Privacy policy

Daily Vibe · last updated 23 October 2026

In short

Who is responsible

The controller of your personal data is Taliro Global Talent, S.L., Rambla de Badal 62, 3-3, 08014 Barcelona, Spain, tax number B26780288. Daily Vibe is a free, non-commercial project run by its founder. Contact: me@djordje.eu.

What we process, and why

Your Google sign-in. When you sign in with Google we receive your Google account ID, email address and name. We use them to identify your account and show you who is signed in. We don't receive your password, contacts, files or anything else from your Google account.

Credentials you give us. Your Modal token (ID and secret) and your Cloudflare R2 details (account ID, bucket name, access key ID and secret). We encrypt the secrets before storing them and use them only to do what you set Daily Vibe up for: install and run the daily-vibe-tts voice app in your Modal account, store episode audio in your bucket under daily-vibe/, give your podcast app short-lived links to it, and delete it when you delete a podcast or your account.

Your podcasts and episodes. For each podcast: its name, description, voice, speed and schedule note. For each episode: its title, description, the full script, its date, and its status, size and length. Scripts are written by your AI and can contain personal information about you or others, depending on what you and your AI decide the show is about. We store them so the episode can be made and so your AI can look back at earlier episodes (to avoid repeats and continue stories).

Connections to your AI apps. When you connect Claude, ChatGPT or another app, we store the app's registration (its name and return address) and the access tokens we issue to it. We store tokens only as one-way hashes.

Sign-in session. One cookie (dv_session) keeps you signed in on this website for up to 30 days. It's strictly necessary, so there's no cookie banner. There are no other cookies.

Technical logs. The server keeps error and event logs (for example "a render failed") for up to 30 days to keep the service running and secure. We don't keep a log of every visit or feed download.

Visit counts. We count how many times each page is opened per day, and how often feeds and episodes are fetched, as plain totals. For pages we also note the domain of the website that linked to us (for example reddit.com). These counts contain no IP addresses, cookies, device details or anything else that identifies you.

Legal bases (GDPR). Providing the service you asked for (Art. 6(1)(b)) for your account, credentials, podcasts and connections; our legitimate interest in keeping the service secure and working (Art. 6(1)(f)) for technical logs, and in knowing how much the service is used (Art. 6(1)(f)) for visit counts.

Who else is involved

We don't sell or share your data with anyone else, and we don't use it for advertising, profiling or training AI models.

How long we keep it

Your data stays until you delete it. Deleting a podcast (through your AI) removes it, its episodes and their audio right away. Deleting your account on the setup page removes your account, podcasts, episodes, stored credentials, connections and sessions, deletes the audio from your R2 bucket and stops the voice app in your Modal account. Daily database backups are kept on the server for 14 days, so deleted data disappears from backups within 14 days. Technical logs are kept for up to 30 days.

Security

All traffic uses HTTPS. Stored Modal and R2 secrets are encrypted, tokens and session IDs are stored only as hashes, and each Modal call runs in a separate process with only your token. Feeds are private: they're not listed in any directory and are only reachable through a long random link, but anyone who has that link can listen, so keep it to yourself.

Your rights

You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, or object to processing, by writing to me@djordje.eu. You can delete everything yourself at any time on the setup page. If you think we handle your data wrongly, you can complain to the Spanish data protection authority (AEPD) or the authority where you live.

Daily Vibe isn't meant for anyone under 16.

Changes

If we change how we handle data, we update this page and its date. For important changes we'll also tell you on the setup page before they apply.