Privacy Policy

DRAFT, NOT LEGAL ADVICE. This draft has not been reviewed by a lawyer and must not be relied on or published as final until it has been. Bracketed items such as [LEGAL ENTITY], [ADDRESS], [JURISDICTION] and [SUPPORT EMAIL] are placeholders, and "Drafting note" lines are questions for the owner and the lawyer; remove both before publishing.

Version: Draft, 2026-10-16 · Effective date: [EFFECTIVE DATE]

This Privacy Policy explains what personal data Vibe Motion collects, why, and what you can do about it. It covers the Vibe Motion desktop app for Windows and macOS (the "app") and the website https://vibemotion.mecorelabs.com/ (the "website").

1. Who we are

The controller of your personal data is [LEGAL ENTITY], trading as ME Core Labs, [ADDRESS] ("we", "us"). Contact us at [SUPPORT EMAIL] about anything in this policy.

[EU / UK REPRESENTATIVE, if required]

2. Summary

• The app analyses audio only on your computer. Audio is never recorded, stored or sent anywhere.
• The app sends no analytics, telemetry or crash reports, and shows no ads.
• Vibe Motion is free and has no accounts. You never sign in, and we keep no profile about you.
• The app contacts our servers only to check for and download updates.
• Donations are handled by Ko-fi. If you choose to donate, you do so on Ko-fi, and Ko-fi and its payment providers process your details. We never see your card or bank details.
• The website's donate section shows content from Ko-fi, which may set Ko-fi's own cookies (Section 4.2).
• The website uses Google Analytics only if you accept analytics cookies.
• We do not sell your personal data and do not use it for advertising.

3. The desktop app

3.1 Audio

To react to music, the app reads the audio your computer is playing (on Windows through the audio output; on macOS through a Core Audio "process tap", which needs the "System Audio Recording" permission) or, if you choose one in Settings, an input such as a microphone. The audio is analysed in memory, on your computer, as it plays. It is never recorded, saved or transmitted.

3.2 No analytics

The app contains no analytics, telemetry, crash-reporting or advertising code.

3.3 Data stored on your computer

The app stores the following on your computer only:

• your settings and window positions;
• a log file for troubleshooting (on Windows in %LOCALAPPDATA%\com.mecorelabs.vibemotion\logs, on macOS in ~/Library/Logs/Vibe Motion; at most about 2 MB). It stays on your computer unless you send it to us for support.

Uninstalling removes the app; the Windows setup's uninstaller also offers to delete the settings.

3.4 When the app connects to the internet

The app connects to our servers only in this case:

Links in the app (the legal documents, the website and Donate) open in your normal web browser, and only when you click them. The website section below then applies to our website, and Ko-fi's privacy policy applies to ko-fi.com. The app itself sends nothing to Ko-fi.

4. The website

4.1 Visiting the website

The website is hosted on Firebase Hosting (Google). Like any web server, it receives your IP address, browser type, the pages requested and the time. Google processes this for us to deliver the website and keep it secure. The download page loads the list of current installers from Google Cloud Storage, and the installers are downloaded from there.

4.2 Donations (Ko-fi)

Vibe Motion is free. If you want to support its development, you can donate on Ko-fi (https://ko-fi.com/mecorelabs), a third-party service.

• On the website, the donate section of the home page embeds Ko-fi's donation panel (a frame loaded from ko-fi.com). To show it, your browser connects to Ko-fi, which receives your IP address and browser information and may read or set its own cookies. Ko-fi decides what it collects through the panel, under its own privacy policy; we do not receive that data.
• In the app, the Donate buttons open the same Ko-fi page in your normal web browser, only when you click them.
• If you donate, you give your details (for example your name, email address, payment details and any message) to Ko-fi and its payment providers, not to us. They process them as independent controllers under their own privacy policies (available on ko-fi.com and on the payment providers' websites). We never see your card or bank details. Ko-fi may share some details of your donation with us, such as the amount, the name you give and your message; we use them only to keep records of donations and to reply to you if you ask us to.

Drafting note: the lawyer should confirm Ko-fi's role (independent controller), which supporter details Ko-fi shares with creators, whether the embedded panel's cookies need consent before it loads (and if so, how it fits the cookie banner), and the links to Ko-fi's privacy policy for the markets where Vibe Motion is offered.

4.3 Analytics (only with your consent)

If you click Accept in the cookie banner, the website loads Google Analytics 4 (through Firebase Analytics) to learn which pages are useful. Until you accept, no analytics code loads and nothing is sent to Google Analytics.

When you accept:

• Google Analytics sets cookies (_ga and _ga_<ID>) and receives your IP address, browser and device information, the pages you visit (without any query string), and an event when you download an installer (which file, and for which platform).
• We never send your name or email address to Google Analytics.
• Advertising features are off: Google signals and ad personalisation are disabled, and advertising consent stays denied.

You can change your choice at any time with Cookie settings at the bottom of every page.

Google Analytics data is kept for [ANALYTICS RETENTION, e.g. 2 or 14 months].

4.4 Browser storage

The website stores your cookie choice in your browser so that it does not ask again. This is not used for tracking.

5. Why we use your data (legal bases)

6. Who receives your data

We use these service providers. They process data on our behalf, under data-processing terms, except where stated:

• Google (Firebase Hosting, Cloud Storage for the downloads and updates, and Google Analytics if you consent).
• Ko-fi and its payment providers (the donation panel on the website and donations; independent controllers of the data they process, see Section 4.2).

We do not sell or rent your personal data, and we do not share it for advertising. We may disclose data if the law requires it, or to protect our rights or the safety of others. If our business is transferred, your data may pass to the new owner under this policy.

7. Where your data is stored (international transfers)

Our downloads and updates are stored in Google Cloud's Singapore region (asia-southeast1), and Firebase Hosting serves the website from Google's global network. Google, Ko-fi and Ko-fi's payment providers may also process data in other countries, including the United States. Where data protection law requires it, transfers by Google rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) included in Google's data-processing terms. Ko-fi and its payment providers transfer the data they control under their own privacy policies.

Drafting note: the lawyer should confirm the transfer mechanisms for the EU/UK and any other markets where Vibe Motion is offered.

8. How long we keep data

Ko-fi and its payment providers keep their own records according to their policies and legal obligations.

9. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• delete your data;
• restrict or object to some processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time (for analytics, use "Cookie settings"), without affecting earlier processing;
• complain to your data protection authority.

There are no accounts, so we hold very little about you. To use these rights, email [SUPPORT EMAIL]. We may need to confirm your identity first. We answer within one month. Requests about the data Ko-fi or its payment providers hold go to them; if you need help with this, email [SUPPORT EMAIL].

To remove data from a computer, uninstall the app (on Windows, let the uninstaller delete the settings).

10. Security

We use encrypted connections (HTTPS) for all communication. Updates are digitally signed, and the app installs an update only after checking its signature.

11. Children

Vibe Motion does not knowingly collect personal data from children. Donating on Ko-fi is not intended for children under [AGE, e.g. 16]. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We will publish the new version on this page with a new effective date, and tell you in advance about material changes, for example on the website.

13. Contact

[LEGAL ENTITY], trading as ME Core Labs · [ADDRESS] · [SUPPORT EMAIL]