Privacy Policy

Last updated: 4 October 2026

This policy explains what personal data Vibe Omix collects, why, who receives it, how long it is kept and what you can do about it. It is written to serve as the notice required by India's Digital Personal Data Protection Act, 2023.

1. Who is responsible for your data

Vibe Omix (vibeomix.in and the Vibe Omix Android app) is operated by Vibe Omix in India. For this policy, Vibe Omix is the "Data Fiduciary".

Privacy contact and grievance officer: Grievance Officer, Vibe Omix
Email: omixmotel@gmail.com

2. What we collect and why

We collect only what the features you use need. You give us most of it yourself.

Personal data Vibe Omix processes
Data	Why we need it	Who can see it
Username	To create and identify your account and sign you in.	Public. Other users can search for it and see it on your profile, messages and playlists.
Password	To protect your account. Stored only as a salted one-way hash (scrypt); we cannot read it.	Nobody.
Phone number and country code	To keep one account per person, to help you recover your account through support, and to link a Premium purchase to your account.	You, our administrators and, when you buy Premium, our payment provider. Never shown on your public profile.
Profile emoji, bio, followers and following	Optional. Shown on your profile so friends can find you.	Public.
Liked songs and playlists	To save your library and sync it between devices.	Playlists you create are listed on your profile. "Private" keeps a playlist out of search; it does not hide it from people who open your profile. Liked Songs is not listed.
Spotify connection (optional)	Only if you import a playlist from Spotify. Spotify gives us an access key limited to reading your playlists. We keep it with your account so later imports work, copy the song titles and artists into a Vibe Omix playlist, and store no Spotify links, track IDs or artwork.	Nobody. It is erased when you delete your account.
Listening activity	Your last played song and position (to resume playback), and the number of songs played since the last advertisement (to decide when an ad is due). Play counts per song are kept as totals that are not tied to you.	You and our administrators.
Messages and group chats	To deliver, store and sync your conversations. Messages are stored on our server and are not end-to-end encrypted.	You and the people in the conversation. We do not monitor conversations; administrators review a message when it is reported. As with any hosted service, the people who run the server have technical access to stored data.
Calls	Your microphone and camera are used only while you are in a call and only after you allow it in your browser. Voice and video are sent directly between participants where possible and are not recorded. We keep a call record (who called whom, when and for how long) so it can appear in the chat.	Call participants. Their devices and the relay services listed below can see your IP address during a call.
Reports you send us	To investigate problems and abuse. Includes your username, phone number and what you wrote, and the reported message if you report one.	Administrators.
Premium purchases	The plan, order reference, payment status and expiry date, to activate and prove your subscription. We never receive your card, UPI or bank details.	You, administrators and the payment provider.
Push notification ID (Android app)	A Firebase installation ID and app version, to send message and call notifications to your phone.	Us and Google (Firebase Cloud Messaging).
Technical data	IP address, browser type, and the date and time of requests, to keep the service secure, limit abuse and fix faults.	Us and our hosting provider.

We do not ask for your real name, email address, contacts, precise location or government ID. We do not use analytics or advertising trackers, we do not build advertising profiles, and we do not sell personal data. Advertisements on Vibe Omix are shown to everyone on the free plan and are not targeted at you personally.

3. Our legal grounds

Your consent, given when you create an account by ticking the consent box, for the processing described in this policy.
Uses the law permits without consent, such as meeting a legal obligation, responding to a court or authority, and keeping the service secure.

You can withdraw consent at any time by deleting your account (Settings → Delete account) or by emailing us. Withdrawing consent does not affect processing that already happened, and we cannot provide an account without the data marked as needed above.

We share data only with services that help us run Vibe Omix:

Recipients and what they receive
Service	What it is used for	What it receives
YouTube (Google)	The embedded player that plays music and video, and artwork images.	Your IP address and browser details, the videos you play, and YouTube's own cookies. Use of the player is covered by the YouTube Terms of Service and the Google Privacy Policy.
Google Fonts	The typeface used in the app.	Your IP address and browser details.
Apple iTunes Search, Deezer, MusicBrainz and Cover Art Archive	Looking up higher quality artwork for the song being played.	The song title and artist you are playing, and your IP address.
LRCLIB	Lyrics.	Song title and artist only, sent from our server. Nothing about you.
Spotify	Only if you choose to import a playlist.	You sign in to Spotify yourself, and Spotify learns that you connected Vibe Omix. We receive permission to read your playlists and nothing else.
PeerJS signalling, unpkg and public STUN servers (Google, Cloudflare)	Setting up voice and video calls.	A temporary call ID and your IP address.
Firebase Cloud Messaging (Google)	Push notifications in the Android app.	Your installation ID and the notification content (sender name and a short preview).
Payment provider	Taking payment for Premium.	Your username, phone number, the plan and the order reference.
Hosting provider	Running our server.	All data stored on the server, on our behalf.

Some of these services process data outside India. We may also disclose data when the law requires it, for example in response to a lawful order from a court or government authority.

5. How long we keep data

Account data, library, messages and follows are kept until you delete them or delete your account. Deleting your account erases your profile, playlists, follows, your private conversations (for both sides) and your messages in groups straight away.
Reports, call records and payment records may be kept after you delete your account for as long as needed to handle disputes, prevent abuse and meet legal and accounting duties.
Backups made for disaster recovery can hold deleted data for a short time until they are overwritten.
Server and security logs are kept for a limited period for troubleshooting and security, and for as long as the law requires.

6. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

Access a summary of the personal data we hold about you and how we use it.
Correct or update your data. Username, profile, bio and password can be changed in Settings.
Erase your data. Use Settings → Delete account, or email us.
Withdraw consent at any time.
Nominate another person to exercise your rights if you die or become unable to act.
Complain to us and have your grievance resolved.

To use any of these rights, email omixmotel@gmail.com from a message that names your Vibe Omix username. We may ask you to confirm that the account is yours. We answer as quickly as we can and always within 90 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

7. Children and teenagers

Vibe Omix is not for children under 13. If you are under 18, you may use Vibe Omix only with the consent of your parent or legal guardian, and you confirm that consent when you sign up. We do not track or monitor the behaviour of anyone under 18 and we do not show them targeted advertising. A parent or guardian who believes a child has an account without their consent can email omixmotel@gmail.com and we will delete it.

8. How we protect data

Connections to Vibe Omix use HTTPS. Passwords are stored as salted hashes. Sign-in sessions use a secure, HTTP-only cookie, repeated sign-in attempts are limited, and administrator tools are restricted to administrators. No service can promise perfect security; if a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, as the law requires.

9. Cookies and browser storage

Vibe Omix uses one essential sign-in cookie and stores a few settings in your browser. Details are in the Cookie Policy.

10. Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant we will tell you in the app before it takes effect.

11. Contact

Questions or complaints about privacy: Grievance Officer, Vibe Omix, omixmotel@gmail.com.