Legal
Privacy Policy
Last updated: October 2026
Vybe Health Inc. ("Vybe," "we," "us," or "our") is built on a simple promise: your health data is yours. This Privacy Policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to vybe.health and our other websites, the Vybe app, Vybe devices, and any service that links to this policy (together, the "Services").
If you live in Washington, Nevada, or another state with a consumer health data law, please also read our Consumer Health Data Privacy Policy, which controls for consumer health data where it applies.
1. The short version
We do not sell your personal information, and we do not sell your health data.
We do not use your health data for advertising, and we do not share it for cross-context behavioral advertising.
Your health data is stored on infrastructure we control, not in a device maker's cloud.
We only share your health data with a coach, team, employer program, clinician, or researcher when you choose to, and you can stop that sharing at any time.
You can access, export, correct, and delete your data.
2. Information we collect
Information you give us
Contact and account information: name, email address, phone number, password, and account preferences, including when you join the waitlist or create an account.
Profile information you choose to add: such as age range, height, weight, sex, goals, and similar details used to personalize your insights.
Logs and check-ins: meals, hydration, mood, energy, notes, plans, and other entries you record in the app.
Communications: messages, support requests, survey answers, and feedback you send us.
Organization information: if you contact us about enterprise, research, developer, or partner programs, your name, role, organization, and business contact details.
Information from your Vybe device
When you wear a Vybe device and use the app, we process sensor and derived data such as heart rate, heart rate variability, blood oxygen, skin temperature, breathing rate, stress estimates, sleep, activity, and other wellness estimates the device and app support. Some of this information is health data. See Section 5.
Information from services you connect
If you choose to connect another service, such as Apple Health, a calendar, a weather or location service, or a patient portal account, we receive the information you authorize that service to share. You control these connections and can turn them off at any time in the app or in the other service's settings.
Information collected automatically
Device and usage information: app and browser type, operating system, device identifiers, IP address, pages and screens viewed, features used, diagnostics, and crash reports.
Location: approximate location from your IP address. If you allow it, the app may use more precise location to provide features such as weather, travel, and time zone context. You can turn this off in your device settings.
Cookies and similar technologies: see our Cookie Policy.
3. How we use information
To provide, operate, and personalize the Services, including your scores, trends, and insights.
To create and secure your account, authenticate you, and prevent fraud, abuse, and security incidents.
To manage the waitlist, founding batch allocation, orders, shipping, warranty, and support.
To communicate with you about your account, the Services, and updates, and, where you agree, product news. You can opt out of marketing at any time.
To improve and develop the Services, including our algorithms, using data that is de-identified or aggregated wherever reasonably possible.
To run enterprise, research, or partner programs you choose to join, as described when you join.
To comply with law, respond to lawful requests, enforce our terms, and protect the rights, safety, and property of you, Vybe, and others.
We do not use your health data to make decisions that produce legal or similarly significant effects about you, such as decisions about credit, housing, insurance, or employment.
4. How we share information
We share personal information only as described below.
With people and organizations you choose: such as a coach, team, employer or university program, clinician, or research study. We share only what you authorize, and you can withdraw permission at any time. Organizations in enterprise programs see group patterns unless you choose to share individual data with them.
With service providers: companies that host our systems, process payments, ship products, provide customer support tools, send messages, or provide security and analytics services for us. They are bound by contract to use the information only to provide services to us and to protect it.
For legal reasons: when we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the safety of any person, to address fraud or security issues, or to enforce our terms. Where the law allows, we will try to notify you first and will push back on requests we believe are overbroad.
In a business transfer: if Vybe is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to commitments at least as protective as this policy. We will notify you before your health data becomes subject to a different privacy policy.
De-identified or aggregated information: which cannot reasonably be used to identify you. We maintain it in de-identified form and do not attempt to re-identify it, and we contractually prohibit recipients from re-identifying it.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We have not done either in the past twelve months.
5. Health data
Health data is sensitive, and we treat it that way. We collect and use health data to provide the features you request. For any other purpose, we ask for your consent first. We do not sell health data, and we do not share it for advertising. You can see who your health data has been shared with and withdraw your consent at any time in the app or by contacting us.
Vybe is generally not a "covered entity" or "business associate" under HIPAA when you use our consumer Services. If you use Vybe through a health care provider or health plan that has its own agreement with us, that provider's HIPAA notice may also apply to the information it receives.
6. Your choices and rights
Every Vybe user, wherever you live, can ask us to:
Confirm whether we process your personal information and access a copy of it.
Export your data in a portable format.
Correct inaccurate information.
Delete your account and personal information.
Withdraw consent you have given, including for health data sharing.
Opt out of marketing emails and texts.
Depending on where you live, you may have additional rights under state law, including the right to know the categories and specific pieces of information we hold, the right to limit use of sensitive personal information, the right to opt out of sale, sharing, targeted advertising, and certain profiling, and the right to a list of third parties we have disclosed your data to. We honor these rights for all users, regardless of state, where we reasonably can.
How to make a request
Use the privacy settings in the app, or email justvybe@vybe.health with the subject line "Privacy Request." We will verify your request using information associated with your account, and we may ask for more information if needed to protect your account. You may use an authorized agent, and we may ask the agent for proof of authorization and ask you to confirm your identity directly.
We respond within 45 days. If we need more time, up to an additional 45 days where the law allows, we will tell you why.
Appeals
If we decline your request, you can appeal by replying to our decision or emailing justvybe@vybe.health with the subject line "Privacy Appeal." We will respond to your appeal in writing within the time the law requires. If you are not satisfied, you may contact your state Attorney General.
Global Privacy Control
We honor Global Privacy Control (GPC) browser signals as a request to opt out of sale and sharing for that browser and, where we can link it, your account.
No discrimination
We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.
7. Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, least-privilege access, and monitoring. No system is perfectly secure, so we cannot guarantee absolute security. If a breach of your health information occurs, we will notify you and the appropriate regulators as required by law, including the Federal Trade Commission's Health Breach Notification Rule where it applies.
8. Data retention
We keep personal information for as long as your account is active and as needed to provide the Services. When you delete your account, we delete or de-identify your personal information within a reasonable period, generally within 30 days from active systems and within 6 months from backups, unless we must keep certain information longer to comply with law, resolve disputes, prevent fraud, or enforce our agreements. Waitlist information is kept until you unsubscribe, ask us to delete it, or the waitlist ends.
9. Children
The Services are intended for adults 18 and older. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.
10. Where we process data
Vybe is based in the United States, and we process and store information in the United States. If you access the Services from outside the United States, you understand your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
11. Additional notice for California residents
In the past twelve months we have collected the following categories of personal information described in the California Consumer Privacy Act: identifiers; customer records; characteristics of protected classifications (such as age or sex, if you provide them); commercial information; internet or network activity; approximate and, with your permission, precise geolocation; audio or electronic information you send us; inferences used to personalize your insights; and sensitive personal information, including account login and health information. Sources, purposes, and recipients are described in Sections 2 through 4. We use sensitive personal information only for purposes permitted by law, such as providing the Services you request, and not to infer characteristics about you. California residents may also request information about disclosures for direct marketing purposes under Civil Code Section 1798.83; we do not make those disclosures.
12. Changes to this policy
We may update this policy as Vybe grows. We will post the updated policy with a new date. If we make a material change, especially one that affects health data, we will notify you by email or in the app before it takes effect and, where required, ask for your consent.
13. Contact us
Vybe Health Inc.
501 Fayetteville St
Raleigh, NC 27601
Email: justvybe@vybe.health