Privacy Policy

Last updated: March 23, 2026

1. Introduction

Welcome to OnlyVibe, operated by Nextdio, Inc. ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at onlyvibe.ai and any related services (collectively, the "Service").

OnlyVibe is an 18+ platform. By using the Service, you confirm that you are at least 18 years old and consent to the practices described in this policy.

2. Data We Collect

2.1 Information You Provide

  • Account Data — email address, username, display name, profile picture, and authentication credentials.
  • Conversation Data — messages you exchange with AI characters, including text and any media you share within conversations.
  • Generated Content — AI-generated images, character configurations, and any creative content you produce on the platform.
  • Payment Information — cryptocurrency wallet addresses and on-chain transaction hashes. We never store private keys, seed phrases, or access to your wallet.
  • User Preferences — settings, saved characters, onboarding responses, and notification preferences.
  • Communications — messages you send to our support team or feedback you provide.

2.2 Information Collected Automatically

  • Device & Browser Data — device type, operating system, browser type and version, screen resolution, and language preferences.
  • Usage Data — pages visited, features used, session duration, clicks, and navigation patterns.
  • Network Data — IP address, approximate geolocation (country/region level), and referring URLs.
  • Performance Data — error logs and crash reports to help us improve the Service.

3. How We Use Your Data

We use your data to:

  • Provide, maintain, and improve the Service, including AI character interactions and image generation.
  • Maintain persistent memory for your AI companions so conversations feel continuous.
  • Process transactions and manage your $OVIBE token balance.
  • Enforce our age requirement and community guidelines.
  • Detect and prevent fraud, abuse, and violations of our Terms of Service.
  • Comply with legal obligations, including content moderation requirements.
  • Send transactional notifications (e.g., account security alerts). We do not send marketing emails without your opt-in consent.
  • Analyze aggregated, anonymized usage patterns to improve our AI models and user experience.

4. AI-Generated Content

All characters on OnlyVibe are entirely AI-generated and fictional. No real people are depicted or represented. All images are generated by artificial intelligence models and do not depict real individuals.

Your conversations with AI characters are processed by third-party AI model providers to generate responses. We send conversation context to these providers in a way that does not include your personal identity. These providers are contractually prohibited from using your conversation data to train their models.

5. Cookies & Tracking Technologies

We use the following technologies:

  • Essential Cookies — authentication tokens and session management. These are strictly necessary for the Service to function.
  • Analytics — we use privacy-respecting analytics to understand aggregate usage patterns. We do not use invasive advertising trackers.
  • Local Storage — we store user preferences and cached data in your browser's local storage to improve performance.

We do not use third-party advertising cookies or participate in cross-site tracking networks.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

  • AI Model Providers — conversation context is sent to AI providers (e.g., Anthropic, OpenAI) to generate responses. Data is sent without personal identifiers and is not used to train their models.
  • Cloud Infrastructure — we use Amazon Web Services (AWS) and Cloudflare for hosting, storage, and content delivery.
  • Payment Processors — blockchain transactions are processed on public networks. We do not use traditional payment processors that store your financial details.
  • Legal Requirements — we may disclose data if required by law, subpoena, or court order, or if necessary to protect the safety of our users or the public.
  • Business Transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

7. Data Storage & Security

Your data is stored on servers located in the United States. We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS) for all communications.
  • Encryption at rest for stored conversations and sensitive data.
  • Access controls and authentication for all internal systems.
  • Regular security audits and vulnerability assessments.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

  • Account Data — retained for as long as your account is active.
  • Conversations & Generated Content — retained to provide persistent AI memory and your content gallery. You may delete individual conversations or images at any time.
  • Usage & Analytics Data — aggregated data is retained indefinitely. Raw logs are purged after 90 days.
  • Post-Deletion — when you delete your account, we remove your data within 30 days. Encrypted backups may retain residual data for up to 90 days before automatic purge.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data. You can also delete your account directly from Settings.
  • Portability — request your data in a structured, machine-readable format.
  • Restriction — request that we restrict processing of your data in certain circumstances.
  • Objection — object to processing of your data for certain purposes.
  • Withdrawal of Consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@onlyvibe.ai. We will respond within 30 days.

9.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we collect, the right to delete, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as defined under CCPA/CPRA.

9.2 European Economic Area (GDPR)

If you are in the EEA, our legal bases for processing your data are: (a) performance of a contract (providing the Service), (b) legitimate interests (security, fraud prevention, service improvement), and (c) consent (where explicitly provided). You have the right to lodge a complaint with your local data protection authority.

10. Age Requirement

OnlyVibe is strictly for users aged 18 and older. We implement age verification at the point of entry. We do not knowingly collect personal data from anyone under 18. If we discover that a minor has created an account, we will immediately terminate the account and delete all associated data.

11. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using the Service, you consent to these transfers. Where required, we use appropriate safeguards such as standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or email. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: