Privacy Policy for VibeMuse

Effective Date: April 9, 2026

Welcome to VibeMuse ("we," "us," or "our"). For the purposes of applicable data protection laws, Dataocean AI Inc., a company incorporated under the laws of the State of Washington, having its registered office at 100 N Howard St, Spokane, WA, 99201-0508, USA, is the data controller of your Personal Information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

1. Information We Collect

We collect information that can identify, relate to, describe, or be reasonably linked with you ("Personal Information").

Information You Provide Directly.

Account and Authentication Data: When you register, you may choose to use your email address or third-party authentication services (such as Apple Sign-In or Google Sign-In). If you use these services, we will receive your basic profile information (e.g., email address and name) strictly to create and authenticate your account.

(2) Multimodal Inputs (Images, Voice, and Video): When you use our text, voice, video modes or "Snap & Learn" feature, we process the media you capture or upload to generate AI-powered guides. Biometric Disclaimer: Please note that any audio recordings or video frames are processed solely to understand your query regarding the artworks. We do not collect, extract, or store any biometric identifiers (such as voiceprints, facial geometry, or face recognition data) to identify you or any other individual.

Information Collected Automatically. We automatically collect certain technical and usage data when you interact with the Service. This includes your device model, operating system version, unique device identifiers, IP address, locale, and language preferences. We also collect behavioral data such as the artworks you view and your selected AI persona. This data helps us improve the Service and is analyzed in aggregate.

Others.

(1) Chat History: To provide a personalized experience, we collect and store your interaction history, including the artworks you have scanned and your AI-generated guides, as part of your chat history. This data is securely stored on our cloud-hosted servers (including a PostgreSQL database and related application infrastructure linked to your account) and is linked to your account. You may clear your active chat history from your view or delete your entire account and associated data at any time.

(2) Cookies and Tracking Technologies: While VibeMuse is primarily a mobile application, we and our authorized service providers use local storage (such as authentication or session tokens stored on your device to keep you logged in) and embedded SDKs to collect essential usage data. We do not use any non-essential tracking technologies without your consent.

2. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account and authenticate you when you log in.

To power the "Snap & Learn" feature by sending uploaded images and queries to our AI processing partners (OpenAI, and MiniMax where we use it for text-to-speech) to generate artwork descriptions, and to support artwork knowledge retrieval using structured reference data and processing on our own systems.

To understand how users interact with the Service, identify areas for improvement, and develop new features.

To send you important service notifications and security alerts.

3. Our Lawful Basis for Processing (For EEA/UK Users):

If you are located in the European Economic Area (EEA) or the UK, we process your personal data under the following lawful bases:

Contractual Necessity: To provide the Service you requested, such as creating your account and generating AI guides for artworks.

Legitimate Interests: To analyze aggregated usage data to improve our Service, maintain security, and prevent fraud.

Consent: We may use your email address to send you updates and promotional offers. If we do so, we will provide a clear mechanism for you to opt out of receiving such communications at any time.

4. How We Share Your Information

We do not sell your Personal Information to third parties. We share information only with third-party service providers who perform services on our behalf:

We may also disclose your information if required to do so by law, court order, or government regulation.

5. International Data Transfers

VibeMuse operates globally, and our primary servers and third-party service providers (such as our cloud hosting and database providers, OpenAI, MiniMax, Cloudinary, etc.) are located in the United States. By using the Service, you acknowledge that your Personal Information may be transferred to, stored, and processed in the United States or other countries where our partners operate, which may have data protection laws different from those of your country of residence. We ensure appropriate safeguards are in place for such transfers.

6. Data Security

We implement industry-standard technical and organizational measures (such as encrypted data transmission and access controls at the application and infrastructure layers) designed to secure your Personal Information from accidental loss and unauthorized access. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

7. Data Retention and Your Right to Delete Your Account

We retain your Personal Information only for as long as necessary to provide the Service. You have the right to delete your account and all associated personal data at any time. To do so, navigate to the Account Deletion option in the app's Profile → Security (Delete Account), following the path implemented in the current app. Upon confirmed deletion, your email address, browsing history, and account data will be permanently and irreversibly removed from our active databases.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at privacy@vibemuse.app. If we become aware that we have collected Personal Information from a child without legally valid consent, we will take immediate steps to delete such information from our servers and deactivate the associated account.

9. Your Privacy Rights

Depending on your location (e.g., under the GDPR or CCPA), you may have the following rights regarding your Personal Information:

The Right to Access: You can request a copy of the personal data we hold about you.

The Right to Rectification: You can request that we correct any inaccurate or incomplete data.

The Right to Erasure / Deletion: You can request the deletion of your account and personal data (accessible directly via Profile → Security → Delete Account in the app).

The Right to Data Portability: You can request to receive your data in a structured, commonly used format.

The Right to Withdraw Consent: You may withdraw your consent to our processing at any time (e.g., opting out of marketing emails).

To exercise any of these rights, please contact us at privacy@vibemuse.app. We expressly state that we do not sell your Personal Information, nor do we share it for cross-context behavioral advertising. We will not discriminate against you for exercising your privacy rights. If you have any questions about this Privacy Policy, please contact us at privacy@vibemuse.app or visit https://vibemuse.app/privacy.