Privacy Policy

Account information. When you sign up we collect your email address and authentication details through our identity provider, Clerk. We do not store your password.

Payment information. Subscriptions are processed by Polar, our Merchant of Record. Polar and its payment processor collect and store your card details directly; we receive only a customer identifier, your plan, and billing status. We never see or store full card numbers.

Content you create. The app descriptions, chat messages, prompts, uploaded images, generated source code, and (for on-device builds) the App Store Connect API key you connect. Connected signing keys are encrypted at rest and used only to sign your own builds.

Usage & log data. Counts of generations, adjustments, and builds (to enforce plan limits), plus basic technical logs (timestamps, error traces, IP address) needed to run and secure the Service.

We use your information to provide and operate the Service, generate and compile your apps, sign and deliver builds you request, enforce plan limits, process payments, provide support, prevent abuse, and comply with legal obligations. Where the GDPR applies, our legal bases are performance of our contract with you, our legitimate interests (security and improving the Service), your consent (where requested), and compliance with law.

To generate your app, your prompts and related content are sent to our AI provider (Anthropic’s Claude models, accessed via OpenRouter). We do not use your content to train AI models, and our AI providers do not train their models on data sent through our API. Your content is processed solely to produce your app and is not sold or used for advertising.

To deliver the Service we share the minimum necessary data with the following processors, who act on our behalf under contractual data-protection terms:

• Clerk — authentication and account management.
• Polar — Merchant of Record for payment and subscription processing.
• Supabase — database and storage of your projects and content.
• OpenRouter & Anthropic — AI code generation from your prompts.
• Codemagic — cloud macOS compilation and signing of your app.
• Vercel — hosting of the Service.
• Apple — when you connect an Apple Developer account, we interact with App Store Connect on your behalf to sign and upload your builds.

We do not sell your personal information.

We use strictly-necessary cookies only — for authentication and session management. We do not use analytics, advertising, or third-party tracking cookies, so no cookie consent banner is required for non-essential tracking.

We retain your account and project data for as long as your account is active. You may delete individual projects at any time. When you delete your account, we delete your personal data within 30 days; residual copies may persist in encrypted backups for up to 90 days before being overwritten. To request deletion, contact privacy@vynbe.com.

Vynbe operates globally, so your data may be processed in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK and Swiss addenda) with our processors.

EEA / UK (GDPR). You may access, correct, delete, export, or restrict processing of your data, object to processing based on legitimate interests, and withdraw consent. You may also lodge a complaint with your local supervisory authority.

California (CCPA/CPRA).You may request to know, delete, or correct your personal information, and opt out of “sale” or “sharing” — note we do not sell or share personal information as those terms are defined.

Everywhere else. You may contact us to access or delete your data regardless of where you live. To exercise any right, email privacy@vynbe.com; we respond within 30 days.

We protect your data with encryption in transit, encryption at rest for sensitive credentials (such as connected signing keys), access controls, and least-privilege server access. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach where required.

The Service is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their personal information.

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date and, where required, we will notify you directly.

Questions about this policy or your data? Email privacy@vynbe.com.
Youssef Bitar — Auto-entrepreneur (Morocco), trading as Vynbe
Résidence Al Kawtar, Sidi Moumen, 20630 Casablanca, Morocco
Auto-entrepreneur No. 002112908000094 · IF: 26051294