Vybli

Privacy Policy

Effective Date: August 7, 2026

This Privacy Policy explains how Rysvold Kaelqirn Marthveck (“we”, “us”, or “our”), as the developer of Vybli, collects, uses, stores, shares, and protects your information when you use our mobile application, products, and related services collectively referred to as the “Service”.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

Information We Collect

We may collect or process the following categories of information depending on how you use the Service.

1.1 Account Information

When you create an account, sign in, or use certain features, we may collect information such as:

Nickname or username;

Email address;

Mobile phone number, if required for registration or verification;

Login credentials or account identifiers;

Profile information you choose to provide.

1.2 Account Sign-In and Account-Based Features

Vybli currently requires users to sign in before entering the App because its core services are account based. The account connects the user’s Apple sign-in identity, Vybli numeric account ID, AI generation requests and results, saved history, token or credit balance, premium subscription status, purchase entitlements, community activity, reports, blocks, fraud prevention controls, account recovery, and account deletion.

Account creation is free and is available through Sign in with Apple. Users do not need to purchase a subscription, tokens, credits, or any other product to create an account.

Paid digital features are optional and are offered only through Apple In-App Purchase. Sign-in allows Vybli to verify App Store transactions, maintain purchased entitlements across sessions and supported devices, restore eligible purchases, prevent duplicate fulfillment, and return the correct token balance or subscription status to the account.

Community participation also uses an account so that Vybli can attribute posts and interactions, operate reporting and blocking tools, investigate abusive behavior, remove blocked content from a user’s feed, enforce community rules, and honor account and data deletion requests.

1.3 User Content

When you use the Service, you may choose to provide, enter, upload, generate, save, or share certain content, such as:

Text you enter in the app;

Preferences, selected options, notes, descriptions, and feedback;

Images, screenshots, or other materials you choose to upload;

Posts, comments, profile content, or other user-generated content.

We process such content only as necessary to provide, maintain, improve, and protect the Service, respond to your requests, and support the features you choose to use.

1.4 AI Feature Information

Vybli may provide AI-powered features that generate suggestions, summaries, ideas, labels, recommendations, or other in-app results based on the information you choose to provide.

When you use an AI feature, we may process and send the following information to a third-party AI service provider only after obtaining your permission:

Text descriptions, notes, prompts, preferences, or selected options you enter;

Relevant context you choose to provide, such as occasion, budget, tone, style, relationship, or other feature-related information;

Images or visual content you choose to upload, if the selected AI feature requires image-based input;

Basic technical request information necessary to deliver the AI feature, such as app version, request time, language setting, and general device or network information.

We do not send your payment credentials, full credit card number, contacts, precise location, or unrelated device files to third-party AI service providers for AI generation.

Before your personal data is shared with a third-party AI service provider, Vybli will present an in-app notice explaining what data will be sent and who it will be sent to, and will ask for your permission. If you do not grant permission, the related AI feature may not be available.

1.5 Third-Party AI Service Provider

To provide the AI hairstyle-preview feature, Vybli shares the information described above with Beijing Volcano Engine Technology Co., Ltd., which provides Volcano Engine AI image-generation services, and with its contracted subprocessors. If Vybli changes the AI provider, the App will identify the new recipient and request permission before the first applicable submission.

The third-party AI service provider processes the submitted information only to generate the requested AI result and provide the AI-related functionality selected by you. We require such service providers to protect user information with the same or equivalent level of protection as described in this Privacy Policy.

We do not sell your AI input or AI output. We do not use your AI input, uploaded images, or AI-generated results for advertising, cross-app tracking, or advertising profiling.

1.6 Face Data and Facial Images

What face data we collect. Vybli collects only the selfie image that you affirmatively select or capture for an AI hairstyle preview. The image may contain your face and visible facial features. Vybli does not collect Apple Face ID data, depth-map data, a mathematical face template, or a biometric identifier.

How we collect it. You choose an existing image from the photo library or capture a new image after granting the applicable iOS permission. Vybli does not scan your photo library in the background. Nothing is uploaded until you review the AI data-sharing notice and tap “Allow & Generate.”

How we use it. The selfie is used only to analyze visible facial and hair characteristics needed to position and render the hairstyle preview you request, return the result, secure the request, and troubleshoot that specific generation. It is not used to identify or authenticate you, determine identity, create a faceprint, track you across apps or websites, advertise to you, or make decisions about employment, credit, insurance, health, or eligibility.

Who receives it and where it is stored. The selected photos are first uploaded to Vybli-managed cloud storage hosted using Amazon Web Services (AWS) S3. Vybli’s server then sends secure photo references and the AI request to Beijing Volcano Engine Technology Co., Ltd., the provider of Volcano Engine AI image-generation services. Volcano Engine and its contracted subprocessors may access the photos through those references only to process the requested generation. Processing may occur outside your country or region, subject to applicable safeguards.

Other information shared with the AI provider. In addition to the selected selfie, hairstyle reference photo, and hair-color reference photo, Vybli sends the Vybli numeric account ID, a randomized request identifier, selected style information, and limited technical request information needed to complete and secure the request. Vybli does not send payment credentials, contacts, precise location, or unrelated device files.

Retention. Vybli retains selected source photos, including selfies containing face data, for no longer than 30 days after upload unless a shorter period is sufficient to complete the request. Volcano Engine is instructed to retain processing copies only as long as needed to perform the requested service and no longer than 30 days, unless a longer period is legally required. Generated previews that you save may remain associated with your account until you delete them, delete your account, or request deletion.

Deletion and withdrawal. You may withdraw permission for future AI sharing in Settings > Privacy, delete available saved content, use the in-app Delete Account control, or email . Withdrawing permission stops future uploads but does not reverse a generation already completed. After a verified deletion request, active copies are deleted or de-identified within 30 days, and backup copies are removed through the ordinary backup cycle, generally within an additional 90 days, except where retention is legally required.

No sale, advertising, or generalized model training. We do not sell face data. We do not use selected selfies for cross-app tracking, advertising profiling, or training generalized AI models. We require service providers receiving face data to provide the same or an equivalent level of protection described in this Privacy Policy.

1.7 Camera and Photo Library Access

With your permission, Vybli may access your device camera or photo library so that you can take, select, or provide images for features you choose to use.

You may disable camera or photo library access at any time through your device settings. If you disable these permissions, certain image-based features may not be available.

1.8 Local Storage and History

If the Service provides saved results, drafts, history, favorites, or similar features, such information may be stored locally on your device or in our service systems, depending on the feature.

You may delete saved content, drafts, local history, or similar records through the app features, if available, or by deleting the app from your device.

1.9 Device, Log, and Usage Information

When you use the Service, we may automatically collect certain technical and usage information, including:

Device model;

Operating system and version;

App version;

Device identifiers;

IP address;

Language and region settings;

Network type;

Usage events;

EULA, Terms, Privacy Policy, AI notice, or community rule presentation records;

Feature access records;

Crash logs;

Error reports;

Diagnostic data.

We use this information to operate, maintain, protect, analyze, and improve the Service.

1.10 Payment and Subscription Information

If you purchase subscriptions, token or credit packs, or other digital features in the iOS App, payment is processed exclusively through Apple In-App Purchase using StoreKit.

Apple processes your payment credentials. Vybli does not receive or store your full credit card number, CVV, Apple Account password, or complete payment credentials.

We may receive and store limited transaction-related information, such as:

Order ID;

Product, credit, token, or subscription type;

Purchase time;

Subscription status;

Refund status;

Payment platform.

We use this information to provide paid services, manage subscriptions, verify purchases, process refunds, prevent fraud, and maintain transaction records.

Vybli may also receive and store the product identifier, transaction ID, original transaction ID, App Store-signed transaction information, purchase date, expiration date, revocation or refund status, and the resulting token balance or subscription entitlement. Vybli’s server associates those records with the signed-in Vybli account to fulfill purchases, restore eligible purchases, prevent duplicate delivery, and maintain access across sessions.

Deleting a Vybli account does not automatically cancel an Apple subscription. Subscriptions must be managed or cancelled through Apple’s subscription settings.

1.11 User-Generated Content and Safety Information

If the Service allows users to post, comment, upload, share, follow, like, block, report, or interact with other users, we may process related information, including:

Posts, comments, images, profile content, and other content you submit;

Reports, blocking records, moderation records, and safety complaints;

Account identifiers of users involved in a report or block;

Information necessary to review objectionable content, prevent abuse, and enforce our rules.

We may review, remove, restrict, or take action on user-generated content or accounts that violate our terms, community rules, safety requirements, or applicable laws.

1.12 EULA, Terms, and Policy Acceptance Records

Before accessing certain features of the Service, including AI hairstyle-preview features, photo upload features, face-image processing features, community features, user-generated content features, reporting and blocking tools, paid features, subscriptions, tokens, credits, or other account-based features, you may be required to review and agree to the Terms of Service, End User License Agreement (“EULA”), Privacy Policy, AI data-sharing notice, face data notice, community rules, subscription terms, payment terms, or other in-app policies.

When you review or agree to these terms, notices, or policies, we may collect and process acceptance records, including:

Account identifier;

Vybli numeric account ID;

Apple sign-in identifier or other login identifier, where applicable;

Acceptance status;

Acceptance time;

Terms of Service version;

End User License Agreement version;

Privacy Policy version;

AI data-sharing notice version;

Face data notice version;

Community rules version;

Subscription, token, credit, or paid feature terms version, if applicable;

Device or app information related to the acceptance;

Related logs necessary to verify that the terms, notices, or policies were presented and accepted.

We use this information to confirm that users have agreed to the applicable Terms of Service, EULA, Privacy Policy, AI data-sharing notice, face data notice, community rules, subscription terms, or other in-app policies before accessing relevant features, to comply with app marketplace requirements, to maintain platform safety, to enforce our rules, to verify purchase-related entitlements, and to resolve disputes.

If Vybli updates its Terms of Service, EULA, Privacy Policy, AI data-sharing notice, face data notice, community rules, subscription terms, payment terms, or other important in-app policies, we may request that you review and accept the updated version before continuing to use certain features.

1.13 Customer Support Information

When you contact us for support, feedback, complaints, or inquiries, we may collect:

Your name or contact information;

Email address;

Message content;

Screenshots or attachments you provide;

Support history;

Information necessary to respond to your request.

How We Use Your Information

We may use your information for the following purposes:

To provide, operate, and maintain the Service;

To create and manage your account;

To provide features and services you request;

To generate AI-powered suggestions, summaries, ideas, recommendations, labels, or other in-app results;

To process purchases, credits, tokens, subscriptions, refunds, and support requests;

To save drafts, history, favorites, or user preferences;

To display, manage, and moderate user-generated content;

To provide reporting, blocking, filtering, and safety features;

To verify your acceptance of the Terms of Service, End User License Agreement, Privacy Policy, AI data-sharing notice, face data notice, community rules, subscription terms, payment terms, or other in-app policies;

To control access to account-based features, AI features, photo upload features, face-image processing features, community features, paid features, subscriptions, tokens, credits, or other restricted features;

To detect, prevent, and address fraud, abuse, objectionable content, security incidents, or technical issues;

To improve app performance, stability, usability, and security;

To communicate with you about service updates, security alerts, administrative notices, transaction confirmations, policy update notices, and support responses;

To analyze usage trends and improve our products;

To comply with applicable laws, regulations, legal processes, app marketplace requirements, and enforceable governmental requests;

To protect our rights, property, users, and the public.

