Privacy Policy

VYB is a product of unyfo, inc. ("Company", "we", "us", "our"), a corporation incorporated in Delaware and headquartered in Glastonbury, Connecticut. unyfo, inc. operates findvyb.com, an AI-powered Dating Profile Operating System that helps users analyze and optimize their dating profiles, photos, prompts, and conversations.

For privacy questions: privacy@findvyb.com. For formal legal notices (GDPR / CCPA / DMCA): mail to the address above or email legal@findvyb.com.

2.1 Account Data

• Email address (required for registration)
• Password (hashed with bcrypt — we never store plaintext passwords)
• OAuth tokens if you sign in with Google or Apple (we only store your email and provider ID)
• Account creation date and last login

2.2 Profile Data

• Dating profile bio and prompts you enter
• Age, occupation, education, interests, and lifestyle information you provide
• Target audience preferences
• Profile photos you upload for analysis

2.3 Uploaded Content

• Dating app conversation screenshots
• Instagram story screenshots
• Dating profile screenshots
• Any other images or text you upload for AI analysis

2.4 Usage Data

• Which features you use and how often (for usage limits and billing)
• AI analysis requests and outputs
• Session logs (login time, IP address, device type)

2.5 Payment Data

• Subscription plan and status
• Stripe Customer ID (we store only the reference ID — all card data is handled by Stripe)
• Billing history and invoice records

2.6 VYB Keyboard Extension Data

The VYB Keyboard is an iOS custom keyboard extension. To generate AI-powered openers and replies, it requires Allow Full Access in your device settings. Here is exactly what the VYB Keyboard does and does not do with that access:

• Text you type is not logged or transmitted to VYB servers. The keyboard uses your keystrokes only to insert characters into the active text field — it does not read, record, or upload what you type in any other app.
• When you explicitly tap Generate or Analyse, the screenshot context captured by your active broadcast session (see §2.7) is sent to VYB's API to generate a reply or analysis. Only that on-demand request is transmitted.
• Your VYB account authentication token is stored in a secure App Group shared container (accessible only to the VYB app and VYB Keyboard extension) so you stay signed in across both. This token is never accessible to other apps on your device.

2.7 Screen Broadcast Data (VYB Broadcast Extension)

To provide real-time conversation context to the keyboard, VYB includes an iOS Broadcast Upload Extension. This extension only activates when you explicitly start a broadcast via iOS Control Center → Screen Recording → VYB. Here is what it does:

• While the broadcast is active, the extension captures frames of your screen at approximately 15 frames per second and writes a single JPEG image to a private App Group container shared only between VYB and the VYB Keyboard extension on your device.
• This frame is continuously overwritten — only the most recent frame is ever stored. No video, no frame history, and no audio are captured or retained.
• The frame is stored only on your device, inside the App Group container. It is never uploaded to VYB servers unless you tap Generate or Analyse in the keyboard, at which point that single frame is sent to our API as part of your request.
• Frames sent to the API are processed to generate your result and then discarded — they are not stored in our database, not retained after the response is returned, and are subject to the same OpenAI API data-handling rules described in §5.
• You are in full control. Stop the broadcast at any time via Control Center or by tapping the red status bar indicator. Once the broadcast stops, no further frames are captured or stored.

• To provide the Service — analyze your profile, photos, and conversations and return AI-generated insights and recommendations.
• To manage your account — authenticate you, enforce usage limits, and process subscription billing.
• To improve our AI — we may use anonymized, aggregated outputs (never your identifiable content) to improve our models and product.
• To communicate with you — send email verification, password resets, billing notifications, and (with your consent) product updates.
• To protect the platform — detect fraud, abuse, bot activity, and violations of our Terms.
• To comply with law — respond to lawful requests from government authorities.

We do not sell your personal data. We do not share your content with third-party advertisers. We do not use your photos or conversations for advertising of any kind.

Your uploaded content is private. Always.

