VibeMesh Dating Service Privacy Policy
This policy describes VibeMesh’s current dating service. Removing an obsolete language-exchange URL does not erase data or change consent. Contact the operator below about data associated with an earlier service.
Invitation-only applications — private-beta-application-v1
We use your voluntarily provided application email, self-reported age band, city/ZIP, relationship intention, availability, participation choices and optional preferences/life situation for eligibility review, invitation delivery and cohort planning. They are restricted to authorized administrators and not shared with other applicants or members. ZIP does not prove residence; age is self-reported. We do not require photos, identity documents, employer, income or financial records to apply.
Applications and invitation records are retained for up to 90 days; minimal review audits for up to 180 days. Single-use invitation secrets are hashed at rest; confirming an emailed invitation establishes current address control, not background verification. Applying does not grant member, AI, matching, marketing or profile-reveal consent. Those retain their separate existing choices. Optional future-beta update permission is not promotional marketing consent. Contact the published privacy contact for application corrections, email changes or deletion.
Optional launch measurement
Optional beta measurement
Help measure visits and invitation-form usage with a random first-party browser identifier (up to 90 days). No names, messages, answers or third-party contacts. Campaign tags may be attached to your application only if you opt in. Declining does not affect access. Details
With your optional permission, first-party launch measurement uses a random browser identifier for up to 90 days to count visits, invitation-form starts and sharing attempts. It does not collect message contents, interview answers, names or third-party contacts. We retain allowlisted campaign tags (source, medium, campaign, content) and may attach them to your submitted application with that permission. Do not include personal information in those tags. Sharing initiated is not proof of delivery. Aggregate totals may undercount non-consenting browsers or overcount multiple devices. You may turn off optional measurement using the landing page control; this removes the browser identifier and stops future collection. Previously aggregated counts remain. Admin-only tasks, reviews and metric correction records are retained for operational planning until explicitly removed under applicable retention requests. No LinkedIn scraping or automatic LinkedIn integration is used.
Free beta feedback and aggregate measurement
Beta feedback is voluntary. We collect your selected category, optional description and only a screenshot you explicitly choose and agree to upload. Do not include private messages, interview answers, contact details or sensitive information. Images are reduced and stripped of metadata. Feedback is restricted to authorized administrators for up to 90 days and removed with your account through existing deletion controls.
During beta, server-side measurement records the first observed signup, interview start/completion, matching eligibility/display, mutual interest, conversation start, first message and feedback stage. It stores a one-way deduplication key, stage and timestamp for up to 90 days; no message/answer contents, names, email, location, photos, IP addresses or third-party analytics cookies are included. Admin reports show aggregate stage counts, not personal histories. This measurement does not imply consent to any other processing.
Advertising is off
No advertising scripts or ad units are loaded during beta. Future advertising requires a policy and jurisdiction-specific cookie/consent review and appropriate Google-supported consent integration before activation. Private conversations, interviews, compatibility results, profile/reveal, signup/sign-in, consent and report/block screens are excluded. This disclosure is not a claim that a future advertising implementation meets all legal requirements.
Version: privacy-2026-10-21-ai-v1
Optional conversations — member-conversations-v1
Choosing Interested records your private choice. Only mutual interest opens anonymous one-to-one text chat. Messages and transcription text are not used as AI interview answers or compatibility evidence. We store messages for up to 90 days from sending; selected report evidence, descriptions, moderation decisions and minimal access audits are restricted to authorized administrators for up to 180 days. Expired items are denied by the API immediately and physically removed asynchronously. Blocking stops access for both members without deleting report evidence. Account deletion removes the conversation and ordinary messages for both members; restricted reports may remain for their stated safety retention period or applicable legal obligations.
Voice dictation is optional and requires a separate affirmative choice. It uses the same AI transcription processor configured for interview voice input. Audio is held temporarily in browser/server memory, forwarded over an encrypted connection, and not stored as audio by VibeMesh. The processor's retention policy applies; we do not promise zero provider retention. A private, short-lived transcription text retry cache expires after ten minutes. Nothing is sent to your match until you review the text and tap Send.
Names and profile photos are hidden by default. Separate pair-specific consent from both members reveals only chosen display names and approved profile photos. Withdrawing either consent or blocking prevents new authorized access; previously viewed information and screenshots cannot be recalled. No email, phone, address or interview answers are included. People may voluntarily identify themselves in messages: absolute anonymity is not guaranteed. Chosen photos are optional private thumbnails, validated and re-encoded to remove metadata. Selecting a different name or photo cancels prior reveal consent; you must confirm again before the new selection is shared. No public photo upload is enabled by this feature.
How we use your answers
With your agreement, AI processes your interview text to ask questions, create a summary and estimate relationship-style insights. VibeMesh stores your answers and results in its protected MongoDB records and uses your submitted answers and explicit preferences for internal matching. These are interpretations, not a psychological diagnosis or a guaranteed match.
Our authorized team can operate and support the service. We do not automatically show another member your identity, contact details or answers. Sharing or introductions require separate safety and permission steps. Promotional email is optional and separate.
You can pause future matching in My Page without deleting your interview. Existing records remain under the retention and deletion rules below. You can withdraw AI processing or request deletion through the existing privacy controls. Voice processing is optional and uses its separate recording disclosure. See the provider and contact details below; do not submit someone else’s private information.
Membership data: we collect email, age, gender identity (with optional short self-description), gender interests, preferred age range, ZIP/general region, consent timestamps and waitlist status. These preferences are sensitive. They support membership administration and, with matching permission, reciprocal eligibility and compatibility evaluation.