We will not use your personal information for purposes that are materially different from those described in this Privacy Policy without providing appropriate notice or obtaining your consent where required by law.

How We Share Your Information

We do not sell your personal information.

We may share your information only in the following circumstances.

3.1 Third-Party AI Service Providers

When you choose the AI hairstyle-preview feature and grant permission, Vybli first stores the selected photos in Vybli-managed AWS S3 storage and then provides secure photo references and the AI request to Beijing Volcano Engine Technology Co., Ltd., which provides Volcano Engine AI image-generation services, and its contracted subprocessors.

The shared information may include the selfie containing your face, hairstyle and hair-color reference photos, selected style information, Vybli numeric account ID, randomized request identifier, and limited technical request information. The provider may use it only to process your request and return the generated result, and must provide the same or an equivalent level of data protection described in this Privacy Policy.

3.2 Service Providers

We may share necessary information with trusted third-party service providers that help us operate the Service, such as:

Cloud service providers;

Payment and subscription processing providers;

Analytics providers;

Crash reporting providers;

Customer support tools;

Security and anti-fraud service providers;

Content moderation and safety service providers.

These service providers may only access your information as necessary to perform services on our behalf and are required to protect your information.

3.3 Legal and Safety Reasons

We may disclose your information if we believe in good faith that such disclosure is necessary to:

Comply with applicable laws or legal processes;

Respond to lawful requests from public authorities;

Protect our rights, property, or safety;

Protect the safety of users or others;

Detect, prevent, or investigate fraud, abuse, security, safety, or technical issues;

Review reports of objectionable content or abusive behavior;

Enforce the Terms of Service, End User License Agreement, Privacy Policy, community rules, payment terms, AI usage notices, or other in-app policies.

3.4 Business Transfers

If the Service or related assets are transferred, sold, merged, reorganized, or involved in a similar transaction, your information may be transferred as part of that transaction, subject to appropriate confidentiality and security measures.

3.5 Aggregated or De-identified Information

We may use or share aggregated, anonymized, or de-identified information that cannot reasonably identify you for analytics, research, business operations, or product improvement purposes.

Third-Party SDKs and Services

To provide core features, improve app performance, analyze usage, process payments, provide AI-powered features, and ensure security, we may integrate third-party SDKs or services.

These third parties may collect or process certain information according to their own privacy policies. We take reasonable measures to review third-party SDKs and require them to handle user data securely and lawfully.

Examples of third-party service types may include:

AI generation service providers;

Cloud hosting and storage services;

Payment and subscription processing services;

Analytics and diagnostics services;

Crash reporting services;

Customer support services;

Security, anti-fraud, and content moderation services.

User-Generated Content, Reporting, and Blocking

If the Service includes user-generated content or user interaction features, users may be able to create, upload, post, comment, or share content with others.

To help maintain a safe environment, Vybli may provide:

A method for filtering objectionable content;

A mechanism for users to report objectionable content;

A mechanism for users to block abusive users;

Moderation tools to review, restrict, or remove content that violates our rules.

When a user blocks or reports another user, we may process the reported content, account identifiers, related interaction records, and moderation information to review the issue, protect users, and enforce our rules. Reported or blocked content may be removed from the reporting user’s feed where technically available.

Data Storage and Retention

We retain your information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, maintain security, prevent fraud, support moderation, and enforce agreements.

Selected source photos and AI-processing copies, including selfies containing face data, are retained for no longer than 30 days after upload unless a shorter period is sufficient to complete the request. Saved generated previews remain associated with the account until you delete the content, delete the account, or request deletion. Security and diagnostic logs are normally retained for up to 90 days, and reports, blocks, and moderation records may be retained for up to 24 months or longer when needed to protect users or meet legal obligations.

