Privacy Policy
Last updated 1 October 2026
This explains what we collect, why we collect it, and what you can ask us to do with it. We collect as little as the product can work with.
Who controls your data
VibePass Limited, registered in Ghana (company number [to be confirmed]), registered office [to be confirmed], is the data controller. For anything in this policy, write to admin@vibepassltd.com.
What we collect
- Your account — name, email address, and the city you choose. If you sign in with Google or Apple, we receive your name and email from them, not your password.
- Your membership and wallet — your plan, your credit balance, and the record of credits added and spent.
- Your bookings — which events you booked, the pass issued for each, and whether it was scanned at the venue.
- Your reservations — the business, the date and time, how many of you, and any note you add for them.
- Payment records— the amount, date, result and the payment reference from our payment processor. We never receive or store your card number: you enter it on the processor's own checkout page.
- What you share in the app — your profile photo and the vibes you pick for your profile; posts, with any photos or videos you add; comments and reactions; messages in event chats; private messages with other members and with event providers, with any photos or videos you send; and who you follow.
- Reports and blocks — if you report a post, comment or message, the report and a copy of what you reported; and the list of people you have blocked.
- Messages you send us — support emails, and anything you type into the Vibe Concierge, in the app or on our website.
- Notifications — the booking, payment and message notices we show you in the app, and on your phone if you allow notifications. For that we keep a device token, which we delete when you sign out or delete your account. You can switch phone notifications off in Settings.
- Early access signups — the name and email you give us on the website waiting list.
Why we use it
- To run your membership: take payment, load your credits, and keep your plan accurate. (Performing our contract with you.)
- To book you into events and let venues check you in at the door. (Performing our contract with you.)
- To tell you about your bookings, payments and membership. (Performing our contract with you.)
- To keep the service secure and prevent fraud and abuse of credits. (Our legitimate interests.)
- To answer you when you get in touch. (Our legitimate interests.)
- To send marketing, only if you ask for it — and you can stop it at any time. (Your consent.)
Who else handles it
We use a small number of service providers. They process your data on our instructions and may not use it for their own purposes.
- Google Firebase — sign-in, our database, file storage and push notifications. This is where your account, wallet and bookings live.
- Stripe and Paystack — payment processing. They take your card details directly and tell us only whether the payment worked, plus a reference. Each has its own privacy policy.
- Google (Gemini)— powers the Vibe Concierge, an AI assistant, in the app and on our website. What you type there is sent to Google to generate a reply; the app asks for your agreement before your first message. In the app, the concierge suggests events and businesses from our own listings, and when it helps it also sends your home city, your plan and your credit balance, never your name or email. It cannot book for you: you choose. On the website it only answers questions about VibePass. Please do not put anything sensitive into that chat. Gemini also powers the assistant in the dashboards event providers and the VibePass team use: when they ask it a question, the details it needs to answer, such as an event's bookings and guest names, reviews, or a provider's messages with you, are sent to Google for that answer.
- Other members — see what you choose to share: your name and photo, your city, the month you joined and the vibes you pick; your posts and comments; your messages in event chats; and the private messages you send them. You can switch off messages from other members on your profile card. Event providers see the direct messages you send them, and your name on their guest list when you book.
- Venues and event organisers — when you book, the venue sees that you are attending and can scan your pass at the door. When you reserve, the business sees your name, the time, how many of you and your note. They do not receive your payment details or your wallet history.
We do not sell your data, and we do not share it for anyone else's advertising.
Where your data is held
Our providers store and process data outside the United Kingdom, including in the United States and the European Union, and our own company is in Ghana. Where data leaves the UK we rely on the safeguards those providers offer, such as standard contractual clauses and approved transfer frameworks.
Cookies and tracking
Our website sets no advertising or analytics cookies. The only thing it stores in your browser is your Vibe Concierge conversation, kept on your own device so the chat is still there if you reload — you can clear it with the reset button in the chat. Signing in stores a session so you stay signed in.
How long we keep it
- Your account, wallet and bookings: while your account is open. When you delete your account, your profile and what you shared are deleted straight away; past bookings stay on the venue's records without your name.
- Payment and refund records: six years, because tax and accounting rules require it.
- Support emails: up to two years.
- Posts, comments and messages: until you delete them or close your account.
- Reports you make or that concern you: up to two years, so repeated abuse can be recognised.
- Concierge chats, in the app and on our website: on your device until you clear them.
Your rights
You can delete your account yourself at any time: in the app, go to Settings, then Delete account (how it works). You can also ask us to show you the data we hold about you, correct it, delete it, or send it to you in a portable form. You can object to our using it, ask us to restrict how we use it, and withdraw consent for marketing at any time.
Write to admin@vibepassltd.comand we will respond within one month. If you are in the UK and you are not satisfied with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
VibePass is for adults aged 18 and over. We do not knowingly collect data about children. If you believe a child has an account, tell us and we will remove it.
Changes to this policy
If we change how we use your data we will update this page, and the date at the top will change. Where a change matters to you, we will tell you directly.
VibePass Limited, registered in Ghana. Trading as VibePass.