Privacy

Analytic Vibes is a local-first app. It has no backend, no account system and no analytics SDK of its own. This policy is short because the app collects almost nothing, not as a promise, but because there is no server for anything to be sent to.

What stays on your device

All of the following is stored on your device and nowhere else:

• Vendor credentials. Your PostHog, Supabase and RevenueCat keys are written to the iOS Keychain and read from there when a query runs.
• Your name. Used only for the greeting on the dashboard. It is stored in the app’s shared container.
• Your configuration. Projects, connections, metric cards and their order, preferences, and cached metric history and snapshots.

Because none of this is on a server, it does not transfer to a new device and we cannot recover it for you. Deleting the app deletes it.

What the app reads, and how

The app queries the analytics and database services you connect, using the credentials you provide, directly from your device. Those queries are read-only. The app cannot create, modify or delete anything in your connected projects, and it never sends events of its own to them. A Supabase service_role key is rejected before any network request is made, because it bypasses row level security.

Your use of those services is governed by their own privacy policies, not this one.

Purchases

Subscriptions are sold through the Apple App Store and managed with RevenueCat, which validates the transaction and tells the app whether a subscription is active.

RevenueCat receives only what a purchase requires:

• the App Store transaction and the product identifier bought;
• an anonymous app user ID that RevenueCat generates itself, not tied to a name or an email address.

It does not receive your metrics, your revenue figures, your project or connection names, or any vendor API key or token. There is no code path in the app that could send them.

Apple processes the payment. We never see your card details. Apple’s handling of that data is covered by Apple’s privacy policy.

The website

This site is hosted on Vercel, which records standard server logs including IP addresses for security and operational purposes.

The site measures its own traffic with PostHog, processed in the EU. By default this is anonymous: no cookie is set, nothing is stored in your browser, and a returning visitor is indistinguishable from a new one. If you accept the consent banner, PostHog sets a cookie so that your visits are counted as one person. Declining, or simply ignoring the banner, leaves the anonymous default in place. The site sets no advertising cookies either way.

If you join the waitlist, the email address you enter is stored by our email provider for the sole purpose of telling you when the app is released. It is not sold, rented or shared. Every message includes an unsubscribe link, and you can ask us to delete your address at any time by writing to hello@aurenix-cl.com.

Your rights

If you are in the EEA or the UK, you have the right to access, correct, export, restrict and delete personal data we hold about you, and to complain to your local supervisory authority. In practice the only personal data we hold is a waitlist email address, if you gave us one. Everything else lives on your device, where it is already yours. Write to hello@aurenix-cl.com and we will respond within 30 days.

Children

The app is a developer tool and is not directed at children under 13. We do not knowingly collect data from them.

Changes

If this policy changes materially, the date at the top of this page will change with it, and the change will be described in the app’s release notes.

Contact

Aurenix Creative Labs, hello@aurenix-cl.com