Skip to content
Vibe Console

Privacy Policy

Last updated: October 2, 2026

NesDesign LLC, a US company, operates this website, Vibe Console, Vibe Remote and their account and relay services. This policy explains what we collect to run them. The apps do not use advertising trackers or app-usage analytics; the website uses the analytics described below.

Website

This website uses two analytics services to understand how visitors use it:

We use this data to measure and improve the website. You can block these tools with your browser's privacy settings or a content blocker without affecting the apps.

Accounts and purchases

To check access, we create a random customer identifier and separate device credentials. Our account service stores the devices and confirmed pairings associated with that identifier and checks subscription status through RevenueCat. A subscription may be used on up to three Macs and three iPhones. An iPhone can subscribe or restore without giving us an email address.

Apple handles iPhone in-app payments. For a new Mac web purchase, we first verify your email address and provide that same address to Paddle for checkout; Paddle is the merchant of record. RevenueCat processes purchase and subscription status from Apple and Paddle so we can decide whether access is active. We receive status and order information needed to provide access and support, but not your card details. Apple, Paddle and RevenueCat handle their data under their own privacy policies. Earlier one-time license keys may be checked with Polar solely to preserve those buyers' Mac access.

Email

A verified email is required for a new Mac web purchase and optional for iPhone recovery. We store it encrypted and use it for sign-in and recovery. Resend receives the address and the one-time code to deliver a verification message. Codes expire after 10 minutes. Verification emails contain no tracking pixels or remote images, and we do not use these addresses for marketing. Resend currently retains sent email and log data for 30 days under its published policy. If you email support, we use your address and message to answer you.

Your projects and Remote connections

Your project files and settings are stored on your Mac; a paired iPhone receives the Remote content you choose to view. Agent CLIs, skills and commands you run are third-party software and may contact their own providers. The app also contacts providers you choose for usage readings or custom endpoints, skill sources when you request them, and a link's source when you ask it to download an image. These connections are governed by those services' policies.

When you show a user-added skill card, the Mac app may request its repository owner's public avatar from GitHub (github.com or avatars.githubusercontent.com) and cache it locally; your saved repository list stays on your Mac and is not sent to us.

A paired iPhone can connect to its Mac on the local network for free. That connection does not pass through or require our servers. If you use Connect from anywhere, your devices meet through a relay we operate. Terminal content is encrypted between your devices with keys the relay does not hold, so we cannot read it. The relay carries the encrypted traffic in memory and stores no terminal content or connection history.

While a relayed connection is active, the service processes both devices' IP addresses, connection time, padded traffic sizes and timing, and a pairing identifier. It also uses a subscription identifier to enforce access and limits. Our account service knows which customer and paired devices these identifiers belong to, so this connection metadata can be linked to your customer record. It keeps daily usage counters, not a history of sessions. Raw IP addresses are used during requests but are not stored in account records; keyed safety counters expire by the end of the UTC day.

Retention and deletion

We keep customer, device and pairing records while your account is active. One-time verification data expires after use or its short validity period. Encrypted backups may outlive active records; a current deletion journal prevents deleted accounts from being revived when a backup is restored. Payment providers may retain billing records as required by law or their policies.

You can delete your customer account in either app. This removes its identity, device credentials and confirmed pairings and requests deletion of its RevenueCat customer data, subject to legally required retention. Account deletion does not cancel a subscription billed by Apple or Paddle, remove local projects, or cancel an earlier permanent Mac license. Manage or cancel billing with the merchant separately before deleting the account. You can turn off Connect from anywhere in the Mac app at any time; local-network use remains available.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data. To make a request or ask about this policy, contact support@vibeconsole.dev. We do not sell or share personal data for marketing.