Privacy Policy

1. INTRODUCTION

ZBD Studio ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [vibedict.com] and use the VibeDict platform (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. DATA CONTROLLER AND PROCESSORS

To ensure transparency and compliance with global data protection laws (such as GDPR), we distinguish between the data we control and the data processed by our trusted partners.

• Data Controller: ZBD Studio is the Data Controller for your account information and content management.
• Data Processors: We utilize the following third-party service providers to process specific data on our behalf:
  • Authentication: Clerk (Manages secure user login and identity).
  • Merchant of Record: Creem (Handles all payments, billing, and tax compliance).
  • AI Infrastructure: Google Gemini (Provides the API for content generation).
  • Product Analytics: PostHog (Analyzes anonymized product usage patterns to improve experience).

3. INFORMATION WE COLLECT AND HOW WE CLASSIFY IT

Based on the nature of our "Community Dictionary" service, we classify data into three distinct categories:

3.1 Personal Account Data (Private)

Information used to identify you and manage your subscription.

• Source: Provided by you via Clerk or Creem.
• Data Points: Email address, user ID, name, avatar, and subscription status.
• Financial Data: We DO NOT store your credit card details. All financial transactions are processed securely by Creem.

3.2 Public Dictionary Contributions (Public & Anonymized)

VibeDict is a collaborative, AI-powered dictionary. To reduce costs and build a shared knowledge base, certain standard dictionary assets generated by you are treated as public contributions.

• Data Points: Word definitions, phonetic guides, AI-generated images representing a word, and pronunciation audio.
• Privacy Status: Public. These assets are anonymized (de-linked from your personal User ID) and become part of the VibeDict public database, accessible to other users looking up the same words.

3.3 Private User Content (Private)

Content that is unique to your personal learning journey and creative expression.

• Data Points:
  • User Stories: Creative stories you generate using specific vocabulary.
  • AI Chat Logs: Your conversational history with the AI regarding specific words.
• Privacy Status: Private. This content is linked strictly to your account and is NOT visible to other users.

4. HOW WE USE YOUR INFORMATION

4.1 Service Provision

We use your information to:

• Authenticate your identity (via Clerk).
• Process payments and prevent fraud (via Creem).
• Generate AI content in response to your prompts.
• Maintain and synchronize your personalized vocabulary lists and learning history.

4.2 AI Data Practices (No Training Policy)

We value your trust regarding Artificial Intelligence.

• API Usage Only: We use third-party APIs (e.g., Google Gemini) solely to generate responses for your specific requests.
• No Training: We do not use your personal data, private stories, or chat logs to train, retrain, or fine-tune our own AI models. Your inputs are used strictly for business logic and content generation purposes.

5. DATA RETENTION

We retain data based on its classification:

• Account & Private Data: We retain your account info and Private User Content (Stories/Chats) for as long as your account is active. If you delete your account, this data will be permanently deleted (subject to a standard 30-day grace period for backup recovery).
• Public Dictionary Contributions: Because word definitions, images, and pronunciations contribute to the collective utility of the dictionary, this anonymized content is retained indefinitely, even after you delete your account. It remains part of the public database but will no longer be associated with your identity.
• Activity Logs: Server logs and technical data may be retained for up to 90 days for security and abuse prevention.

6. DISCLOSURE OF YOUR INFORMATION

We may share information in the following situations:

• Service Providers: With Clerk, Creem, and Google Gemini as described in Section 2.
• Legal Requirements: If required by law or to protect our rights (e.g., in response to a court order).
• Business Transfers: In connection with any merger, sale of company assets, or acquisition.

7. SECURITY OF YOUR INFORMATION

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

8. POLICY FOR CHILDREN

We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.

9. YOUR DATA RIGHTS

Depending on your location, you have the right to access, correct, or delete your personal data.

• To Delete Account: You can delete your account directly within the Application settings. This will remove your Personal Account Data and Private User Content.
• Contact: For any privacy-related requests, please contact us at [email protected].

10. CONTACT US

If you have questions or comments about this Privacy Policy, please contact us at: