Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Vibeit (“Vibeit”, “the app”, “we”, “us”) handles information when you use the Vibeit app on iPadOS, iOS, and macOS. Vibeit is a native Python notebook IDE designed to run on your device. We built it to be private by default: your code runs in an on-device Python kernel, and your files, credentials, and API keys stay on your device.

The short version. We do not operate analytics or advertising servers, and the app contains no third-party tracking or advertising SDKs. We do not sell your personal information. Data leaves your device only when you use a feature that requires it — such as calling an AI provider with your own key, connecting to a remote server you configured, or downloading a package.

1. Information stored on your device

The following stay on your device (and in your own iCloud/Files storage if you choose to save there). We do not receive copies of them:

Notebooks, scripts, and workspace files you create or open.
Python execution — code runs in a local kernel; your code and its output are not sent to us.
Credentials and secrets — API keys, SSH passwords, key passphrases, and Cloudflare Access tokens are stored in the device Keychain and are never written into notebooks, logs, or transmitted to us.
App settings — preferences such as theme, language, and host profiles.

2. Features that send data to third parties

When you choose to use these features, data is sent to the relevant third party under their privacy policies. Vibeit acts only as the client.

AI assistance

If you enable AI features and use a cloud AI provider (for example OpenAI or Anthropic), the prompts you send and the relevant code or context are transmitted to that provider using the API key or sign-in you supplied, so it can return a response. Apple Intelligence / on-device foundation models, where used, run on your device. We do not receive your prompts or completions.

Remote connections (SSH/SFTP and Cloudflare Access)

If you configure a remote host, Vibeit connects directly to the server you specify to run commands, transfer files, or run Python. For hosts reached through Cloudflare Access, a sign-in window authenticates with your identity provider and stores the resulting access token in the Keychain. We do not operate these servers and do not receive your remote session contents.

Package downloads

Managed packages are fetched over HTTPS from public package indexes (including this GitHub-hosted registry). As with any web request, the hosting provider may process your IP address and request metadata to deliver the files.

3. Subscriptions and payments

Vibeit subscriptions are sold through Apple In-App Purchase. Apple processes your payment and manages your subscription; we never receive or store your payment card details. The app receives only your subscription/entitlement status from Apple (via StoreKit) to unlock features. Manage or cancel your subscription anytime in your Apple Account settings.

4. Information we collect

We do not maintain user accounts and do not run a backend that collects your personal information. The app does not include third-party analytics or advertising. If you contact us for support by email, we will receive the information you choose to include in your message.

5. Data security

Secrets are stored using the operating system Keychain. Network connections use TLS/SSH encryption. No method of storage or transmission is 100% secure, but we rely on Apple platform protections and encrypted transport to safeguard your information.

6. Data retention and deletion

Because your data lives on your device, you control it. You can delete files, hosts, and credentials in the app, and removing the app deletes its local data and Keychain items associated with it. Data already sent to a third party (e.g., an AI provider or your remote server) is governed by that party’s policies.

7. Children’s privacy

Vibeit is a developer tool and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

8. International users and your rights

Depending on where you live (for example, under the EU GDPR or California CCPA/CPRA), you may have rights to access, correct, delete, or restrict the processing of your personal information. Because we do not collect or store your personal information on our own servers, most such requests are fulfilled directly on your device or with the relevant third-party provider. You can also contact us using the details below.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice as appropriate. Continued use of the app after an update constitutes acceptance of the revised policy.

10. Contact

Questions about this policy or your privacy? Contact us at aroluo@icloud.com.