Skip to main content
VibeBoy

Legal

Privacy Policy

Effective date: May 3, 2026

This Privacy Policy describes how CircuitMess, Inc. (“CircuitMess,” “we,” “us,” “our”) collects, uses, discloses, and safeguards information when you use VibeBoy (the “Service”), available at vibeboy.vercel.app.

VibeBoy is designed for children and teens. We take children’s privacy seriously. Section 8 (Children’s Privacy) below explains in plain language what data we do and do not collect from kids, and what rights parents have.

Company Information

CircuitMess, Inc.
651 N Broad St, Suite 206
Middletown, 19709, New Castle, Delaware, USA
Email: contact@circuitmess.com

1. Information We Collect

A. Information you (or a parent) provide

  • Account information: name or display name, email address, password (stored hashed), and, where applicable, parental consent records.
  • Subscription and billing information: when you purchase VibeBoy Pro, Shopify processes the transaction. We receive limited details (your customer ID, email, subscription status, plan, renewal date). We do not store full payment card details.
  • Game content: games and other creative content you make in VibeBoy, including code, prompts you send to the AI assistant, and any sprites or assets you create or edit.
  • Communications: messages you send to support, feedback you submit, and form submissions (e.g., school inquiry, waitlist).

B. Information collected automatically

  • Device and usage data: IP address, browser type, device identifiers, pages visited, features used, timestamps, and interaction events.
  • Cookies and similar technologies: used for authentication, preferences, and basic analytics. See Section 6.

C. Information from third parties

  • Sign-in providers (e.g., Google sign-in): if you choose to sign in with a third-party identity provider, we receive your name and email address as authorized by you.
  • Shopify: we receive transaction confirmations and subscription lifecycle events (created, renewed, cancelled, refunded) so we can grant or revoke access to VibeBoy Pro.

2. How We Use Information

  • To operate the Service and provide your account features;
  • To save and load your games and creative content;
  • To process AI requests — your chat messages, code, and related context are sent to our AI provider (Anthropic) so the assistant can reply. See Section 5 (AI Processing).
  • To process subscriptions, deliver Pro features, and send billing-related communications;
  • To send transactional emails (account notices, subscription confirmations, important security or service notices);
  • To improve the Service, develop new features, and prevent abuse;
  • To comply with legal obligations (e.g., tax, accounting, child safety reporting).

3. Legal Bases (EEA/UK Visitors)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing personal data may include:

  • Contract: to provide the Service you (or your parent/guardian) signed up for;
  • Legitimate interests: to secure and improve the Service, prevent fraud and abuse, and understand how the Service is used;
  • Consent: for certain cookies, marketing communications (where applicable), and processing of children’s data;
  • Legal obligation: to meet tax, accounting, regulatory, and child safety requirements.

4. How We Share Information — Service Providers

We share personal information only as needed to operate the Service. Our primary service providers are:

  • Anthropic, PBC — provides one of the AI models that powers VibeBoy’s coding assistant. Chat messages, code, and related context you submit to the assistant may be sent to Anthropic for processing. Per Anthropic’s commercial terms, Anthropic does not use this data to train its models.
  • Shopify Inc. — processes payments and runs the subscription billing engine for VibeBoy Pro.
  • Google LLC (Firebase, Google Cloud, Vertex AI): hosts our database (account info, game content), provides authentication services, runs basic analytics where enabled, and provides one of the AI models that powers VibeBoy’s coding assistant via Vertex AI. When the assistant routes a request to a Google AI model, your message and related context are sent to Google for processing. Per Google’s Vertex AI terms, this data is not used to train Google’s models.
  • Vercel Inc. — hosts the VibeBoy web application and serves it to your browser.

We may also share information:

  • With professional advisors (legal, accounting, auditors) on a confidential basis;
  • With authorities if required by law, subpoena, or to protect the rights, safety, or property of CircuitMess, our users, or others — including reporting any suspected child safety incident as legally required;
  • In connection with a business transfer (e.g., merger, acquisition, financing). If such a transfer occurs, we will provide notice and any choices required by law.

We do not sell personal information. We do not share children’s data with advertisers, and we do not show third-party advertising in VibeBoy.

5. AI Processing

VibeBoy’s coding assistant is powered by AI models provided by Anthropic and Google. Different features within the Service may route to one provider or the other; both providers operate under terms that prohibit using your data to train their models. When you interact with the assistant:

  • Your messages, the relevant portion of your code, and limited context (such as which game template you started from) are sent to whichever AI provider serves that feature for processing;
  • The assistant’s reply is sent back to your browser and displayed in the chat panel;
  • We retain a copy of the conversation associated with your account so you can pick up where you left off and so we can provide support if something goes wrong;
  • Both Anthropic and Google process the data per their commercial terms and do not use it to train their models.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you signed in;
  • Remember preferences (e.g., theme, sound);
  • Understand how the Service is used so we can improve it;
  • Maintain the security of your session.

We do not use cookies or pixels for third-party advertising or for cross-site tracking. You can control cookies through your browser settings; disabling cookies may prevent the Service from working correctly (for example, you may not be able to stay signed in).

7. Data Retention

We keep personal information only as long as necessary to operate the Service, fulfill our contracts with you, comply with legal obligations, and resolve disputes.

  • Account and game data is retained while your account is active.
  • Cancelled subscriptions: we keep transaction records as required by tax and accounting law (typically 7 years).
  • Account deletion: you can request deletion of your account at any time by contacting us. We will delete or anonymize personal data within a reasonable time after the request, subject to legal retention requirements.

8. Children’s Privacy

VibeBoy is intended for children and teens, including users under 13. We design the Service with their privacy in mind and comply with applicable children’s privacy laws, including the U.S. Children’s Online Privacy Protection Act (COPPA) and equivalent rules under GDPR-K.

What we collect from children

For users we know to be under 13, we limit our collection to what is needed to operate the Service. This typically includes:

  • An email or sign-in identifier (provided by a parent);
  • A display name (which can be a nickname; we encourage parents to choose one that is not the child’s real name);
  • Game content the child creates;
  • AI chat messages associated with their game-creation activity;
  • Basic usage data needed to operate and secure the Service.

What we do NOT do

  • We do not sell or share children’s data for marketing purposes.
  • We do not show third-party advertising to children (or to anyone).
  • We do not require children to disclose more personal information than is reasonably necessary to use a feature.
  • We do not use children’s data to train AI models.

Parental rights

Parents and legal guardians have the right to:

  • Review the personal information we have about their child;
  • Request that we correct or delete that information;
  • Refuse to allow further collection or use of their child’s information; and
  • Cancel the account at any time.

To exercise any of these rights, contact us at contact@circuitmess.com from the email address associated with the parent or guardian. We may need to verify your identity before fulfilling the request.

If you believe a child has provided us personal information without the required parental consent, please contact us so we can investigate and, if appropriate, delete the information.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, hashed passwords, and access controls on our backend systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. International Transfers

Our service providers (including Anthropic, Shopify, Google, and Vercel) may store and process information in the United States and other countries. Where required by law, we use safeguards designed to protect such transfers, including standard contractual clauses.

11. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Request deletion of your information;
  • Object to or restrict certain processing;
  • Receive a portable copy of your information;
  • Withdraw consent (where processing is based on consent);
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at contact@circuitmess.com. We may need to verify your identity. We will respond within the timeframe required by applicable law.

California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what personal information we collect, the categories of sources, and the categories of third parties with whom we share it; the right to delete; the right to correct; and the right to opt out of the “sale” or “sharing” of personal information as those terms are defined under California law. We do not sell or share personal information for cross-context behavioral advertising. To exercise California rights, contact us at the address above.

12. Third-Party Links

The Service may contain links to third-party sites (for example, external resources or social media). We are not responsible for the privacy practices of those sites.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective date” above will reflect when changes take effect. For material changes, we will provide reasonable notice (e.g., by email or in-app notice) before the change applies.

14. Contact Us

Questions about this Privacy Policy, or want to exercise your rights? Contact us:

CircuitMess, Inc.
651 N Broad St, Suite 206
Middletown, 19709, New Castle, Delaware, USA
Email: contact@circuitmess.com