• All photos, screenshots, bios, prompts, and conversation text you upload are treated as strictly private and are accessible only to you and the AI processing systems that generate your analysis.
• VYB does not publicly display, share, sell, license, or transfer your uploaded content to any third party for any purpose other than providing AI analysis to you.
• VYB does not use your uploaded content in marketing materials, advertising, training datasets, or any promotional context without your explicit written consent.
• Uploaded screenshots and images are sent to OpenAI's API solely to generate your analysis. OpenAI's API is governed by their API data usage policy, which prohibits using API-submitted content to train models.
• You retain full ownership of all content you upload. Uploading content grants VYB only the limited right to process it for your benefit.
• "From Her Side" / Received Message Analysis: When you use the received-message analysis feature, you upload messages sent to you by another person. Those messages are processed by our AI solely to generate insights for you. By using this feature, you represent that you have the legal right to share those messages with a third-party service (which you do, as the recipient).

Apple requires that custom keyboards which enable network access ("Allow Full Access") clearly disclose their data practices. This section is that disclosure.

Conversation and story screenshots are processed in-memory and are not permanently stored in our database or file storage. They are transmitted directly to OpenAI's API and discarded after your analysis is returned.

Local device storage (web): To improve your experience, VYB caches your most recent conversation thread, opener inputs, and story context in your browser's local storage. This data never leaves your device and is not transmitted to VYB servers. You can clear it at any time via Settings → Clear Browsing Data in your browser.

Local device storage (iOS Keyboard & Broadcast): The VYB Keyboard stores your auth token and the current broadcast frame in an App Group container on your device. The auth token is cleared when you sign out. Broadcast frames are a single rolling file that is overwritten continuously and cleared when the broadcast stops. Neither is backed up to iCloud.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data ("right to be forgotten").
• Portability — request your data in a portable, machine-readable format.
• Restriction — request restriction of processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Opt-out of sale — we do not sell personal data; this right is automatically satisfied.

You can exercise the most common rights yourself, instantly, from Settings: use Export My Data to download a complete machine-readable (JSON) copy of your data (satisfying Access and Portability), and Delete Account to erase your account and all associated data. For any other request, email privacy@findvyb.com and we will respond within 30 days (45 days for complex requests).

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following applies:

• Legal basis for processing: Contract performance (providing the Service); Legitimate interests (security, fraud prevention); Consent (marketing emails); Legal obligation (financial records).
• Data transfers: Your data is processed in the United States. We rely on Standard Contractual Clauses (SCCs) for transfers from the EEA to the US.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it.
• Delete personal information we hold about you.
• Opt out of the sale or sharing of personal information. VYB does not sell or share personal information.
• Non-discrimination for exercising your privacy rights.
• Correct inaccurate personal information.

To exercise California privacy rights, email privacy@findvyb.com with subject line "California Privacy Request".

If you are located in India, the following additional rights and obligations apply under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Your rights as a Data Principal:

• Access — obtain a summary of the personal data we process and the processing activities undertaken.
• Correction & Erasure — request correction of inaccurate or incomplete data, or erasure of data no longer necessary for the purpose for which it was collected. Use Settings → Delete Account to erase all your data instantly.
• Grievance redressal — raise a complaint with our Grievance Officer (details below) within a reasonable time. We will acknowledge within 48 hours and resolve within 30 days.
• Nomination — nominate another individual to exercise your data rights on your behalf in the event of death or incapacity.
• Withdraw consent — withdraw consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Grievance Officer (India):
Name: Harshith Pulipaka
Email: privacy@findvyb.com
Response time: 30 days from receipt of complaint.

If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India once it is constituted under the DPDP Act.

Personal data of Indian users is stored on servers located in the United States (Supabase / AWS). We rely on Standard Contractual Clauses and applicable safeguards for cross-border transfers.

• All data encrypted in transit using TLS 1.3.
• All data encrypted at rest using AES-256.
• Row-level security (RLS) enforced in Supabase — users can only access their own data.
• Authentication sessions managed via secure, httpOnly, SameSite=Strict cookies.
• API rate limiting enforced at middleware and route level.
• Disposable email providers blocked at signup.
• Passwords hashed using bcrypt (via Supabase Auth).
• Admin access gated by email allowlist, separate from user routes.

We use only essential cookies. See our Cookie Policy for details.

VYB is strictly for users 18 and older. We do not knowingly collect data from minors. If you believe a minor has created an account, contact privacy@findvyb.com immediately and we will delete the account.

We will update this policy when our practices change. Material changes will be communicated by email with 14 days' notice before taking effect. The effective date at the top of this page will always reflect the current version.