Privacy Policy

onlyvibe is operated by Nextdio, Inc. ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use onlyvibe.ai and related services (the "Service").

onlyvibe is an 18+ platform. By using the Service you confirm you are at least 18 years old and consent to the practices described here.

• Provide, maintain, and improve the Service — AI chat, image/video generation, voice, and social features.
• Maintain persistent memory so your AI companions feel continuous.
• Process transactions — purchases, subscriptions, creator payouts, and tips.
• Enforce our age requirement and content guidelines.
• Detect and prevent fraud, abuse, and Terms violations.
• Comply with legal obligations including content moderation requirements.
• Send transactional notifications — account security, purchase confirmations, and activity alerts via email and push. We do not send marketing emails without opt-in consent.
• Analyze aggregated, anonymized usage patterns to improve the product.

All characters on onlyvibe are entirely fictional. No real people are depicted. All images and videos are generated by AI models.

To power the Service we send data to third-party AI providers for chat, image generation, video generation, and voice synthesis. Conversation context is sent without your personal identity. These providers are contractually prohibited from using your data to train their models. We may change providers at any time.

• Essential Cookies — authentication tokens and session state. Strictly necessary for the Service to function.
• Local Storage — user preferences and cached data stored in your browser for performance.
• Server-Side Analytics — we use OpenPanel for privacy-respecting analytics (revenue events, user identification). OpenPanel is a server-side service — it does not place cookies in your browser.
• Email Engagement — we track whether transactional emails are opened or clicked to maintain deliverability.

We do not use third-party advertising cookies and do not participate in cross-site tracking networks.

We do not sell, rent, or trade your personal data. We share data only in these circumstances:

• AI Model Providers — conversation context and generation prompts are sent to third-party AI providers as described in Section 4, without personal identifiers.
• Cloud Infrastructure — Amazon Web Services (hosting, storage, email delivery via SES) and Cloudflare (CDN, edge services).
• Payment Processors — crypto transactions occur on public Solana networks. Subscription billing is handled by our payment partner, which processes your payment method directly — we do not see or store your card details.
• Analytics — aggregated events are sent to OpenPanel. No personally identifiable information is shared with analytics providers.
• Legal Requirements — we may disclose data if required by law, subpoena, or court order, or to protect user safety.
• Business Transfers — in a merger, acquisition, or asset sale, your data may transfer as part of the transaction. We will notify you of any such change.

Your data is stored on servers in the United States. We implement industry-standard security measures:

• TLS/HTTPS encryption for all data in transit.
• Encryption at rest for conversations, generated content, and sensitive fields.
• AES-256-GCM encryption for sensitive credentials, with key rotation support.
• Access controls and authentication for all internal systems.
• Regular security audits and vulnerability assessments.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

• Account Data — retained while your account is active.
• Conversations & Generated Content — retained to provide persistent AI memory and your content gallery. You can delete individual conversations or media at any time.
• Usage & Analytics Data — aggregated data retained indefinitely. Raw logs purged after 90 days.
• Post-Deletion — when you delete your account, we remove your data within 30 days. Encrypted backups may retain residual data for up to 90 days before automatic purge.

Depending on your jurisdiction you may have these rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your data, or delete your account directly from Settings.
• Portability — request your data in a structured, machine-readable format.
• Restriction — request we restrict processing in certain circumstances.
• Objection — object to processing for certain purposes.
• Withdrawal of Consent — where processing is consent-based, withdraw at any time.

Contact privacy@onlyvibe.ai to exercise any right. We respond within 30 days.

onlyvibe is for users 18 and older. We implement age verification at the point of entry. We do not knowingly collect personal data from anyone under 18. If we discover a minor has created an account, we immediately terminate it and delete all associated data.

Your data may be transferred to and processed in the United States and other countries where our providers operate. By using the Service you consent to these transfers. Where required, we use appropriate safeguards such as standard contractual clauses.

We may update this policy from time to time. Material changes are communicated via the platform or email. The "Last updated" date at the top reflects the latest revision. Continued use after changes means you accept the updated policy.

Questions about this policy or want to exercise your data rights?