Last updated: 2026-05-29

Privacy Policy

VibeCat is a Windows 11 desktop app — a floating control bar that lets you monitor and approve your AI coding agents (Claude Code, Codex, Cursor, Gemini CLI) in one place. This policy explains what VibeCat does and does not collect.

The short version. VibeCat runs locally on your machine. It never collects your source code, prompts, AI responses, terminal output, file paths, logs, or access tokens. Anonymous, aggregate diagnostics are opt-in and off by default. Payments are handled by Polar; we never see your card details.

1. Who We Are

"VibeCat", "we", "us" refers to the maker of the VibeCat desktop application and the vibecat.app website. You can reach us at [email protected].

2. Data We Collect

Desktop application (processed locally)

VibeCat detects your AI coding agent sessions through local hooks and terminal inspection on your own device. Agent hook events are received over a local Windows named pipe and processed on-device. Session, tab, and window details used to draw the bar stay on your machine.

VibeCat does not collect, transmit, or store your source code, prompts, AI responses, terminal output, file contents, file paths, command text, logs, or tokens.

Opt-in "Help Improve" diagnostics

This is off by default. If you turn it on, VibeCat keeps local aggregate daily counters (for example: integration readiness, permission-prompt counts, update checks, license outcomes), timing histograms, and coarse crash-group counts, and uploads them at most once per day to telemetry.vibecat.app. It never uploads prompts, commands, paths, logs, or tokens. You can turn it off at any time in Settings. See our live Transparency page for exactly what the payload contains.

Because no raw identifiers are stored, historical aggregate rows cannot be individually removed after upload; turning the feature off stops all future collection and upload.

Support bundles (Pro, only when you ask)

When you explicitly create or upload a support bundle, it contains sanitized integration and diagnostic information to help us reproduce an issue. It excludes raw prompts, commands, paths, logs, and tokens. Public support intake lives in our GitHub support repository, and must not contain source code, secrets, license keys, payment data, or private paths.

Licensing & payments

When you purchase or activate a license, payment is processed by Polar. We do not receive or store your card details. Our backend stores a signed entitlement record that contains non-sensitive identifiers (such as a Polar customer ID and license ID) so the app can verify your license — not your name, email address, or payment information.

Website

The vibecat.app website does not set advertising or cross-site tracking cookies. Our hosting provider may process standard server request logs to deliver and protect the site.

3. How We Use Data

We do not sell your data, and we do not use it for advertising or profiling.

4. Third-Party Services

5. Data Storage & Security

VibeCat is local-first: your session and agent data stay on your device. Our backend stores only a signed entitlement record and sanitized aggregate diagnostics. All network requests use HTTPS. License entitlements are cryptographically signed so the app can verify them offline.

6. Your Rights & Choices

7. Children's Privacy

VibeCat is a developer tool and is not directed at children. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy. We will revise the "Last updated" date above and, for material changes, note them on this page.

9. Contact

Questions about this policy or your data: [email protected].