Privacy Policy
We built VibePollen with privacy at its core. Here’s exactly what we do with your data.
The short version
- We never sell your health data to anyone, ever.
- We never share your data with advertisers.
- Your symptom logs, medication records, and allergy profile belong to you.
- You can delete all your data permanently at any time from within the app.
- We collect only what we need to make the app work.
- Anonymized, aggregated data may be used to improve forecasts — only with your explicit opt-in.
1. Who we are
VibePollen is a mobile application developed and operated by VIBEMOVING LLC (“we,” “us,” or “our”), a New Jersey limited liability company.
You can contact us at: contact@vibepollen.com
2. What data we collect
Account information
When you create an account, we collect your email address and, optionally, your name. If you sign in with Apple or Google, we receive only the basic profile information those services provide.
Location information
We collect your ZIP code or approximate location to retrieve pollen forecast data for your area. We store this as an H3 geographic cell (approximately 5km radius), not your precise GPS coordinates. We do not track your location continuously or in the background.
Allergy profile
We collect the pollen species you indicate sensitivity to and your sensitivity level. This is health data and is treated with the highest level of protection.
Symptom logs
If you choose to log your symptoms, we store your daily severity ratings, symptom tags, and the date. This is health data and is stored encrypted.
Medication logs
If you choose to log medication, we store the medication name, type, and date taken. This is health data and is stored encrypted.
Usage data
We collect basic app usage information to improve the app. This data is anonymized and never linked to your health information.
3. How we use your data
To provide the service
Your allergy profile, symptom logs, and medication records are used solely to calculate your personal pollen risk score and deliver personalized forecasts and insights.
To improve the app
Anonymized, aggregated symptom data — never linked to your identity — may be used to improve forecast accuracy for all users. This requires your explicit opt-in consent, which you can grant or revoke at any time in Settings.
To contact you
We may send you push notifications for morning pollen alerts and pre-dose reminders. We do not send marketing emails without your separate consent.
4. Health data — special protections
Your allergy profile, symptom logs, and medication records are health data. We apply the following specific protections:
- All health data is encrypted at rest (AWS DynamoDB with AES-256 encryption).
- All health data is transmitted over encrypted connections (HTTPS/TLS 1.2+).
- Health data is never included in push notification payloads.
- Health data is never logged to error monitoring services.
- Health data is never shared with third-party analytics services.
We comply with the California Consumer Privacy Act (CCPA), the FTC Health Breach Notification Rule, and applicable provisions of the Washington My Health My Data Act.
5. Data sharing
We do not sell your personal data. We do not share your personal data with advertisers, data brokers, or marketing companies.
We share data only with the following service providers, and only to the extent necessary to operate the app:
- AWS (Amazon Web Services) — cloud infrastructure and database.
- Google Maps Platform — pollen forecast data. We send only your geographic cell, not your identity.
- RevenueCat — subscription management. Does not receive your health data.
- Apple / Google — authentication and app distribution.
6. Your rights and choices
Delete your account and data
You can permanently delete your account and all associated data at any time: Settings → Delete Account. Deletion removes all health data within 30 days. This action is irreversible.
Export your data
Pro subscribers can export their symptom history and medication logs as a CSV file or PDF doctor report from within the app.
CCPA rights (California residents)
You have the right to know what personal information we collect, to delete your personal information, and to opt out of the sale of personal information (we do not sell personal information). To exercise your rights, contact us at contact@vibepollen.com.
GDPR rights (EEA residents)
You have the right to access, rectify, erase, restrict processing, and port your personal data. Contact us at contact@vibepollen.com.
7. Data retention
We retain your account data for as long as your account is active. When you delete your account, all data is purged within 30 days.
8. Children’s privacy
VibePollen is not directed at children under the age of 13. If you believe we have inadvertently collected information from a child under 13, please contact us at contact@vibepollen.com.
9. Security
We implement industry-standard security measures including encryption at rest and in transit, and access controls. In the event of a data breach, we will notify you in accordance with the FTC Health Breach Notification Rule.
10. Changes to this policy
When we make material changes, we will notify you via push notification and update the “Last updated” date above. Your continued use of VibePollen after changes take effect constitutes your acceptance.
11. Contact us
Email: contact@vibepollen.com
We will respond to all privacy inquiries within 30 days.
Questions about your data?
We read every email and respond within 24 hours on business days.