Privacy Policy
Last updated: 1 September 2026
Who we are
Ever After Vibes is an original, book-inspired music streaming service and store, part of the Ever After Group. For data protection purposes, the site operator is the data controller for personal data processed through Ever After Vibes (everaftervibes.com and the Ever After Vibes mobile app). You can contact us about anything in this policy through our contact form or at hello@everaftervibes.com.
What we collect
- Account data. Your email address, display name, and sign-in identifiers, handled by Firebase Authentication (including Google sign-in if you use it). We never see or store your password.
- Listening and library data. Liked tracks, bookmarks, purchases you own, the fan soundtracks you build, and playback history needed to run features like "jump back in".
- Vibe Journal content. The journal entries you write, the songs generated from them, cover images you upload, and the albums and stories you choose to publish. Journal pages are private unless you publish them.
- Creator data. If you join the creator program: your handle, the agreement version you signed, your uploads, sales records, and your Stripe Connect account id for payouts.
- Purchase data. Records of what you bought and your subscription status. Payments are processed by Stripe; your card details go directly to Stripe and never touch our servers.
- Listening analytics. Pseudonymous play sessions: which track and album you played, how far into it you got, active listening time, whether you finished or skipped it, likes, bookmarks and shop clicks made while it played, referral and campaign tags, language, device class, and a coarse country code when our host supplies one. Your identity in these records is a one-way hash, and we do not store the raw IP address or full user-agent string in them. We use this to understand which songs and albums hold listeners and to improve the catalogue and the player.
- Technical data. Standard server logs (IP address, device and browser information) and, if you opt in on mobile, a push notification token.
- Location data for Place Vibes. Ever After Vibes accesses precise or approximate device location only when you choose a Place Vibes feature that needs it. If you select "Where I'm standing", the mobile app or website requests your precise location and sends the coordinates to our service so it can pin the Place Vibe. The exact pin, place name, and spot name are stored with the published Place Vibe and are visible to people using the Places atlas. If you turn on "Nudge me when I pass a vibe" on Android, Ever After Vibes collects location data in the background, including when the app is closed or not in use. Android normally checks about every 15 minutes when the device permits it, sends the current coordinates to our nearby-vibes service, and uses the result to show a local notification when a published Place Vibe is within about 350 metres. Those proximity-check coordinates are not added to your account or used to create a location history. We do not use location data for advertising or listening analytics.
Your location choices
Location features are optional and are off until you choose them. You can create a Place Vibe using a named spot found through our map search instead of device location, or choose "Just the town" to publish it without an exact pin. You can turn nearby-vibe nudges off inside Places at any time, and you can withdraw foreground or background location access in your device settings. Turning location access off does not stop you using the rest of Ever After Vibes.
Why we use it (lawful bases)
- To provide the service (contract). Accounts, streaming, purchases, subscriptions, journal generation, creator payouts.
- To keep the service safe and improve it (legitimate interests). Security logging, abuse prevention, fixing bugs, understanding what features are used.
- With your consent. Device location for the optional Place Vibes features, background location for nearby-vibe nudges, push notifications, and any optional marketing. You can withdraw consent at any time.
- Legal obligations. Tax and accounting records for purchases, and responding to lawful requests.
Who we share it with
We do not sell your personal data. We use a small number of processors to run the service: Google (Firebase and Google Cloud: authentication, database, storage, hosting), Stripe (payments and creator payouts), and music generation providers used by the Vibe Journal (your journal text is sent to the generation service to create your song; it is not used to build advertising profiles). Some of these providers process data outside the UK, including in the United States; where they do, transfers are protected by UK-approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or the ICO's International Data Transfer Agreement.
Google Cloud processes Place Vibes coordinates for us as our hosting and database provider. We do not give your device location to advertisers or music generation providers. If you choose to publish an exact Place Vibe pin, that pin is public by design so other listeners can discover the place and its music.
How long we keep it
Account and library data is kept while your account is active and deleted or anonymised when you delete your account, except purchase and payout records we must keep for up to 6 years for tax and accounting law. An exact Place Vibe pin is kept with its published journal entry until you delete that entry or your account. Coordinates sent only for a nearby-vibe check are used to answer that request and are not stored as location history. Routine server logs are kept for a short rolling window.
Your rights
Under UK GDPR you have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to processing, and withdraw consent where processing is based on consent. Use our contact form or email hello@everaftervibes.com to exercise any of these; we respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Children
Ever After Vibes is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has created an account, contact us and we will delete it.
Cookies and local storage
See our Cookie notice for what we store on your device.
Changes
If we make material changes to this policy we will update this page and, where appropriate, tell you in the app or by email.