Privacy policy

Who we are

Vybemo is an outfit rating app made in India. You post a fit, people rate the outfit out of 10, and cities battle every week. There is no shop on Vybemo. This policy covers the Vybemo app on Android and iPhone, and this website.

Vybemo is operated from India. Under the Digital Personal Data Protection Act, 2023 (the DPDP Act) we are the data fiduciary for the data described here. That means we decide why and how it is used, and we answer for it.

For anything about your data, write to hello@vybemo.com. For a complaint, write to the Grievance Officer at grievance@vybemo.com.

The short version

We collect what you give us to run the app: your account details, your fits, your ratings and your messages.
We do not sell your data and we do not share it with advertisers.
There are no ads in the app, no advertising SDKs and no third party analytics tools.
We do not track you across other companies’ apps or websites.
Data travels between the app and our servers over an encrypted connection (HTTPS).
Your score on a fit is private to you. Other people see one word, never a number.
You can delete your account and its data from inside the app, or from the delete your account page without the app.
Vybemo is for people aged 18 or older.

The rest of this page is the detail behind each of those lines.

What we collect

When you create an account

Your email address. We send a one time code to it to confirm it is yours.
A password. We store only a hash of it, which is a scrambled form that cannot be turned back into the password.
Your name, your handle, your date of birth, your gender, your state and your city.
A profile photo and a bio, if you add them.
The fashion interests you pick while setting up.
A record that you accepted the Terms of use and this policy, with the version and the time.

What you post and do

Fit photos, captions, hashtags, and the brand, category and closets you add to them.
Closets you name.
Travel bags you pack: the city and the dates of the trip, and the fits you post into the bag.
Shopping bags: the fits you post into one. A shopping bag stays up for 24 hours.
The score you privately seal on your own fit.
Ratings you give, ratings your fits receive, and the points and crowns you earn.
Comments.
Who you follow, who follows you, and the cities you watch.
Messages you send in Rooms: DMs, group rooms, message requests and fits you share inside a chat.
Your messaging settings, such as who can send you requests and whether online status and seen receipts are on.
Blocks and reports you make, and reports made about your account.

From your phone

Details of each login session: a device identifier, the device name, whether it is Android or iPhone, the IP address and the app user agent.
A push notification token, if you allow notifications.
Photos you choose to post. Before upload the app makes them smaller on your phone. If you switch on face blur, the blur is also done on your phone, and only the blurred photo is uploaded. The original stays on your phone.
Your area on the style map, only if you opt in. The map works at neighbourhood level. It is never live and never precise. If you tap to find your city, your phone compares its position with the list of cities already on the phone. That position is not sent to our servers and we do not store coordinates.

On this website

If you joined the waitlist before the app came out: your email, your city, the page you joined from, and the fact that you ticked the consent box.
If you email us: your email address and whatever you write.
Like any web server, ours and our hosting provider may log technical details of a request, such as IP address and browser type.

What we do not collect

Your phone number.
Your contacts or address book.
Precise location, live location or location in the background.
Audio. The app does not ask for the microphone.
Health, fitness or financial information.
Your browsing history, or what you do in other apps.
An advertising ID.
Card or payment details. There is nothing to buy on Vybemo.
Government ID numbers.
Your photo library. The app opens your camera or gallery only when you choose a photo, and receives only the photos you pick.

There are no advertising networks and no third party analytics tools in the app today. If that changes, this policy changes first.

Permissions the app asks for

The app asks for a permission at the moment you use the feature that needs it, never when it first opens. Every one is optional. You can say no, and you can change your mind later in your phone’s settings.

Camera. So you can take a photo of a fit and post it. Asked when you tap to take a photo.
Photos. So you can pick a fit photo or a profile photo from your gallery. The app receives only the photos you pick.
Location, while you are using the app. Only to suggest your city when you tap to use your location, and to show what is near you on the style map. The position is compared with a list of cities on your phone. It is not sent to our servers and it is not stored.
Notifications. So we can tell you about a new follower, a message, a rating result or a battle. Asked after you sign in.

The app does not ask for your contacts, your microphone, your calendar, your phone calls, your text messages or location in the background.

Why we use each thing

To create and protect your account. Email, password hash, one time codes and session details. Session details let us sign you out everywhere and slow down someone guessing your password.
To show your fits and run the rating. Photos, captions, hashtags, brand, category, closets, bags, your sealed score, ratings and points.
To work out how men and women rated a fit, and to keep women only fits with the right audience. Your gender.
To check the minimum age. Your date of birth.
To place you in a city. Your state and city, for city feeds, city battles and the style map.
To shape your feed. Your interests, the accounts you follow and the cities you watch.
To deliver messages and notifications. Your messages, your messaging settings and your push token.
To keep people safe. Reports, blocks and the trust rules for messaging, which look at account age, a profile photo and having at least one post. Messages also pass through automatic filters for blocked words and links. That is software, with no person reading.
To fix problems. Technical logs.
To email you when Vybemo opens in your city, and to decide where to open first. Your waitlist email and city. Nothing else is done with them.

We do not use your data for advertising and we do not build advertising profiles. We do not use your photos or messages to train AI models.

We process your personal data on the basis of your consent under the DPDP Act. You give that consent when you accept the Terms of use and this policy while signing up in the app, and when you tick the box on the waitlist form.

You can withdraw consent at any time. For the app, that means deleting your account. For the waitlist, it means asking us to take you off the list. Both are explained on the delete your account page. Withdrawing consent does not undo what was done before, and we may still keep what the law requires us to keep.

The DPDP Act also allows a few uses without consent, such as following a court order or another law. We rely on those only when they apply.

What other people can see

Your profile is visible inside the app. Handle, name, profile photo, bio, gender, age in years, city, interests, points and follower counts. Your email and your date of birth are never shown to other people.
You choose the audience for each fit. Everyone, your followers, or women only. Women only fits are shown only to accounts recorded as women.
Scores are private. One word is public. The crowd average on a fit is shown only to the person who posted it. Everyone else sees one word from the rating ladder, such as cute, strong or fire, and only after they have rated the fit themselves. Nobody gets publicly ranked a 3.
Your sealed score stays sealed. The score you set on your own fit is never shown to anyone else.
The creator sees an average, never a list. When a fit is scored, 48 hours after posting, the creator sees the average and how men and women rated it differently. The split appears only once enough people have rated, so it cannot point to one person. The creator does not see who gave which score.
The Arena is blind. While a fit is being rated in a city battle, the handle, the city and the crowd word are hidden. If a fit is crowned, the crown and the fit show on the winner’s profile and in past battles.
Bags say where and when. A travel bag shows its city and the dates of the trip to people who can see your fits. A shopping bag shows your first name and is visible to everyone on Vybemo for 24 hours. Do not pack a travel bag if you would rather not say you are away.
The style map stays at area level. It never shows where a person is.
Chats are visible to the people in them. Seen, typing and online exist only inside accepted chats. Each has a switch, and the switches are reciprocal: turn yours off and you stop seeing it for others too.

Your chats

Messages in Rooms are stored on our servers so they can reach the people you send them to. They are not end to end encrypted.

Our staff do not browse chats. Staff can read messages only when someone in that chat reports it. They then see an evidence snapshot: a limited number of recent messages from that chat, which the person reporting could already see, copied at the moment of the report. Every staff action in Rooms is written to a log.

Unsending a message erases its content from our servers. A snapshot taken before that stays with the report.
Deleting a chat for yourself clears your own view of it. The other person keeps theirs.
The notification for a message request never contains the text of the message.
The app keeps a copy of your inbox and recent chats on your phone so they open quickly. Logging out wipes that copy.

We do not sell your data. We do not share it with advertisers. We share it only with companies that help us run Vybemo, and only what each one needs:

Hosting and database providers, which store the data and serve the app and this website.
An email delivery provider, which sends one time codes and waitlist emails.
The Expo push notification service, which passes notifications to Google for Android phones and Apple for iPhones.
OpenFreeMap, which serves the background tiles of the style map from OpenStreetMap data. Like any web request, loading a tile carries your IP address. Nothing about your account is sent.

Some of these providers may store or process data on servers outside India. Where that happens, it is done in line with Indian law.

We also share information when the law requires it, or to protect the safety of a person. That includes reporting child sexual abuse material to the authorities. See our child safety standards.

How long we keep it, and how to delete it

We keep your account data while your account exists.

One time codes expire after 10 minutes and are then deleted automatically.
You can delete a single fit or a comment, and unsend a message, at any time in the app.
A travel bag closes itself when the trip ends. You can empty a shopping bag before its 24 hours are up.
We keep your waitlist email and city until you ask us to remove them or the waitlist is no longer needed.

Deleting your account

In the app: open your profile, go to Settings, scroll to the end and choose Delete account. You type your handle to confirm. Without the app: use the delete your account page.

Deleting signs you out on every device at once and closes the account. Your profile, fits and messages come off Vybemo. It cannot be undone.

What may be kept

Reports that involve your account, with their evidence snapshots.
The record of moderation actions taken on your account.
The record of the consent you gave.
Anything a law or a lawful order requires us to keep.

We keep these only as long as the law requires or the safety case needs, and no longer.

Your rights

Under the DPDP Act you have the right to:

Access. Ask for a summary of the personal data we hold about you and what we do with it.
Correction. Fix or complete your data. Most of it can be changed in Edit profile.
Erasure. Have your data deleted, by deleting your account or by asking us.
Withdraw consent. At any time, as easily as you gave it.
Grievance redressal. Complain to our Grievance Officer and get an answer.
Nominate. Name another person who can use these rights for you if you die or become unable to.

To use any of these, write to hello@vybemo.com from the email address on your account. We may ask a question or two to confirm the request really comes from you. If our answer does not settle the matter, you may take your complaint to the Data Protection Board of India.

Children

Vybemo is for people aged 18 or older. We do not knowingly collect data from anyone younger.

If you believe someone under 18 is using Vybemo, report their fit or chat in the app, or write to grievance@vybemo.com. We remove the account and the data that came with it. Our child safety standards explain the rest.

Security

Data moving between the app and our servers is encrypted in transit with HTTPS.
Passwords, one time codes and login tokens are stored on our servers only as hashes.
The app keeps your login in the secure storage on your phone.
Several wrong passwords in a row lock sign in on that account for a short while.
Staff tools need a staff login, and what a staff member can do depends on their role.

No system is perfectly secure. Use a password you do not use anywhere else. If you think someone else is in your account, write to hello@vybemo.com.

Cookies and analytics on this website

Today this website has no advertising cookies and no analytics scripts installed. There are no social media pixels. You do not log in here, so the site does not use cookies to remember you.

The fonts are served from our own domain, so opening a page sends no request to a font provider. The waitlist form sends your email and city to our server only when you press the button.

If any of this changes, this section changes first.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If the change is important, we tell you in the app, and we ask for your consent again where the law needs it.

Grievance Officer and contact

Grievance Officer: Vybemo
grievance@vybemo.com

Tell us what happened, the handle or the link involved, and how to reach you. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ask an intermediary to acknowledge a complaint within 24 hours and resolve it within 15 days.

General questions go to hello@vybemo.com.