Vibe Station Privacy Policy
- Version:
- v2026.3
- Date:
- 2026-09-14
- Authoritative language:
- Portuguese
The essentials, in six sentences
- Vibe Station works without an account. Editing tones on your GT-1, asking for a backing track, recording what you play — all of that works with the app alone, and what stays on the device stays on the device.
- The account exists for one thing: putting your tones and your recordings in the cloud, so that you can change phones and they are still there.
- The voice assistant sends your audio out. There is no way to talk to it otherwise: your speech goes to our servers and from there to Google's artificial intelligence, which transcribes it and answers. Without talking to the assistant, no voice audio leaves your device.
- Your guitar recordings only leave the device if you say so. Syncing is a choice per recording, not a single switch that uploads everything at once.
- You can delete everything, with a button inside the app — the account, the tones, the recordings. What the law requires us to keep for a fixed period is listed in this document, with the period.
- We do not sell your data, and we do not use your recordings to train any model.
The rest of this document explains each point, and everything else.
1. Who is responsible for your data
The controller of the personal data processed by Vibe Station is:
Refactoring Soluções em Tecnologia LTDA CNPJ 47.489.920/0001-89 Rua Cayowaa, 575, apto 131 — Perdizes, São Paulo/SP, Brazil Website: www.tensorial.com.br General e-mail: contato@tensorial.com.br
Tensorial is the group's brand. Vibe Station is a product of the company.
Controller, under Brazil's General Data Protection Law (Lei 13.709/2018, the LGPD), means whoever decides what is done with your data. That is us, and we are who you hold to account.
Data Protection Officer (DPO)
Jonathan da Silva Santos Contact: privacidade@tensorial.com.br
This is the channel for exercising any right described in section 10, and for any question about this document. We answer within 15 days.
2. The two ways to use Vibe Station
2.1 Without an account — the whole app, and nothing in the cloud
Without an account, Vibe Station edits your pedal, builds backing tracks, records what you play and keeps all of it on your device. The tones, the recordings and your preferences do not leave it.
Two things do leave, even without an account:
- What you say to the assistant, while you are talking to it. See 2.3.
- A device code and usage counters, so we know how much assistant time has been used — which is what the quota counts. That code carries no name, no e-mail and nothing that ties it to you outside the app. It is visible in Settings, and it is what you use to request deletion of this data without an account (section 10).
2.2 With an account — what starts living in the cloud
The account keeps, on our servers:
- Your e-mail, and your name and photo if you sign in with Google.
- Your tones — the pedal's settings, which are numbers, not audio.
- The recordings you choose to sync, and only those.
- Your plan and how much of the space you have used.
The account is for people 13 years old or older. Between 13 and 17, a parent's or guardian's consent is required — see section 11.
2.3 The voice assistant, with an account or without
Talking to the assistant sends the audio of your voice to our servers, and from there to the Gemini API, from Google, which transcribes what you said and produces the answer. This holds in both modes: it is what makes the assistant exist.
What happens to that audio:
- We do not keep it after the conversation ends.
- If your guitar happens to sound while you speak, that sound goes along — the microphone does not separate one from the other.
- Google processes this data as a processor, under its contract with us.
If you never open the assistant, no voice audio leaves your device.
3. What data we process, what for, and on what legal basis
Without an account and with one
| Data | What for | Legal basis (LGPD art. 7) |
|---|---|---|
| Device code | Counting the assistant quota and preventing abuse | Legitimate interest (IX) |
| Usage counters and error logs | Keeping the service up and fixing defects | Legitimate interest (IX) |
| Audio of your voice, during the conversation | Transcribing and answering | Performance of a contract (V) |
| Chosen language | Speaking to you in your language | Performance of a contract (V) |
| Application access logs | Obligation under Brazil's Internet Civil Framework | Compliance with a legal obligation (II) |
Only with an account
| Data | What for | Legal basis |
|---|---|---|
| Identifying the account, recovering the password, notifying you of changes | Performance of a contract (V) | |
| Name and photo, if you sign in with Google | Showing whose account it is | Performance of a contract (V) |
| Tones | Syncing across devices | Performance of a contract (V) |
| Recordings you sync | Storing them and giving them back on another device | Performance of a contract (V) |
| Plan and space used | Applying the plan's limit | Performance of a contract (V) |
We do not process sensitive data as defined in art. 5, II of the LGPD. We neither ask for nor infer racial origin, religious conviction, political opinion, union membership, health, sex life, genetic or biometric data. Your voice is treated as the content of a conversation, not as a biometric identifier: we do not use your voice to recognise who you are.
