VibeCodr Privacy Policy
Last updated: 12 October 2026
VibeCodr is an app that teaches you how to plan, build and publish your first app. Its first chapter is free and the rest is available with a subscription called VibeCodr Pro. This policy explains what information the app handles, why, and the choices you have.
Who we are
VibeCodr is provided by Max Tyrrell, an individual developer based in Ireland ("we"). We are the "controller" of your personal information under the EU General Data Protection Regulation (GDPR) and Ireland's Data Protection Act 2018. You can contact us at support@northcommonstudio.com.
The short version
- You can use the app, and subscribe, without an account. In that case everything you write stays on your iPhone and we receive nothing.
- If you create an account, your project, notes and progress are copied to our server so you can get them back on another device.
- We do not show adverts, track you, or sell or share your information.
- You can export or delete everything at any time, inside the app.
What we collect
If you do not sign in: nothing. Your project details, the files and notes you write, your answers to the welcome questions, your lesson progress and your settings are stored only on your iPhone. Three of those answers describe your project (your idea, your main goal and your experience level) and become part of your project details, so they are copied to our server if you sign in. The others, such as your starting point and what you hope to achieve beyond your main goal, stay on your iPhone.
If you sign in, we store:
- Your email address, and your name if you give it or if Apple or Google shares it.
- Your password, if you sign in with email. It is stored in a scrambled (hashed) form that we cannot read.
- Which sign-in method you used, and the identifier that method gives us for you.
- A copy of your project details (name, idea, audience, goal and experience level), the files and notes you write in the app, your lesson progress and the chapters you chose to skip.
If you use Sign in with Apple, we also keep a token from Apple. Its only purpose is to tell Apple your account is closed when you delete it.
Our hosting provider records technical details of each request, such as your IP address, for security and to keep the service running. We do not use them for anything else.
If you subscribe to VibeCodr Pro: the purchase is made through Apple with your Apple ID. Apple handles the payment; we never see your card details. The app keeps a simple yes-or-no record on your iPhone of whether your subscription is active, and does not send your purchase history to us.
If you contact us: we receive your email address and your message, and keep them for as long as we need to answer you and deal with any follow-up.
We do not collect your location, contacts, photos, device identifiers for advertising, or any information about how you use other apps. The app does not use analytics or crash-reporting software.
Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create and secure your account, keep you signed in | So you can sign in and use the app | Performing our contract with you |
| Copy your work to our server and sync it between your devices | To back up your work, at your request | Performing our contract with you |
| Email you a code to confirm your address or reset your password | Account security | Performing our contract with you |
| Keep security and abuse-prevention records (such as the number of account requests per hour) | To protect the service and its users | Our legitimate interest in keeping the service safe |
| Keep a record that you hold VibeCodr Pro on your iPhone | So you can learn offline | Performing our contract with you |
We do not use your information for advertising, and we do not build a profile of you. We do not make decisions about you by automated means.
Who else is involved
- Supabase hosts accounts and the synced copy of your data. The data is stored in the United Kingdom (London). Supabase acts on our instructions as our processor. The European Commission has decided that the United Kingdom protects personal information to the same standard as the EU (an "adequacy decision"), so this transfer is allowed without extra safeguards.
- Apple provides Sign in with Apple, if you choose it, and handles subscriptions. Apple learns that you signed in to VibeCodr, and holds your purchase record under its own terms.
- Google provides Sign in with Google, if you choose it, and learns that you signed in to VibeCodr.
- Supabase's email service sends the codes mentioned above and sees your email address and the code.
Some of these providers may handle information outside the European Economic Area, for example in the United States. Where that happens it is covered by the safeguards the GDPR requires, such as an adequacy decision (including the EU-US Data Privacy Framework) or the European Commission's standard contractual clauses. We share your information with no one else, unless the law requires it.
The course suggests prompts you can copy into AI tools. The app does not send anything to those tools. What you paste into them is covered by their own policies.
How long we keep it
We keep your account information until you delete your account. When you do, your account and all your synced data are removed from our live systems straight away. We do not keep backups of this data: our hosting plan includes no routine backups, so no copies remain once you delete your account. Information on your iPhone stays there until you delete it or the app.
Your choices and rights
In the app:
- Export: Profile, Settings, Privacy, Export your data.
- Delete your account and all its data: Profile, Settings, Privacy, Delete Account.
- Delete data on this iPhone only: the same screen when signed out, or delete the app.
- Sign out: Profile, Account.
You also have the right, under the GDPR, to ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Contact us at the address above and we will respond within one month. If you are unhappy with how we handle your information you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the data protection authority in the EU country where you live or work. If you live in the United Kingdom, you can also complain to the Information Commissioner's Office (ico.org.uk).
Children
VibeCodr is a learning app for people building their first app and is not aimed at children under 13. We do not knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.
Changes
If this policy changes in an important way, we will update the date above and, where an account exists, tell you in the app.
Contact
support@northcommonstudio.com