After verified account or data deletion, Vybli deletes or de-identifies active copies within 30 days. Backup copies are removed through the ordinary backup rotation, generally within an additional 90 days. Purchase records may be retained as reasonably required for entitlement management, fraud prevention, tax, accounting, refunds, disputes, and legal obligations.

EULA, Terms of Service, Privacy Policy, AI data-sharing notice, face data notice, community rules, subscription terms, payment terms, or other policy acceptance records may be retained for as long as necessary to verify your acceptance, enforce applicable terms, comply with app marketplace requirements, maintain platform safety, prevent abuse, verify purchase-related entitlements, and resolve disputes.

For content stored locally on your device, you may delete it through in-app features or device system functions.

When retention is no longer necessary, we will delete, anonymize, or de-identify relevant information in accordance with applicable laws and our internal policies.

Your Rights and Choices

Depending on your location and applicable laws, you may have the right to:

Access the personal information we hold about you;

Correct inaccurate or incomplete information;

Delete your account or personal information;

Withdraw consent where processing is based on consent;

Object to or restrict certain processing;

Request a copy of your personal information;

Opt out of marketing communications;

Disable app permissions through your device settings;

Delete locally stored content, drafts, history, or saved results.

You may choose not to provide information for AI features or may decline permission to share data with a third-party AI service provider. If you decline, the related AI feature may not be available.

Please note that even if you delete your account or request deletion of certain information, we may retain limited records where required or permitted by law, security requirements, fraud prevention, purchase accounting, refund handling, dispute resolution, moderation, EULA or Terms acceptance verification, or protection of other users.

To exercise your rights, please contact us at:

We may need to verify your identity before processing your request.

Account and Data Deletion

You may delete your account using the in-app Delete Account control or request deletion of your account or personal information by contacting us at:

After receiving and verifying your request, we will delete or de-identify personal information in active systems within 30 days. Backup copies are removed through the ordinary backup cycle, generally within an additional 90 days.

We may retain limited records where required or permitted for law, security, fraud prevention, purchase accounting, refund handling, dispute resolution, moderation, EULA or Terms acceptance verification, platform compliance, or protection of other users.

Deleting a Vybli account does not automatically cancel an Apple subscription. Subscriptions must be managed or cancelled through Apple’s subscription settings.

Marketing Communications

If you have agreed to receive promotional messages, we may contact you by email, in-app notification, or other permitted methods about product updates, promotions, or service-related information.

You may opt out of marketing communications at any time by following the unsubscribe instructions in the message or by contacting us at:

Even if you opt out of marketing communications, we may still send you non-promotional messages, such as service notices, security alerts, transaction confirmations, EULA or Terms update notices, policy update notices, AI data-sharing notice updates, and account-related communications.

Security

We take reasonable administrative, technical, and organizational measures to protect your information from unauthorized access, disclosure, alteration, loss, misuse, or destruction.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

International Data Transfers

Your information may be stored and processed in countries or regions outside your country of residence. These countries or regions may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we will take appropriate measures to protect your information when it is transferred internationally.

Children’s Privacy

The Service is recommended for users aged 18 and above.

We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without appropriate consent, we will delete such information as soon as reasonably possible.

If you believe that a child has provided us with personal information, please contact us at:

Third-Party Links

The Service may contain links to third-party websites, products, or services.

This Privacy Policy does not apply to third-party websites, products, or services. We are not responsible for the privacy practices of third parties.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you by in-app notice, pop-up notice, notification, email, or other appropriate means as required by applicable law.

Your continued use of the Service after the updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy.

If changes involve updated Terms of Service, End User License Agreement, AI data-sharing notice, face data notice, community rules, subscription terms, payment terms, or other important in-app policies, we may request that you review and accept the updated terms before continuing to use certain features.

Contact Us

If you have any questions, comments, requests, or complaints about this Privacy Policy or our privacy practices, please contact us at:

Developer: Rysvold Kaelqirn Marthveck

Email: