Privacy Policy

VYB is a product of unyfo, inc. ("Company", "we", "us", "our"), a corporation incorporated in Delaware and headquartered in Glastonbury, Connecticut. unyfo, inc. operates findvyb.com, an AI-powered Dating Profile Operating System that helps users analyze and optimize their dating profiles, photos, prompts, and conversations.

For privacy questions: privacy@findvyb.com. For formal legal notices (GDPR / CCPA / DMCA): mail to the address above or email legal@findvyb.com.

2.1 Account Data

• Email address (required for registration)
• Password (hashed with bcrypt — we never store plaintext passwords)
• OAuth tokens if you sign in with Google or Apple (we only store your email and provider ID)
• Account creation date and last login

2.2 Profile Data

• Dating profile bio and prompts you enter
• Age, occupation, education, interests, and lifestyle information you provide
• Target audience preferences
• Profile photos you upload for analysis

2.3 Uploaded Content

• Dating app conversation screenshots
• Instagram story screenshots
• Dating profile screenshots
• Any other images or text you upload for AI analysis

2.4 Usage Data

• Which features you use and how often (for usage limits and billing)
• AI analysis requests and outputs
• Session logs (login time, IP address, device type)

2.5 Payment Data

• Subscription plan and status
• Stripe Customer ID (we store only the reference ID — all card data is handled by Stripe)
• Billing history and invoice records

• To provide the Service — analyze your profile, photos, and conversations and return AI-generated insights and recommendations.
• To manage your account — authenticate you, enforce usage limits, and process subscription billing.
• To improve our AI — we may use anonymized, aggregated outputs (never your identifiable content) to improve our models and product.
• To communicate with you — send email verification, password resets, billing notifications, and (with your consent) product updates.
• To protect the platform — detect fraud, abuse, bot activity, and violations of our Terms.
• To comply with law — respond to lawful requests from government authorities.

We do not sell your personal data. We do not share your content with third-party advertisers. We do not use your photos or conversations for advertising of any kind.

Your uploaded content is private. Always.

• All photos, screenshots, bios, prompts, and conversation text you upload are treated as strictly private and are accessible only to you and the AI processing systems that generate your analysis.
• VYB does not publicly display, share, sell, license, or transfer your uploaded content to any third party for any purpose other than providing AI analysis to you.
• VYB does not use your uploaded content in marketing materials, advertising, training datasets, or any promotional context without your explicit written consent.
• Uploaded screenshots and images are sent to OpenAI's API solely to generate your analysis. OpenAI's API is governed by their API data usage policy, which prohibits using API-submitted content to train models.
• You retain full ownership of all content you upload. Uploading content grants VYB only the limited right to process it for your benefit.
• "From Her Side" / Received Message Analysis: When you use the received-message analysis feature, you upload messages sent to you by another person. Those messages are processed by our AI solely to generate insights for you. By using this feature, you represent that you have the legal right to share those messages with a third-party service (which you do, as the recipient).

Conversation and story screenshots are processed in-memory and are not permanently stored in our database or file storage. They are transmitted directly to OpenAI's API and discarded after your analysis is returned.

Local device storage: To improve your experience, VYB caches your most recent conversation thread, opener inputs, and story context in your browser's local storage. This data never leaves your device and is not transmitted to VYB servers. You can clear it at any time via Settings → Clear Browsing Data in your browser.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data ("right to be forgotten").
• Portability — request your data in a portable, machine-readable format.
• Restriction — request restriction of processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Opt-out of sale — we do not sell personal data; this right is automatically satisfied.

You can exercise the most common rights yourself, instantly, from Settings: use Export My Data to download a complete machine-readable (JSON) copy of your data (satisfying Access and Portability), and Delete Account to erase your account and all associated data. For any other request, email privacy@findvyb.com and we will respond within 30 days (45 days for complex requests).

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following applies:

• Legal basis for processing: Contract performance (providing the Service); Legitimate interests (security, fraud prevention); Consent (marketing emails); Legal obligation (financial records).
• Data transfers: Your data is processed in the United States. We rely on Standard Contractual Clauses (SCCs) for transfers from the EEA to the US.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it.
• Delete personal information we hold about you.
• Opt out of the sale or sharing of personal information. VYB does not sell or share personal information.
• Non-discrimination for exercising your privacy rights.
• Correct inaccurate personal information.

To exercise California privacy rights, email privacy@findvyb.com with subject line "California Privacy Request".

• All data encrypted in transit using TLS 1.3.
• All data encrypted at rest using AES-256.
• Row-level security (RLS) enforced in Supabase — users can only access their own data.
• Authentication sessions managed via secure, httpOnly, SameSite=Strict cookies.
• API rate limiting enforced at middleware and route level.
• Disposable email providers blocked at signup.
• Passwords hashed using bcrypt (via Supabase Auth).
• Admin access gated by email allowlist, separate from user routes.

We use only essential cookies. See our Cookie Policy for details.

VYB is strictly for users 18 and older. We do not knowingly collect data from minors. If you believe a minor has created an account, contact privacy@findvyb.com immediately and we will delete the account.

We will update this policy when our practices change. Material changes will be communicated by email with 14 days' notice before taking effect. The effective date at the top of this page will always reflect the current version.