Privacy Policy

This Privacy Policy describes how CircuitMess, Inc. (“CircuitMess,” “we,” “us,” “our”) collects, uses, discloses, and safeguards information when you use VibeBoy (the “Service”), available at vibeboy.circuitmess.com.

VibeBoy is a general-audience creative coding tool. We take privacy seriously and apply the practices described in this policy to all users. See Section 8 below.

1. Information We Collect

A. Information you provide

Account information: name or display name, email address, and password (stored hashed).
Subscription and billing information: when you purchase VibeBoy Pro, Shopify processes the transaction. We receive limited details (your customer ID, email, subscription status, plan, renewal date). We do not store full payment card details.
Game content: games and other creative content you make in VibeBoy, including code, prompts you send to the AI assistant, and any sprites or assets you create or edit.
Communications: messages you send to support, feedback you submit, and form submissions (e.g., school inquiry, waitlist).

B. Information collected automatically

Device and usage data: IP address, browser type, device identifiers, pages visited, features used, timestamps, and interaction events.
Cookies and similar technologies: used for authentication, preferences, and basic analytics. See Section 6.

C. Information from third parties

Sign-in providers (e.g., Google sign-in): if you choose to sign in with a third-party identity provider, we receive your name and email address as authorized by you.
Shopify: we receive transaction confirmations and subscription lifecycle events (created, renewed, cancelled, refunded) so we can grant or revoke access to VibeBoy Pro.

2. How We Use Information

To operate the Service and provide your account features;
To save and load your games and creative content;
To process AI requests — your chat messages, code, and related context are sent to our AI provider (Anthropic) so the assistant can reply. See Section 5 (AI Processing).
To process subscriptions, deliver Pro features, and send billing-related communications;
To send transactional emails (account notices, subscription confirmations, important security or service notices);
To improve the Service, develop new features, and prevent abuse;
To comply with legal obligations (e.g., tax, accounting, child safety reporting).

3. Legal Bases (EEA/UK Visitors)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing personal data may include:

Contract: to provide the Service you (or your parent/guardian) signed up for;
Legitimate interests: to secure and improve the Service, prevent fraud and abuse, and understand how the Service is used;
Consent: for certain cookies, marketing communications (where applicable), and processing of children’s data;
Legal obligation: to meet tax, accounting, regulatory, and child safety requirements.

4. How We Share Information — Service Providers

We share personal information only as needed to operate the Service. Our primary service providers are:

Anthropic, PBC — provides one of the AI models that powers VibeBoy’s coding assistant. Chat messages, code, and related context you submit to the assistant may be sent to Anthropic for processing. Per Anthropic’s commercial terms, Anthropic does not use this data to train its models.
Shopify Inc. — processes payments and runs the subscription billing engine for VibeBoy Pro.
Google LLC (Firebase, Google Cloud, Vertex AI): hosts our database (account info, game content), provides authentication services, runs basic analytics where enabled, and provides one of the AI models that powers VibeBoy’s coding assistant via Vertex AI. When the assistant routes a request to a Google AI model, your message and related context are sent to Google for processing. Per Google’s Vertex AI terms, this data is not used to train Google’s models.
Vercel Inc. — hosts the VibeBoy web application and serves it to your browser.

We may also share information:

With professional advisors (legal, accounting, auditors) on a confidential basis;
With authorities if required by law, subpoena, or to protect the rights, safety, or property of CircuitMess, our users, or others — including reporting any suspected child safety incident as legally required;
In connection with a business transfer (e.g., merger, acquisition, financing). If such a transfer occurs, we will provide notice and any choices required by law.

We do not sell personal information. We do not share children’s data with advertisers, and we do not show third-party advertising in VibeBoy.

5. AI Processing

VibeBoy’s coding assistant is powered by AI models provided by Anthropic and Google. Different features within the Service may route to one provider or the other; both providers operate under terms that prohibit using your data to train their models. When you interact with the assistant:

Your messages, the relevant portion of your code, and limited context (such as which game template you started from) are sent to whichever AI provider serves that feature for processing;
The assistant’s reply is sent back to your browser and displayed in the chat panel;
We retain a copy of the conversation associated with your account so you can pick up where you left off and so we can provide support if something goes wrong;
Both Anthropic and Google process the data per their commercial terms and do not use it to train their models.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Keep you signed in;
Remember preferences (e.g., theme, sound);
Understand how the Service is used so we can improve it;
Maintain the security of your session.

We do not use cookies or pixels for third-party advertising or for cross-site tracking. You can control cookies through your browser settings; disabling cookies may prevent the Service from working correctly (for example, you may not be able to stay signed in).

7. Data Retention

We keep personal information only as long as necessary to operate the Service, fulfill our contracts with you, comply with legal obligations, and resolve disputes.

Account and game data is retained while your account is active.
Cancelled subscriptions: we keep transaction records as required by tax and accounting law (typically 7 years).
Account deletion: you can request deletion of your account at any time by contacting us. We will delete or anonymize personal data within a reasonable time after the request, subject to legal retention requirements.

8. Account Eligibility & Data Minimization

VibeBoy is a general-audience creative coding tool, and anyone may create an account. We apply the same data practices described in this policy to every user and collect only what is needed to operate the Service.

We do not sell or share personal data for marketing purposes.
We do not show third-party advertising.
We do not use your data to train AI models.

To review, correct, or delete your information, or to delete your account, contact us at contact@circuitmess.com. We may need to verify your identity before fulfilling the request.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, hashed passwords, and access controls on our backend systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. International Transfers

Our service providers (including Anthropic, Shopify, Google, and Vercel) may store and process information in the United States and other countries. Where required by law, we use safeguards designed to protect such transfers, including standard contractual clauses.

11. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including the right to:

Access the personal information we hold about you;
Correct inaccurate or incomplete information;
Request deletion of your information;
Object to or restrict certain processing;
Receive a portable copy of your information;
Withdraw consent (where processing is based on consent);
Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at contact@circuitmess.com. We may need to verify your identity. We will respond within the timeframe required by applicable law.

California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what personal information we collect, the categories of sources, and the categories of third parties with whom we share it; the right to delete; the right to correct; and the right to opt out of the “sale” or “sharing” of personal information as those terms are defined under California law. We do not sell or share personal information for cross-context behavioral advertising. To exercise California rights, contact us at the address above.

12. Third-Party Links

The Service may contain links to third-party sites (for example, external resources or social media). We are not responsible for the privacy practices of those sites.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective date” above will reflect when changes take effect. For material changes, we will provide reasonable notice (e.g., by email or in-app notice) before the change applies.

14. Contact Us

Questions about this Privacy Policy, or want to exercise your rights? Contact us:

CircuitMess, Inc.
651 N Broad St, Suite 206
Middletown, 19709, New Castle, Delaware, USA
Email: contact@circuitmess.com

SETTINGS

TEXT SIZE

TYPEFACE

MOTION

SOUND

PALETTE

BYTE'S VOICE

Company Information