Privacy Policy

1. About Vybe

Vybe is South Africa's real-time nightlife intelligence platform, operated by Cloudrift Technologies (Pty) Ltd. Vybe allows users to discover live venues, purchase event tickets, check in at venues, and connect with artists and promoters. This policy governs all personal information collected through the Vybe app and related services.

2. Information We Collect

We collect the following categories of personal information when you use Vybe:

• Account Information: Display name, email address, and role (Explorer, Artist, Promoter, or Venue Owner)
• Authentication Data: Email address used for OTP verification and sign-in
• Location Data: Approximate location (with your permission) to show nearby venues and calculate distances
• Usage Data: Check-ins, venue saves, ticket purchases, and in-app activity
• Venue Data (Owners): Venue name, address, contact details, photos, and operating hours
• Financial Data: Ticket purchase amounts (we do not store payment card details)
• Profile Photos: Optional profile pictures uploaded by users
• Device Data: Device type, OS version, and app version for technical support

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and improve the Vybe application and related services
• Authenticate your identity and secure your account via OTP verification
• Process ticket purchases and send confirmation notifications
• Show relevant venue recommendations based on your location
• Send transactional emails (OTP codes, ticket confirmations, event invites)
• Calculate and display Vybe Score points and leaderboard rankings
• Notify fans when their favourite artists check in at venues
• Provide venue owners with real-time analytics about their venue
• Comply with legal obligations under South African law

4. Legal Basis for Processing (POPIA)

Under POPIA, we process your personal information on the following grounds:

• Contractual necessity: To provide the Vybe services you have signed up for
• Legitimate interests: To improve our services, prevent fraud, and ensure platform security
• Consent: For location access and optional marketing communications
• Legal obligation: To comply with applicable South African laws

5. Data Sharing

We do not sell your personal information. We share data only with:

• Firebase (Google LLC): Authentication, database, storage, and analytics — processed under Google's Terms of Service and Data Processing Addendum
• SendGrid (Twilio Inc): Transactional email delivery (OTP codes, ticket confirmations, and notifications)
• Google Maps Platform: Location services and mapping features within the Vybe app
• Law enforcement: Where required by South African law or valid court order

6. Data Storage & Security

Your data is stored on Firebase (Google Cloud infrastructure). We implement industry-standard security measures including:

• Firestore Security Rules with role-based access control
• Firebase Authentication for all user sessions
• HTTPS encryption for all data in transit
• Firebase Storage rules restricting file access to authorised users
• OTP rate limiting to prevent brute force attacks
• Admin 2-Factor Authentication for the Vybe admin portal

7. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services. You may request deletion of your account and all associated data at any time through the Vybe app under Settings → Delete Account, or by emailing support@cloudrifttech.co.za.

8. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za

To exercise any of these rights, email us at info@cloudrifttech.co.za.

9. Children's Privacy

Vybe is intended for users aged 18 and older, consistent with its nightlife focus. We do not knowingly collect personal information from persons under 18. If we become aware that a minor has created an account, we will delete it promptly. If you believe a minor has registered, contact us at info@cloudrifttech.co.za.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or in-app notification. Continued use of Vybe after changes constitutes your acceptance of the updated policy.

11. Contact Our Information Officer

For any privacy-related queries, data access requests, or complaints, please contact: