Privacy Policy

Effective: April 12, 2026 Governing Law: Virginia, USA Operator: CRUCiBLE CAPiTAL SYSTEMS LLC

Your Safety Depends on This App — So Does Your Privacy VibeGuide collects location and proximity data to keep you and your crew safe at festivals. We take that responsibility seriously. This policy explains exactly what we collect, why, and how you stay in control at all times.

1. Who We Are

VibeGuide is operated by CRUCiBLE CAPiTAL SYSTEMS LLC, a Virginia limited liability company. References to "we," "us," or "our" throughout this policy refer to CRUCiBLE CAPiTAL SYSTEMS LLC.

Contact: shawwe@alumni.vcu.edu

2. Scope of This Policy

This policy applies to the VibeGuide mobile application (iOS and Android), our marketing website, and any related services we operate. By using VibeGuide, you agree to the collection and use of information as described here.

3. Location Data Important

Location data is the most sensitive information we collect. We use it exclusively for the safety and navigation features you explicitly activate. Here is the full picture:

What Location Data We Collect

Precise GPS coordinates — collected when you enable live location sharing within a group or activate the panic/emergency button
Background location — only when you explicitly enable the "always on" location mode for your crew; you can revoke this at any time in your device settings
Saved pin locations — GPS coordinates you manually save (stages, campsites, meetup spots)
Route history — temporary path data used to animate compass navigation; not stored server-side beyond your session

Why We Collect Location Data

Purpose	Legal Basis	Retention
Show your location to group members you've approved	Your explicit consent (opt-in per group)	Real-time only; purged 24 hrs after event
Compass navigation to friends or saved pins	Your explicit activation of the feature	Session only; not persisted
Panic button — broadcast precise location to group	Your explicit activation of the panic button	72 hours, then purged
Offline BLE proximity (no internet required)	Your consent to enable Bluetooth sharing	Device only; never uploaded
Service improvement and safety analytics	Legitimate interest; data is aggregated and anonymized	Aggregated data only; no individual records

What We Do NOT Do With Your Location

We do not sell your location data to advertisers, data brokers, or third parties
We do not build advertising profiles from your location history
We do not share your location with law enforcement without a valid legal order — and we will notify you when legally permitted to do so
We do not store continuous background location on our servers; only event-session data is transmitted
We do not use your location outside of the features you have explicitly enabled

Your Location Controls

Per-group sharing — turn on or off location sharing for each group independently
Precision sharing — choose exact location or approximate location (neighborhood-level)
Ghost Mode — go invisible to your group without leaving it
Device-level revocation — deny location permission in iOS/Android Settings at any time; the app remains usable with reduced functionality
Delete location history — request purge of all location records via the app or by emailing us

Location Data Storage and Security

Live location coordinates are transmitted over TLS (HTTPS) to our Supabase-hosted database. Database-level encryption is enabled at rest. Access to raw location records is restricted to a minimal set of engineers and is logged. Location data is partitioned by event session and automatically purged after session expiry windows defined above.

4. Bluetooth (BLE) Proximity Data

VibeGuide uses Bluetooth Low Energy (BLE) mesh networking so your crew can detect each other without internet access — a critical safety feature at festivals with poor cell coverage.

What it collects: Encrypted device identifiers and approximate proximity distances (not precise GPS) exchanged between devices that are mutually in the same group
Where it lives: On your device only. BLE proximity data is never uploaded to our servers
Who can see it: Only group members who have mutually enabled BLE mesh
How to turn it off: Disable Bluetooth sharing in VibeGuide settings or revoke Bluetooth permission in device Settings

5. Emergency Contacts

You may optionally add emergency contacts who will be notified if you activate the panic button. We collect and store their name and contact information (phone/email) with your permission. Emergency contacts are:

Stored encrypted in your account
Only contacted when you or the system (via automatic inactivity alerts you configure) triggers a panic event
Never used for marketing or any purpose beyond emergency notification
Deletable at any time from your profile settings

6. Festival Preferences and App Usage Data

Festival Preferences

We collect genres, artists, and festival history you provide to personalize your event discovery and lineup browsing. This data is tied to your account and is not sold or shared with third parties.

Usage Data

We collect standard app analytics (feature usage, crash reports, session duration) via privacy-respecting tools. This data is aggregated and does not identify you individually.

7. Account Information

When you create an account, we collect:

Display name and profile photo
Email address or phone number (depending on sign-in method)
Authentication tokens from Apple Sign In or Google Sign In

We do not have access to your Apple or Google passwords. Authentication is handled by Apple and Google's secure OAuth flows.

8. How We Share Data

We share your data only in these limited circumstances:

Within your groups: Location and proximity data is shared with group members you have approved
Service providers: Supabase (database/auth), Mapbox (maps), Expo/Apple/Google (app infrastructure) — bound by data processing agreements
Legal requirements: When required by a valid court order, subpoena, or applicable law — we will notify you when legally permitted
Business transfers: If CRUCiBLE CAPiTAL SYSTEMS LLC is acquired or merges, your data may transfer to the successor entity, which will be bound by this policy

We do not sell, rent, or trade your personal data.

9. Data Retention

Live location data: purged 24 hours after event session ends
Panic event location data: purged 72 hours after event
Chat messages: 30 days (Free), 90 days (Pro), unlimited (VIP/Founding)
Account data: retained while your account is active; deleted within 30 days of account deletion request
Anonymized analytics: retained indefinitely in aggregated form

10. Your Rights

Regardless of where you live, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Restrict or object to certain processing activities
Withdraw consent for location sharing at any time without penalty to your account

To exercise any of these rights, email shawwe@alumni.vcu.edu. We will respond within 30 days.

11. Children's Privacy

VibeGuide is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

12. Security

We implement reasonable technical and organizational safeguards including TLS encryption in transit, database encryption at rest, access controls and audit logging for sensitive data, and regular security reviews. No system is 100% secure; we will notify you of any breach affecting your personal data as required by law.

13. Third-Party Links and Services

The app may link to external event listings, artist pages, or festival websites. We are not responsible for the privacy practices of those sites. Review their policies independently.

14. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via in-app notification or email at least 14 days before they take effect. Continued use of VibeGuide after changes take effect constitutes acceptance of the updated policy.

15. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Virginia, without regard to conflict-of-law principles. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts located in Virginia.

16. Contact Us

CRUCiBLE CAPiTAL SYSTEMS LLC

Virginia, United States

Email: shawwe@alumni.vcu.edu

For privacy requests, include "Privacy Request" in your subject line. Response within 30 days.