Optional interview and flexibility choices
Through My Page you may explicitly choose individual interview-related messages and separately confirm flexible age ranges and hard limits. Interview access depends on authentication, required profile details, recorded agreements and service availability. With the relevant consent, interviews collect encrypted answers and summaries. Legacy invitation and sandbox controls are separate from ordinary interview access. Acceptance/decline sandbox testing is separate from permission to share your identity/contact details. Original and confirmed age values are retained in restricted audit history for up to one year; no private preferences are publicly disclosed.
Optional relationship-profile preview
When opened by the owner, the free four-question preview uses your selected choices for cautious, rules-based feedback, not a clinical assessment or an AI compatibility score. Anonymous preview choices are encrypted and expire after 24 hours. Saving them requires a one-time email ownership link; an unverified profile lead expires after seven days, and a verified profile and saved preview expire after 180 days unless another applicable member retention period applies. Expired records may remain briefly while MongoDB cleanup runs. You can recover private access by email and request deletion on My Page.
Promotional emails remain a separate optional choice. The current interview introduction clearly asks for one agreement to interview processing, summary, personality insights and internal matching. Earlier interview-only permissions do not authorize matching. None of these permissions is inferred from email verification. The four preview answers are not sent to AI or counted among the twenty interview answers. After explicit interview consent, the existing interview sends authorized answers to AI to prepare questions and your summary. Its provider policy applies; no provider-retention guarantee is made.
First-party attribution accepts only bounded source/medium/campaign labels. Restricted, pseudonymous stage records expire after 90 days; no interview text, audio or email is included in marketing events or sent to advertising services. Linked preview and funnel records are removed on deletion or consent withdrawal. Aggregate operational failures have no member content. A result does not require joining the matching waitlist and is never shared with another member automatically.
Optional profile indicators and your own Q&A
On My Page, you can ask AI to interpret relationship-style indicators from your submitted interview and optional Q&A you explicitly include. Private Q&A drafts are excluded from AI analysis. These estimates are not diagnoses or fixed personality types; you can correct them or mark them inaccurate. New AI drafts require your review and never rewrite your original interview or silently change matching boundaries. Optional Q&A and derived profiles are stored encrypted under your existing member retention period, excluded from default administrator exports, and removed from the live database on deletion or withdrawal of contact or AI-processing consent. Avoid unnecessary identifying or sensitive details. The AI provider’s policy applies to processing.
Optional interview voice input and draft review
Typing always remains available. With a separate affirmative voice choice for this interview and microphone permission, a short recording is sent to AI for transcription. VibeMesh keeps raw audio only temporarily in browser/server memory, never in its database or permanent files. We record the voice-consent version and timestamp with your interview. You can withdraw voice consent in Voice privacy & consent without blocking typing. Microphone permission alone is not permission to send audio to AI. The AI provider’s retention policy applies. A restricted encrypted transcript retry cache expires after five minutes (database cleanup can take longer); it is deleted on withdrawal/deletion. Review and correct transcription before saving. Each saved answer is a recoverable draft. After reviewing all twenty questions, you explicitly finalize the answers; AI summary processing then begins, and completion requires your summary confirmation. Submitted answers are read-only; use the existing correction/privacy pathway for later requests.
Optional geographic preference
Members can explicitly choose willingness to consider adults across the supported Twin Cities launch area: Minneapolis, Saint Paul and supported north, south, east and west communities. Only ZIP codes in the server’s curated launch coverage table qualify. This broad choice is not a distance measurement, a driving-time claim or consent to share personal details. Without an explicit choice, geographic eligibility remains unknown. Neither administrators nor ZIP-code heuristics assign this preference.
Your choices
Joining records separate Terms, Privacy and AI-processing choices. Matching and promotional email are optional; authentication emails do not require marketing permission. Current email control can be established through verified Google authentication or a valid single-use email link. Legacy unverified records keep their actual status and may require additional ownership evidence. Email delivery depends on the configured transport; queueing a message is not proof of inbox delivery. Legacy invitation email choices remain separate. Existing members can return through their established sign-in method; new Google registration establishes a private session only after the original Join form is completed. Availability and account-ownership checks remain server-side.
Open My Page using your secure session or a one-time email sign-in link. Manage consent, deletion and correction requests there. Repeated signup never changes an existing account.
Retention and access
New entries expire 12 months after signup; consent-withdrawn entries expire after 30 days. Correction requests expire after 30 days. Older entries keep their original expiry and actual verification history. Database expiry is asynchronous and may take longer during an outage. Authorized administrators alone can review or export personal information. No member details or demographic counts are public.
MongoDB Atlas provides storage and Render provides hosting. Outbound verification email can use the configured Gmail SMTP mailbox; only the recipient email and a private verification link are sent. Optional interview invitation emails require separate consent and remain gated until the next stage is ready. Logs exclude email addresses, preferences and private tokens. Rate limits temporarily use connection metadata; no raw IP is stored in the waitlist. Redacted audit events and pseudonymous deletion/suppression records are retained up to one year. Provider and operator-managed backup settings require operational verification. Deletion from the live application does not guarantee immediate physical removal from every backup; restoration must honor deletion and consent withdrawal.
Browser and safety
The form keeps a draft only in memory during navigation. Closing or reloading may clear it. Private profile data and sign-in credentials are not stored in browser storage or service-worker caches. Secure cookies keep your member session private.
Basic registration does not require a photo, phone number or exact street address. Optional profile photos and private interview answers are collected when you choose those features under their relevant permissions. Joining is free, does not require completing an interview or making a payment, and guarantees no invitation or match.
Privacy assistance, correction and deletion controls are available in My Page. JavaScript loads the operator’s currently published contact details here.