub handles that sign in.
• ClickUp: holds feedback you send so we can track fixes.

Some of these providers store data outside Singapore, for example in the United States or the EU. When we transfer personal data overseas we rely on the provider's contractual commitments to protect it to a standard comparable to the PDPA.

How long we keep it

• Purchase records: as long as the law requires us to keep them (in Singapore, generally five years), then deleted.
• Earlier sign ups: until you ask us to delete them, or once we no longer need them to contact you, whichever is first.
• Online play data: until you delete your account in Profile.
• Feedback: as long as we need it to deal with the issue, then deleted or kept without your email address.

Your rights

• Ask what personal data we hold about you and how it has been used, and ask us to correct it.
• Withdraw your consent, stop news emails, or ask us to delete your data. Reply to any email from us, or write to support@devsparks.io. We act on it within 30 days and tell you if withdrawing affects anything, for example that we can no longer send you the download link.
• If you are in the EU or UK you also have the right to data portability, to object to or restrict processing, and to complain to your local data protection authority. In Singapore you can complain to the Personal Data Protection Commission.

Profile in the app has a "Delete my account" button. It removes your profile, your scores and your follows from the server. Your local counter stays, because it was always yours and never left.

Security

Tokens and passwords for these services are held only in server side settings, never in the site or the app. Access is limited to the people who run Vibepanions. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission as the PDPA requires.

Children

Vibepanions is a tool for software developers and is not meant for children under 13. We do not knowingly collect their data; if you believe we have, write to us and we will delete it.

Changes

If we change this notice we update the date at the top. If a change affects how we use data you already gave us, we email the people it affects before it takes effect.