Privacy Policy
Last updated: March 24, 2026
1. Who We Are
VibePause is operated by J&L Serverid Ltd, Tartu, Estonia, registration number 11478495, VAT number EE101657514. For GDPR purposes, J&L Serverid Ltd is the controller for the personal data described in this policy.
A separate EU representative is not applicable because the controller is established in Estonia.
2. Data We Collect
Device Identifier
We generate and store a pseudonymous device identifier in your system Keychain. We use it for account and subscription recognition, server authentication, abuse prevention, and optional analytics. It does not directly reveal your name or email address.
Session and App Data
VibePause processes foreground app bundle identifiers, session duration, idle state, nudges shown, and related preference data. Bundle identifiers are processed locally on your Mac and are not sent to our servers. Local settings and history are stored on device so the app can keep working without a cloud profile.
City and Weather Context
VibePause does not request Location Services permission. You enter a city name manually, and the app uses Apple's geocoding service to derive approximate coordinates for weather lookups. The city name and rounded coordinates are cached locally in encrypted device storage. Only the city name is sent to our backend so we can generate weather-aware nudges. No GPS data is ever sent to our servers.
Server Interaction Data
When the app contacts our backend, we temporarily log your IP address for rate limiting and abuse prevention. IP logs are automatically deleted after seven days.
AI Nudge Generation
If you are a Pro subscriber and use AI-generated nudges, the app sends limited context to an AI language model: session duration, break category, tone preference, city name (if provided), current weather condition, language, and distance-unit preference. No personal identifiers, code content, keystrokes, or app names are included. AI sessions are ephemeral and are not stored by the provider after the response is returned.
Support Messages
If you contact us directly, we collect the information you choose to share, such as your email address, device details, and the text of your message.
3. How We Use Data and Our Legal Bases
We use personal data only for the following purposes:
- Contract performance - to deliver the app, manage subscriptions, restore purchases, show the features you paid for, and provide support for your account.
- Legitimate interests - to secure the service, prevent fraud and abuse, keep the app stable, and improve the product with limited operational analytics.
- Consent - for optional location access, optional analytics where enabled, and any feature that the app clearly presents as optional.
- Legal obligation - to keep records required for tax, accounting, fraud prevention, or compliance with law.
4. Sharing and Processors
We do not sell personal data. We share data only with service providers that help us run the app or comply with law, including Apple services for the App Store and device features, RevenueCat for subscription management, TelemetryDeck for optional pseudonymous analytics when available and enabled, and optional providers for weather, AI, or support when those features are used.
Where data is transferred outside the EEA, we rely on safeguards such as Standard Contractual Clauses or comparable protections offered by the provider.
5. Retention
Local session and preference data stays on your Mac until you delete the app or reset the data. Device identifiers remain in the Keychain until the app is removed or the identifier is regenerated.
Server-side data is retained only for as long as needed for the purpose it was collected. Server-side device records (which include authentication and subscription state, but never local app usage history) are deleted after 90 days of inactivity. IP address logs are deleted after 7 days. Optional analytics data is retained by TelemetryDeck according to their retention policy. Support and billing records may be kept longer where required by law.
6. Your GDPR Rights
Depending on your location and the processing involved, you may have the right to access, correct, delete, restrict, or object to processing, and to receive a copy of data you provided in a portable format. You may also withdraw consent at any time where processing is based on consent.
Because much of VibePause runs locally on your device, many rights are exercised by clearing app data, revoking permissions, or removing the app.
7. International Transfers
Some providers may process data in the United States or other countries outside the EEA. When that happens, we look for appropriate transfer safeguards and limit the data sent to what is needed for the feature you enabled.
8. Complaints
If you have concerns about our handling of personal data, contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
9. Do Not Sell or Share
We do not sell personal information or share it for cross-context behavioral advertising. If you want the short version of that commitment, see our Do Not Sell or Share page.
10. Contact
For privacy questions or requests, contact us at privacy@vibepause.app.