Privacy Policy

Who we are

AudioVibe is an audio-first social platform operated by Alpha Tech Labs Ltd, a company registered in England and Wales, company number 17015966.

Alpha Tech Labs Ltd is the data controller for the personal data described in this policy. That means we decide what data is collected and why, and we are responsible for looking after it.

This policy covers the AudioVibe mobile apps for Android and iOS, the audiovibe.co website, and the public profile and share pages we serve.

What we collect

Everything below is either given to us by you, created by you using the app, or generated automatically as the app runs.

Microphone, camera and photo library access are requested only at the moment you use a feature that needs them, and you can decline. Declining the microphone means you cannot record audio; the rest of the app still works.

Why we use it, and our legal basis

Under the UK GDPR we must have a lawful basis for every use of your personal data. Ours are set out below.

Where we rely on legitimate interests we have considered whether our interest is outweighed by your rights, and we have limited what we collect accordingly. You can object to processing based on legitimate interests: see section 8.

Recommendations and profiling

AudioVibe builds a picture of what you like from what you listen to, finish, skip, like, save and follow, and uses it to order the For You feed, the Discover rails and creator suggestions. This is profiling as the UK GDPR defines it, so we want to be plain about it.

• It affects what content is shown to you and in what order. It does not affect your access to the service, your account standing, or anything with a legal or similarly significant effect on you.
• There is no automated decision-making under Article 22. Moderation decisions that restrict an account are made or reviewed by a person.
• We do not use your data to build an advertising profile, and we do not sell it.
• You can object to profiling for recommendations by contacting us. The feed then falls back to non-personalised ordering.

Who we share it with

We do not sell your personal data, and we do not share it for advertising.

Other users see what you choose to make visible: your public profile, the content you post publicly, and the messages you send them. Content on a private account is limited to approved followers. Public profile and share pages can be viewed by anyone with the link.

We use the following service providers, who process data on our instructions:

We may also disclose personal data where we are required to by law, in response to a valid request from a law enforcement or regulatory body, or where necessary to establish, exercise or defend legal claims, or to protect the safety of our users or the public.

If Alpha Tech Labs Ltd is ever involved in a merger, acquisition or sale of assets, we will tell you before your personal data is transferred and becomes subject to a different privacy policy.

International transfers

Our hosting and several of our providers are based in the United States, so your personal data is transferred outside the United Kingdom.

Where we transfer personal data out of the UK we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK International Data Transfer Agreement, together with the technical measures described in section 11. You can ask us for a copy of the safeguards we rely on using the contact details in section 13.

How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for.

Your rights

Under the UK GDPR you have the following rights. They are free to exercise, and we will respond within one month.

• Access. Ask for a copy of the personal data we hold about you.
• Rectification. Have inaccurate data corrected. Most of it you can edit yourself in the app.
• Erasure. Ask us to delete your data. See section 9.
• Restriction. Ask us to pause processing while a dispute is resolved.
• Portability. Receive the data you gave us in a machine-readable format, or have it sent to another provider where technically feasible.
• Objection. Object to processing based on legitimate interests, including profiling for recommendations.
• Withdraw consent. Where we rely on consent, such as push notifications, you can withdraw it at any time without affecting what we did before.
• Complain. Raise a concern with the Information Commissioner's Office. See section 13.

To exercise any of these, email us at generalinquiries@audiovibe.co. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.

Deleting your account and your data

You can delete your account at any time from inside the app: Settings, then Delete account. Deletion removes your profile, your audio, series, playlists, stories, comments, likes, follows, listening history and the underlying files in our object storage.

If you cannot or do not want to install the app, you can request deletion instead. Full details of what is removed, what is kept and how to ask are on our account deletion page.

Uninstalling the app stops further collection from your device, but it does not delete the account. Use one of the two routes above for that.

Children and young people

You must be at least 13 to use AudioVibe. We do not knowingly collect personal data from anyone under 13. If we learn that we have, we delete the account and the data.

We know that some of our users are between 13 and 17, and we design for that. We follow the Information Commissioner's Office Age Appropriate Design Code, which means among other things:

• Content rated 18+ is hidden by default, and can only be turned on by an account whose declared date of birth is 18 or over.
• We collect the minimum data we need, and we do not use it for advertising.
• We do not use nudge techniques to push you toward weaker privacy settings.
• We do not collect precise location.

Age is currently established from the date of birth you declare when you sign up. If you are a parent or guardian with a concern about a young person's account, contact us and we will help.

How we protect it

• All traffic between the app and our servers is encrypted in transit using HTTPS, with HTTP Strict Transport Security enforced.
• Passwords are stored as salted hashes. We never store or transmit them in plain text, and we cannot read them.
• Sign-in tokens are held in the operating system keychain or keystore on your device, not in ordinary app storage, and are excluded from device backups.
• Access tokens are short-lived. Refresh tokens rotate on every use, and reuse of an old token revokes the whole session family.
• Data at rest is encrypted by our hosting and storage providers.
• Rate limiting, request validation and abuse detection protect the service from automated attack.
• Access to production data inside Alpha Tech Labs Ltd is limited to those who need it, and administrative actions on user data are recorded in an audit log.

No online service can promise perfect security. If we ever suffer a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours and tell you where the law requires it.

Changes to this policy

We may update this policy as the service changes. The effective date at the top always tells you which version you are reading. If we make a change that materially affects how we use your personal data, we will give you reasonable notice in the app before it takes effect.

Contact us, and how to complain

For anything about this policy, your data, or to exercise a right:

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority: