Privacy
Your content, clearly explained.
Last updated October 19, 2026
This policy covers the Liminal Vibe website, Studio App, companion apps, and our hosted services. Features vary by app version and platform. It explains both local use and the additional processing involved when you enable network features.
Website analytics and delivery
We use Google Analytics to measure visits to public website pages, such as page views and general browser or device information. The standard Google tag uses Analytics cookies to distinguish visits and measure website activity. These measurements still go to Google; they are not processed solely on our own servers. Network information, including an IP address used to deliver a request, may be processed by service providers.
The standard tag may include a public page’s address and referring page in its measurements. Pairing pages and the support form page do not load Analytics. App sessions, journals, pairing credentials, and support message contents are not sent to website Analytics. Browser or network tools may block analytics requests. This site does not display an analytics banner or an analytics preference control.
Cloudflare hosts and protects this website and processes ordinary network and request information for delivery, reliability, and abuse prevention. See Google’s privacy policy and Cloudflare’s privacy policy for their processing practices.
Support requests
When you send the support form, we receive the name, reply email address, selected topic, and message you provide. Cloudflare Turnstile processes browser and network signals to check for automated submissions. Our server verifies the spam-check result before forwarding the message through Resend to our support mailbox. Your reply address is used to respond to your request; sending this form does not subscribe you to marketing.
The website does not maintain a separate support-message database. Messages and delivery records may remain with our email providers and in our support mailbox for handling requests, follow-up, and necessary operational or legal records. Do not include passwords, API keys, pairing secrets, recovery words, private journal entries, or medical records. Use the form to ask how to provide additional information safely. See Resend’s privacy policy.
Content on your devices
Studio projects, imported media, downloaded journey bundles, run history, session marks, preferences, journals, and AI chat history are stored locally by the app. Local playback does not require sending your journal or session content to website Analytics. Exporting, sharing, backing up, or synchronizing content can create additional copies at the destination you choose. Protect your devices and backups, especially where journals contain sensitive information.
Pairing and synchronization
Companion synchronization transfers selected journey content and supported journals, marks, and run history between devices you pair. Direct local-network connections use the Studio identity and credentials established during pairing. Pairing links contain short-lived secrets in the URL fragment; this website’s pairing page does not read or forward that fragment.
Versions with cloud synchronization can also use our Cloudflare-hosted sync service when you enable that feature. The cloud path stores encrypted content and operational metadata, such as account and library identifiers, device names and public keys, object sizes, revisions, sync cursors, and request timing. Its content encryption and recovery material are generated on your devices; the service is designed not to receive the content decryption key. Encryption does not conceal all routing or usage metadata.
Disabling synchronization stops future syncing but does not erase copies already received by a paired device. Use the deletion or export features available in your app version, manage local files and backups separately, and use the support form for a data or deletion request. Encrypted cloud content cannot be recovered for you without the required device or recovery material.
Optional AI and generation services
If you configure and use an AI provider, command-line AI tool, local model server, or music-generation service, the prompts, conversation, project context, or other material included in that request are sent to the selected destination. A local model can remain on your own machine; a remote provider processes requests under its own policy and may retain them. Review what you submit and the provider you select. Provider credentials are handled by the app’s credential storage where supported; do not put secrets into prompts.
Permissions and hardware
App permissions depend on platform and enabled features. Camera access supports scanning pairing codes; flashlight access supports explicitly enabled experimental light playback. Notifications and background media controls support playback. Local-network access supports paired-device discovery and connections. Bluetooth and other supported device access are used for hardware features you select. The app’s safety and permission prompts describe the relevant feature.
Your choices and requests
You control which devices you pair, which optional providers you configure, and whether to enable synchronization. You can remove local content and manage your own exports and backups. Depending on your location, you may have rights to access, correct, export, or delete personal information we hold. Use the support form and select Privacy or data deletion. We may need to verify that a request concerns your information before acting on it.
Updates
We will update this page when these practices change. The date above identifies the current version. Questions about this policy can be sent through the support form.