vibePrivacy you can actually check
Almost everyone writes "we take your privacy seriously." Few publish the table. Here's ours.
| What | Leaves your machine? | Where it lives / where it goes |
|---|---|---|
| Your cards, columns, descriptions, tags and milestones | Never | In the folder you chose, one YAML file per column. |
| Attachments and recorded audio | Never | In attachments/, inside the board's folder. |
| Theme, language and recent folders | Never | Preferences saved locally by your system. |
| Your Claude Code plan usage | Never | Read from a command that runs on your machine and shown only to you. |
| Your account email and password | Leaves | Go to our authentication server (api.vibe.venda.plus) at login, password recovery and password changes. It's the only thing the app sends on its own. |
| What you have a coding agent execute | You decide | Vibe assembles the prompt on your machine and hands it to the CLI of the agent you chose. From there on, its privacy rules apply, not ours. |
| Audio for transcription and translation (on the roadmap) | Opt-in only | Off by default. Without your explicit "yes," the feature doesn't even appear in the app. |
Focus on privacy
Private by default means one concrete thing: sending any data out is your decision, made with eyes open — never a side effect of turning on a feature. Whenever a new data output is added, it arrives turned off, the notice says what leaves, where to and when, and turning it off reverts everything to how it was.
Vibe also doesn't ask for what it doesn't use. No full name, phone number, company, job title or onboarding questionnaire: just email and password.
Local files
Each column of your board is a readable YAML file inside a folder you chose. That's not an implementation detail — it's what makes the board yours: you can version it with git, open it in your editor, sync it your own way, copy it to another machine and pick up where you left off.
There's no proprietary database in the middle, and uninstalling the app deletes nothing. The only way to lose the board is for you to delete the folder.
Zero telemetry or analytics
No analytics. No automatic crash reporting. No silent "ping" telling us you opened the app. This website doesn't load a single third-party script, remote font or tracking pixel — and the server runs with access logging turned off, so not even your IP gets recorded here.
And there's an unglamorous part we insist on telling you: inside the app's code there's an automated test that breaks the build if anyone adds a network call outside the login screen. A promise that depends only on good intentions ages badly.
Simplicity
Two screens: the board and settings. Open it, pick a folder, use it — no project to create, no workspace to configure, no six-step wizard.
When a feature depends on some external program installed on your machine, the app notices it's missing, warns you in plain language, and keeps working without it. No blank screens.
Cost savings
We don't store your board — so we're not paying for storage on your behalf. That's why the subscription is cheap and doesn't grow with the size of your project: the cost of one more user, for us, is close to zero.
The app also shows how much of your coding agent plan has already been used, instead of letting you find out mid-task. Cost you can see up front is cost under control.
What we don't promise
Signing in requires internet
The board is local, but sign-in isn't: the first time you sign in, the app talks to our authentication server. What travels is email, password and the session token — never the board's content.
The board isn't encrypted on disk
Vibe isn't an anonymity tool or a vault. Whoever has access to your folder has access to your cards — the protection is whatever your filesystem provides.
Third-party agents are third parties
When you have Vibe run a card, its content goes to the CLI of the agent you chose — which typically sends it on to the model's provider. Vibe tells you this, but doesn't control what happens next. And it won't pretend to.
On the roadmap: opt-in voice
Recording a card by speaking, then transcribing and translating it automatically, is a planned feature — and it's being built with its rules already defined, precisely because it involves sending audio out:
- Off by default. Without the explicit opt-in, the record button doesn't even appear, and there's no transcription or translation.
- The notice is specific. When you turn it on, you'll read what leaves (the recorded audio), where it goes (the configured address) and when.
- Your own server, if you prefer. There's a Whisper server setting: point it at your own, self-hosted one.
- Vibe's server on the Flow plan. Subscribers to the mid-tier plan can use our server — still only after opting in.
These five principles aren't marketing copy written after the fact: they live in the app's repository as numbered, verifiable rules, and changing any one of them means changing that document.