Privacy Policy & Children’s Privacy Notice

Last updated: July 16, 2026

Vibance is operated by Vibance LLC, doing business as Vibance (“Vibance,” “we,” “us,” or “our”). This Privacy Policy and Children’s Privacy Notice explains how we collect, use, disclose, retain, and protect personal information when individuals use the Vibance website, mobile application, and related services (the “Service”). It includes specific information for parents and legal guardians of children under 13.

Important information about Vibance

Vibance is an entirely simulated trading and investing practice platform. All balances, assets, trades, orders, predictions, returns, portfolios, and rewards are simulated — they have no cash value, cannot be withdrawn or redeemed, cannot be transferred outside the Service, and do not represent ownership of real securities. Vibance is not a bank, broker-dealer, securities exchange, investment adviser, gambling operator, or provider of financial, investment, tax, or legal advice.

1. Age groups and account types

Vibance provides different experiences based on the date of birth you provide at signup.

A. Child accounts: users under 13

Users under 13 do not have an account created immediately. A display name, a parent or guardian’s email, a date of birth, and a password are collected, but nothing is created, used, or shared until a parent or guardian reviews a plain-language disclosure and either approves or declines (see Section 5). Once approved, child accounts are private by design and do not have access to: chat, comments or replies, the activity feed, public leaderboards, public profile pages, following or followers, user search, sharing trades/portfolios/predictions, real profile photo uploads, a free-text bio, or notifications generated by other users. Other users cannot see a child account’s profile, simulated portfolio, trades, achievements, or activity — everything stays inside the account. Vibance does not currently offer private messaging, friend requests, or public social groups for any user; if introduced, they will be blocked for child accounts from day one.

B. Teen accounts: users ages 13–17

Users 13–17 may use the standard Vibance experience, including social features, subject to our Terms and Community Guidelines. Net worth, portfolio, and leaderboard visibility are private by default until changed in settings. If you are under 18, by agreeing to our Terms of Service you represent that you have discussed this app with a parent or legal guardian and have any permission required by applicable law — we do not separately verify this for the 13–17 age band.

C. Adult accounts: users 18 and older

Users 18 or older may access the standard experience, subject to this Privacy Policy, the Terms of Service, Community Guidelines, and applicable law.

2. Age verification and date of birth

We collect date of birth at signup to determine the account type. Age is self-reported — there is no identity or age-verification document check, consistent with COPPA’s “actual knowledge” standard. There is no in-app option to change your date of birth after signup; if it was entered incorrectly, contact privacy@vibance.co.

3. Registration information we collect

Under 13 (held pending parental approval): a display name (children are told not to use their real name), a parent/guardian email (used as the account’s login email once approved), an optional parent/guardian phone number, date of birth, and a password. The password is immediately hashed (bcrypt, never stored as readable text) and is held only long enough to create the account the moment a parent approves, or is permanently deleted if the parent declines or doesn’t respond.

Ages 13–17 and 18+: a display name, an email address (used for login), date of birth, and a password. We do not collect a phone number at signup except as the optional field on the under-13 parental-consent form. All passwords, for every account type, are stored using one-way cryptographic hashing (bcrypt).

4. Children under 13: parental notice and consent

For users under 13, we email the parent or guardian as soon as the signup form is submitted — before anything is created. The notice explains what would be collected and why, that nothing is created until the parent responds, that the child would receive a private and restricted account, the parent’s rights, how to contact us, and how to approve or decline. A child account is never activated until a parent completes this process. If a parent does not respond within 45 days, the pending request and all associated information (including the display name, date of birth, contact information, and the hashed password) is permanently deleted.

5. Verifiable parental consent

Primary method — reviewing and responding online. The parent opens the emailed link, reads a plain-language description of what would be collected and shared, and clicks Approve or Decline. If approved, the account is created immediately using the password provided at signup, and we email the parent a confirmation with a one-click link to remove the account at any time. We are direct about what this establishes: it confirms that someone with access to the email address provided as the parent’s contact clicked a link after seeing a clear disclosure — it does not independently verify that the person is the child’s parent or legal guardian. We pair it with strong downstream protections (the account stays fully private and restricted regardless of who approved it, and can be removed at any time).

Alternative method — a signed form. Instead of approving online, a parent may draw a signature in the app or upload a photo/scan/PDF of a signed statement, which a member of our team reviews before the account is created.

