VibeNote Privacy Policy

1. Definitions

1. Personal information: information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding anonymized information.
2. Sensitive personal information: personal information that may easily cause harm to personal dignity or personal and property safety if leaked or illegally used.
3. VibeNote: all platforms operated by Whale Cloud Technology Co., Ltd., including the VibeNote app, web version, WeChat mini program, and related applications or websites.
4. Affiliates: entities that control, are controlled by, or are under common control with a party.
5. Anonymization: processing personal information so that a specific natural person cannot be identified and the information cannot be restored.

2. How We Collect and Use Your Personal Information

We follow the principles of legality, legitimacy, necessity, and transparency. We collect and use your personal information only for the purposes described in this Policy and will request your consent where required by law.

Account registration, login, and core features

1. Registration and login: when you register a VibeNote account, we collect your mobile phone number to create your account and verify login through SMS verification codes.
2. Note features: when you use note synchronization, recording, optimization, query, or search features, we collect text, images, audio, and related information that you actively submit or generate.

Paid services and order management

1. Virtual goods and payment: if you purchase membership or other paid virtual goods, we collect account and order information and share necessary order details with payment service providers.
2. Service delivery: after payment is completed, we activate the corresponding paid service. When third-party assistance is required, we share only the necessary order information.

Customer support

When you contact customer service, submit feedback, or request dispute handling, we may collect account information, order information, contact information, and support communication records for identity verification and follow-up.

Security and service improvement

1. Security: we may use account information, device information, software usage records, and IP addresses to identify risks, prevent fraud, protect account security, and respond to attacks.
2. Optimization: we may collect device information and usage records to analyze feature usage, improve product functionality, and enhance user experience.

Device permissions

We request device permissions only when needed for product features, and you can enable or disable them in your device settings.

Exceptions where consent may not be required

We may collect and use personal information without consent where permitted by law, including situations involving legal obligations, public security, public health, criminal investigation, protection of vital interests, publicly disclosed information, or secure operation of products and services.

3. Cookies and Similar Technologies

We may use cookies and similar technologies to simplify login, identify account status, and protect account security. You can manage or delete cookies through your browser or device settings.

4. Sharing, Transfer, and Public Disclosure

We do not arbitrarily share, transfer, or publicly disclose your personal information. We may share information with your consent, with affiliates under this Policy, or with partners such as payment providers, security verification providers, and analytics service providers where necessary to provide services.

We transfer personal information only with your consent, as part of mergers, acquisitions, or asset transfers where the recipient remains bound by this Policy, or as required by law. Public disclosure occurs only with your consent or as required by competent authorities after legal review.

5. How We Protect and Retain Your Information

Security measures

1. We use SSL transmission encryption, asymmetric encryption for sensitive information, and access control mechanisms.
2. We maintain information security teams, management systems, emergency plans, security checks, and training.
3. If a personal information security incident occurs, we will activate emergency procedures, take remedial measures, notify you as required by law, and report to regulators where necessary.

Retention

1. Personal information collected by us is stored within the territory of the People’s Republic of China unless otherwise required by law or with your consent.
2. We retain personal information only for the period necessary to achieve the purposes described in this Policy or for the period required by law.
3. After your account cancellation is approved, we delete or anonymize your personal information within the time required by applicable laws and regulations.

6. Your Rights

You have rights to access, correct, supplement, delete, and request account cancellation for your personal information.

Access

You can access account information, order information, and note content through the “Me” page in the VibeNote app or the avatar icon in the lower-left corner of the web version.

Correction and supplementation

If your personal information is inaccurate or incomplete, you may correct or supplement it through the above paths or contact customer service. We will respond within 15 business days.

Deletion

You may request deletion where our processing violates laws, lacks your consent, violates our agreement with you, you no longer use the service, you cancel your account, or we stop providing products or services.

Account cancellation

You can request account cancellation through the VibeNote app “Me” page, the web avatar icon, or manual customer service. We will verify your identity and respond within 15 business days.

Exceptions

We may be unable to respond to requests related to national security, public security, criminal investigation, malicious abuse of rights, damage to lawful rights of others, trade secrets, or legal obligations.

7. Protection of Minors

1. This Product is mainly intended for adults. Minors under 18 must obtain guardian consent before use; minors under 14 must have their guardian read and agree to this Policy on their behalf.
2. We collect and use minors’ personal information only as permitted by law, with guardian consent, or where necessary to protect minors. If we discover that minors’ information was collected without guardian consent, we will delete it promptly.
3. Guardians may contact us through the methods listed in “Contact Us” for questions about minors’ personal information.

8. Updates and Notices

1. We may update this Policy as products, services, or laws change. Updated versions will be posted prominently in the VibeNote app, web version, or other platforms for no less than seven days.
2. For major changes, we may notify you through pop-ups, push notifications, emails, or other methods. Continued use means you agree to the updated Policy. If you disagree, you may stop using VibeNote and request account cancellation.

9. Contact Us

1. For questions, comments, or complaints about this Policy or personal information protection, contact us at vibenote@iwhalecloud.com. We will respond and handle the matter within three business days.
2. For further communication with our personal information protection officer, please email vibenote@iwhalecloud.com.

Appendix 1: Operating System Device Permission List

iOS permissions

Android permissions

Appendix 2: Third-Party SDK Sharing List

1. JPush SDK

2. Umeng+ SDK

3. Tencent Bugly SDK

4. Tencent Browser Service SDK (TBS / X5)

5. Alipay SDK

6. WeChat Open Platform SDK

7. DingTalk Sharing SDK

8. Huawei AppGallery Connect SDK

9. Xiaomi Push SDK

10. Honor Push SDK

11. OPPO Push SDK

12. vivo Push SDK

13. Meizu Push SDK