Privacy Policy

1. Data Controller

Zipvibe acts as the controller of personal data processed through the Service.

Support and privacy-related requests can be submitted through the Help Center available within the Service.

2. Personal Data We Collect

We collect only the data necessary to operate, secure, and improve the Service.

2.1 Data You Provide Directly

Depending on how you use the Service, you may provide:

• First name and last name
• Email address
• Profile photo or avatar
• Billing address
• Account-related settings and preferences
• Support communications and feedback

Providing this data is optional where possible, but certain features require it to function.

2.2 Automatically Collected Data

When you use the Service, we may automatically collect:

• Technical and usage data (pages viewed, features used, session duration)
• Device and browser information
• Approximate location (country or region, not precise GPS)
• IP address (processed in a limited and security-focused manner)

This data is used for analytics, performance monitoring, security, and fraud prevention.

3. Analytics and Tracking

3.1 PostHog

We use PostHog to understand how users interact with the Service, improve usability, and identify performance or reliability issues.

PostHog may process:

• Usage events
• Interaction data
• Technical metadata

Where required by law, analytics data is collected only after you provide consent.

3.2 Vercel Analytics

We use Vercel Analytics to monitor performance, page load times, and overall reliability of the Service.

Vercel Analytics is designed to operate with minimal data collection and does not rely on advertising profiles.

4. Purposes of Processing

We process personal data for the following purposes:

• Providing and operating the Service
• Managing user accounts and authentication
• Saving learning progress and preferences
• Processing billing and payments
• Providing customer support
• Improving performance, stability, and usability
• Preventing abuse, fraud, and security incidents
• Complying with legal obligations

We do not sell personal data.

5. Legal Bases for Processing (GDPR)

Where applicable under GDPR, we process personal data based on:

• Performance of a contract (providing the Service)
• Your consent (e.g. analytics cookies)
• Legitimate interests (security, abuse prevention, service improvement)
• Legal obligations (billing, compliance, dispute resolution)

6. Data Sharing and Processors

We may share personal data with trusted third-party service providers acting as processors, including:

• Hosting and infrastructure providers
• Analytics providers (e.g. PostHog, Vercel)
• Payment processors
• Customer support tools

These providers process data only under our instructions and are required to implement appropriate security measures.

We do not share personal data with advertisers.

7. International Data Transfers

Your data may be processed in countries other than your own.

Where required by law, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)
• Equivalent legal transfer mechanisms

8. Data Retention

We retain personal data only as long as necessary to:

• Provide the Service
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

When data is no longer required, it is deleted or anonymized.

9. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of data
• Request data portability
• Object to or restrict processing
• Withdraw consent where processing is based on consent

You can manage certain data directly in your account settings.

For other requests, contact support through the Help Center. Requests are handled within a reasonable timeframe.

10. Security Measures

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Loss
• Misuse
• Disclosure

However, no system can guarantee absolute security.

11. Children's Data

The Service is not intended for children under the age required by applicable law to consent to data processing.

We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal requirements, technology, or Service functionality.

The "Last updated" date indicates the most recent revision. Continued use of the Service after updates constitutes acceptance of the revised policy.

13. Contact

Privacy-related questions and requests can be submitted through the Help Center available within the Service.