We do not currently use payment-card verification, government-ID verification, a live phone or video call, or knowledge-based authentication, and we are not affiliated with a COPPA Safe Harbor program; this policy will be updated first if that changes. Information collected to process parental consent is used only for consent, security, fraud prevention, and legal compliance — never for advertising or profiling.

6. Children under 13: limited private experience

A child account can use a personal simulated portfolio, simulated trades and orders, a personal watchlist, personal predictions, challenges/quests/XP/badges/achievements/streaks visible only to the child, a personal dashboard, support features, and our rules-based help chatbot (which answers from a fixed set of pre-written responses rather than generating open-ended text). Child accounts cannot appear on leaderboards, use chat/comments/the activity feed, follow or be followed, search or be found in search, view other users’ profiles or trades, share anything, upload a real photo, publish a bio, or make any information visible to anyone besides the account holder. Parents can ask us to disable any optional feature by contacting privacy@vibance.co.

7. Parent and guardian rights

A parent or legal guardian may at any time: review the personal information we’ve collected about their child, request a copy, correct it, request deletion of the account and its information, revoke consent, stop further collection or use, ask that a specific optional feature be disabled, or report an account created without proper authorization. Submit requests through our parent data request form or by emailing privacy@vibance.co. We may take reasonable steps to verify the requester’s identity and authority before acting. We do not currently offer a self-service parent dashboard; requests are handled individually by our team.

8. If a parent does not approve, or later revokes consent

If a parent declines a pending request, we immediately delete the password collected at signup and delete the rest of the request within 45 days at the latest; the same 45-day deletion applies if a parent doesn’t respond. If a parent later revokes consent for an active account, we disable it, stop further collection, delete its personal information following our normal deletion process, and confirm completion by email. To report an account created without your knowledge, contact privacy@vibance.co.

9. Information collected after account creation

Account & profile: display name, email, parent/guardian contact info (child accounts only), date of birth, hashed password, avatar/display preferences, privacy settings, moderation status, and support communications. Child accounts cannot set a bio or upload a real photo.

Simulated activity: virtual currency balance and buying power, simulated portfolio value, trades, orders and positions, watchlists, predictions and results, assets viewed/followed, and challenges/quests/XP/badges/achievements/streaks/levels. For child accounts, none of this is visible to other users.

Community & social (13+ only): chat messages, replies and reactions, follows/followers, blocks and reports (with reasons), message edits/deletions, and content shared into chat.

Support & safety: support messages, parent/guardian and child-privacy requests, safety reports, moderation notes, account-restriction records, and appeal information.

Technical & device: a one-way cryptographic hash of your IP address and browser/device user-agent — we do not store your raw IP address or a raw, persistent device identifier — plus device type, OS, app version, language/time-zone, session identifiers and authentication cookies, access timestamps and requested pages, and error/security logs.

Analytics: first-party, internal usage data only (feature usage, session counts, internal experiment assignments). We do not use any third-party analytics, advertising, or tracking SDKs, and child-account analytics are used only for internal operations, safety, security, and legal compliance — never for advertising or profiling.

10. Information we do not collect

We do not collect real bank/brokerage account information, real investment holdings, payment-card information, government identification, precise geolocation, address-book contacts, advertising identifiers, biometric identifiers, or microphone/camera recordings. We do not use any third-party advertising or analytics trackers of any kind, for any account.

11. How we use information

We use information to determine age and apply the correct account restrictions; process parental notice and consent; create, secure, and authenticate accounts; provide the simulation and practice features; operate challenges, XP, and rewards; provide social features to eligible (13+) accounts; keep child accounts private; provide support and respond to parent/guardian requests; send account, consent, safety, and service communications; detect fraud, abuse, and security threats and moderate content; enforce our Terms and Community Guidelines; improve and debug the Service; and comply with legal obligations. We never use simulated activity to give personalized financial advice or execute any real investment.

12. How we disclose information

We do not sell personal information, and we do not use anyone’s information — child or otherwise — for targeted or behavioral advertising. We do not disclose a child account’s information to other users through any feature. We disclose information only: (a) to a small set of service providers that operate the Service — Supabase (database hosting), Cloudflare (application hosting, delivery, security), and Resend (transactional email) — each receiving only what they need; (b) to other users, for 13+ accounts, through the social features you use, subject to your settings (never for child accounts); (c) for legal, safety, and security reasons when reasonably necessary; (d) in a business transaction such as a merger or sale of assets, with any successor required to honor this policy and existing consent; and (e) at your direction.

