California Consumer Privacy Act (CCPA) Privacy Notice

Last Updated: March 6, 2026

This CCPA Privacy Notice supplements the information contained in the Vibe Privacy Policy and applies solely to residents of the State of California ("consumers" or "you"). Stanley Williams ("we," "our," or "us") adopts this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act (CPRA), and any terms defined in the CCPA/CPRA have the same meaning when used in this notice.

1. Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from consumers:

CCPA Category	Examples Collected	Collected
A. Identifiers	Real name, email address, username, unique personal identifier, online identifier, account name	Yes
B. Personal Information (Cal. Civ. Code § 1798.80(e))	Name, email address	Yes
C. Protected Classification Characteristics	None	No
D. Commercial Information	Subscription tier (free or premium), transaction history related to subscriptions	Yes
E. Biometric Information	None	No
F. Internet or Similar Network Activity	Search queries, search history, venue interactions (views, clicks, favorites), browsing history within the app	Yes
G. Geolocation Data	Precise geolocation (latitude/longitude) when using venue search features, with your consent	Yes
H. Sensory Data	None	No
I. Professional or Employment Information	None	No
J. Non-Public Education Information	None	No
K. Inferences Drawn from Other Information	Taste profile preferences (cuisine types, ambiance preferences, price range preferences) derived from your interactions	Yes
L. Sensitive Personal Information	Precise geolocation (collected only with explicit consent and only during active use)	Yes (limited)

2. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you: When you create an account, fill out your profile, take the taste quiz, search for venues, or contact us
• Automatically from your device: When you use the Service, including location data (with permission), usage patterns, and interaction data
• Third-party authentication providers: When you sign in using Google, Apple, or other OAuth providers, we receive your name, email, and profile picture
• Third-party services: Google Maps Platform provides venue data, photos, and place details in response to your searches

3. Purposes for Collecting Personal Information

We collect and use personal information for the following business or commercial purposes:

• Providing the Service: To operate, maintain, and deliver venue discovery and recommendation features
• Account Management: To create and manage your user account, authenticate your identity, and maintain your profile
• Personalization: To build your taste profile, provide personalized venue recommendations, and improve the relevance of search results
• Location-Based Services: To find venues near you, calculate distances, and provide location-aware recommendations
• Subscription Management: To process and manage premium subscription purchases and provide premium features
• Communication: To send service-related communications, respond to inquiries, and provide customer support
• Improvement: To analyze usage patterns, improve the Service, and develop new features
• Security: To detect, prevent, and respond to security incidents, fraud, and abuse
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Your Rights Under the CCPA

As a California resident, you have the following rights regarding your personal information:

Right to Know

You have the right to request that we disclose the following information covering the 12 months preceding your request:

• The categories of personal information we collected about you
• The categories of sources from which we collected your personal information
• Our business or commercial purpose for collecting your personal information
• The categories of third parties with whom we share your personal information
• The specific pieces of personal information we collected about you

Right to Delete

You have the right to request that we delete any personal information we have collected from you, subject to certain exceptions. Upon receiving and verifying your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information. However, as stated above, Vibe does not sell or share your personal information. There is no need to submit an opt-out request.

Right to Limit Use of Sensitive Personal Information

You have the right to limit the use and disclosure of sensitive personal information. The only sensitive personal information we collect is precise geolocation data, which is used solely to provide you with location-based venue search results. You can limit this by revoking location permissions in your device settings.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not:

• Deny you goods or services
• Charge you different prices or rates, including through discounts or penalties
• Provide you a different level or quality of goods or services
• Suggest that you may receive a different price, rate, or quality of goods or services

5. How to Submit a Verifiable Consumer Request

To exercise your rights described above, you may submit a verifiable consumer request by:

• Emailing us at vibetheapplication@gmail.com with the subject line "CCPA Request"
• Using the data export feature within the app (Settings > Export My Data) for right-to-know requests

Only you, or a person you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

Verification Process

When you submit a request, we will verify your identity by:

• Matching information you provide with information we already have on file
• Asking you to verify through your registered email address
• For requests for specific pieces of personal information, we may require additional documentation

Authorized Agent

You may designate an authorized agent to submit a request on your behalf. To do so:

• Provide the authorized agent with written permission to submit the request
• The agent must submit proof of authorization along with the request
• We may still require you to directly verify your identity and confirm you authorized the agent

6. Response Timelines

We will respond to verifiable consumer requests within the following timeframes:

• Acknowledgment: Within 10 business days of receiving your request
• Substantive Response: Within 45 calendar days of receiving your verifiable request
• Extension: If we need additional time, we will inform you within the initial 45-day period and may extend by an additional 45 days (90 days total), providing a reason for the extension

You may submit a request to know or request to delete up to two times within a 12-month period.

7. Disclosure of Personal Information for Business Purposes

In the preceding 12 months, we have disclosed the following categories of personal information for business purposes to the following categories of recipients:

Category of Information	Recipient	Purpose
Identifiers (email, name)	Authentication providers (Google, Apple)	Account authentication
Geolocation data	Google Maps Platform	Venue search and distance calculation
Commercial information (subscription data)	Stripe, RevenueCat	Payment processing, subscription management
All stored personal data	Neon PostgreSQL (database provider)	Data storage and persistence
User-uploaded content	Replit Object Storage	File storage

8. Financial Incentives

Vibe offers two service tiers:

• Free Tier: Access to basic venue search and discovery features at no cost
• Premium Tier: Access to enhanced features including advanced filters, detailed venue insights, and personalized recommendations for a monthly or yearly subscription fee

The premium tier provides additional features in exchange for a subscription payment. The value of the premium tier is based on the cost of providing enhanced venue data, advanced filtering, and personalized recommendations. The difference between tiers is based on the availability of features, not on the amount of personal information collected. We collect the same categories of personal information from both free and premium users.

You may opt in to the premium tier at any time through the app, and you may cancel at any time through your app store account settings.

9. We Do Not Sell Personal Information

In the preceding 12 months, Vibe has not sold any personal information of consumers. We do not sell personal information and have no plans to do so.

In the preceding 12 months, Vibe has not shared personal information for cross-context behavioral advertising purposes.

10. Children Under 16

Vibe is not directed to children under 16 years of age. We do not knowingly collect or sell the personal information of consumers under 16 years of age. If we learn that we have collected personal information from a child under 16, we will promptly delete that information.

11. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods include:

• Account data: Retained while your account is active and for 30 days after account deletion request
• Search history: Retained for up to 12 months, then automatically purged
• Location data: Not persistently stored; used only during active search sessions
• Taste profile data: Retained while your account is active
• Subscription records: Retained as required by financial regulations

12. Changes to This CCPA Notice

We reserve the right to amend this CCPA Privacy Notice at any time. When we make changes, we will update the "Last Updated" date at the top of this notice and notify you through the Service.