13. Social features for users ages 13 and older

Users 13+ may use chat, the activity feed, leaderboards, following/followers, user search, public profiles, and sharing into chat. Depending on the feature and your settings, other users may see your display name, avatar, bio, shared content, simulated portfolio/trade activity, achievements, leaderboard position, and followers/following. Net worth and portfolio visibility default to private until changed. Do not post private personal information about yourself or others.

14. Community safety and moderation

We review, filter, restrict, or remove content and accounts for safety, moderation, and legal compliance, and we prohibit (among other things) child sexual exploitation or abuse, grooming or sexual communication with minors, harassment, bullying or threats, hate speech, scams and impersonation, sharing another person’s private information, and attempts to move a minor off-platform or obtain their identifying information. Users can report content, report or block another user, and appeal certain moderation actions. Report urgent safety concerns to safety@vibance.co. Vibance is not an emergency service — if someone is in immediate danger, contact local emergency services.

15. Cookies and similar technologies

We use a small number of cookies for authentication, maintaining a secure session, and remembering basic preferences. We do not use cookies for third-party advertising, and we do not use tracking cookies for child accounts. Blocking necessary cookies will prevent the Service from working.

16. Communications

We may send account, security, consent, safety, and service-related emails, including parent-notification and consent emails, password/authentication messages, support responses, moderation notices, privacy-policy updates, and account-deletion confirmations. Parents cannot opt out of communications necessary to administer consent, security, safety, or legal obligations for an active child account.

17. Data retention

We retain personal information only as long as reasonably necessary for the purposes in this policy:

18. Account deletion

You can delete your own account from Profile → Delete Account (we may ask you to re-enter your password). Parents or guardians of a child account may request deletion by contacting privacy@vibance.co. Deletion permanently removes, rather than hides, the large majority of information tied to the account — profile information, parent/guardian contact information, simulated trading and portfolio records, watchlists, progress data, and social relationships. A narrow exception: a small amount of information may be retained in redacted form (with your name and email removed) where reasonably necessary for fraud prevention or legal accountability, such as a record that a moderation action occurred. Information may also persist briefly in backups until they are overwritten on our normal schedule.

19. Access, correction, and privacy requests

Depending on applicable law, you may have rights to access, correct, or delete your information, withdraw consent, object to or restrict certain processing, or request a copy of your data. Parents and legal guardians of children under 13 may exercise these rights on their child’s behalf at any time (see Section 7). Submit requests to privacy@vibance.co, or for child-specific requests, through our parent data request form. We may take reasonable steps to verify your identity before responding.

20. Security

We use administrative and technical safeguards including one-way password hashing, encrypted connections, access controls and role-based permissions for our staff, restricted administrative access, and logging/monitoring. No system is completely secure — please protect your credentials and tell us promptly at support@vibance.co if you suspect unauthorized access.

21. Automated processing

We use automated systems to calculate simulated portfolios, award XP and achievements, apply age-based feature restrictions, detect suspicious or abusive activity, and apply rate limits. Automated safety signals may lead to a temporary restriction, content removal, or human review — they don’t make final account-termination decisions without the ability to appeal. You, or a parent/guardian on your behalf, may contact privacy@vibance.co about a significant automated decision.

22. State and other privacy rights

Depending on where you live, you may have additional privacy rights under state law, including rights related to access, correction, deletion, and targeted advertising/profiling (which we don’t engage in). We do not sell personal information and do not knowingly sell or share the personal information of users under 18 for targeted advertising. Submit requests to privacy@vibance.co.

23. International users

Vibance is operated from, and its infrastructure is located in, the United States, and is designed and marketed for a U.S. audience. If you access the Service from outside the U.S., your information will be processed in the U.S., which may have different privacy laws than your country. We have not implemented additional country-specific parental-consent or age-assurance mechanisms for use outside the U.S. and do not currently have a designated EU/UK/Swiss representative. Parents outside the U.S. who believe their child has used the Service can contact privacy@vibance.co.

24. Changes to this policy

We may update this policy to reflect changes in our practices, features, service providers, or legal obligations, and will update the “Last updated” date above. If we materially change how we collect, use, or disclose personal information from children under 13, we will provide direct notice to the parent or guardian on file and, where legally required, obtain new verifiable parental consent. We will not treat continued use of the Service alone as consent to such a change.

25. Contact us

Vibance LLC, doing business as Vibance
734 Berkley Road, Indianapolis, IN 46208, United States

Privacy, parent, and data requests: privacy@vibance.co
Safety reports and moderation appeals: safety@vibance.co
General support: support@vibance.co
Telephone: (224) 277-6304