About legitimate interest
Where the basis is legitimate interest, the interest is keeping the service running and not being abused by people who do not pay for it. The corresponding impact assessment is in this repository's governance documents, and can be requested through the channel in section 1.
4. How long we keep things
| Data | Period |
|---|---|
| Audio of the conversation with the assistant | We do not keep it. It exists in memory during the conversation |
| Transcript of the conversation | While the conversation is open; discarded when it ends |
| Synced tones and recordings | While the account exists with Plus active, or until you delete them. If you leave Plus, there is a 90-day grace period before we remove everything that is in the cloud, always from oldest to newest and always after telling you |
| E-mail and account data | While the account exists |
| Quota counters | 12 months |
| Application access logs | 6 months, as required by art. 15 of Brazil's Internet Civil Framework |
| Payment data | We do not receive or store card details; Google Play processes billing. To validate, restore and monitor subscriptions, we store the purchase token, product and order identifiers, account identifier, subscription status, expiry and last verification time. We query Google Play using this information to confirm Plus entitlement. Receipt data linked to the account is removed when the account is deleted, subject to the retention exceptions expressly described in this policy. Exception to the general deletion statements in this policy: to prevent the same receipt from activating Plus on different accounts, we separately retain a hash of the purchase token linked to the account identifier. This link is not anonymous, remains after account deletion, and currently has no defined retention period or automatic expiry. Requests to assess continued retention or deletion can be made through the privacy contact specified in this policy. We do not describe this retention as a specific legal obligation. |
Once the account is deleted, whatever is not under a legal retention period is deleted within 30 days, backups included.
5. Who the data is shared with
We do not sell data. We do not hand it over for advertising. Whoever receives it, receives it in order to provide us a service, as a processor, and is listed here.
Who receives content
| Who | What | Why |
|---|---|---|
| Google (Gemini API) | The audio of your voice and the text of the conversation | Transcribing and answering |
| Google (Firebase and Cloud Storage) | E-mail, tones, synced recordings | Authenticating the account and storing the files |
Who receives technical data only
| Who | What | Why |
|---|---|---|
| Google Cloud (Cloud Run, Firestore) | Device code, counters, logs | Running our servers |
We may also share
- With a public authority, upon lawful order — and, when the law allows, we tell you.
- In a corporate reorganisation, with the successor, who becomes bound by this same policy.
6. International transfer
The servers we use are in the United States (Google Cloud, Iowa region) and the website is in the United States as well (DigitalOcean, New Jersey).
That is an international transfer, and the LGPD allows it (art. 33) where there are adequate safeguards. Ours are the contractual clauses of Google Cloud and Firebase, which bind the processor to the same standard of protection.
If that is a problem for you, the app without an account sends nothing anywhere — except when you talk to the assistant.
7. What stays inside your device
- Tones and recordings, always — the cloud is a copy, not a replacement.
- The audio of the backing track, which is synthesised on your phone and never leaves it.
- Your language preference and the app's settings.
Uninstalling the app deletes all of that. If you had an account, what was in the cloud stays there until you delete the account.
8. Security
- Everything in transit goes encrypted (TLS).
- What is stored is encrypted at rest, by Google Cloud's standard.
- The account password never reaches us: Firebase Authentication keeps it, hashed, and we receive only the confirmation that you are you.
- Each recording and each tone is reachable only by the account that owns it, and that is enforced by the server, not by the app.
- In the event of an incident with relevant risk, we notify you and the ANPD, under art. 48 of the LGPD.
No system is impregnable, and promising otherwise would be a lie.
9. Cookies and the website
The website www.tensorial.com.br uses one cookie to remember the language you chose. It uses no advertising cookies and no cross-site tracking.
10. Your rights
Art. 18 of the LGPD gives you, over your data:
| Right | What it means |
|---|---|
| Confirmation and access | Knowing whether we process it, and receiving a copy |
| Correction | Correcting whatever is wrong |
| Anonymisation, blocking or elimination | Of data that is unnecessary, excessive or processed outside the law |
| Portability | Taking your data to another provider. There is no button to download everything at once; ask through the channel in section 1 and we prepare it and hand it over |
| Elimination | Deleting what was processed on the basis of your consent |
| Information about sharing | Knowing who we share it with |
| Withdrawal of consent | Where the basis is consent |
| Objection | Objecting to processing based on legitimate interest |
How to exercise them
- Inside the app: delete a recording, delete a tone, or delete the whole account — all by button, without talking to anyone.
- Through the website, even without the app installed: www.tensorial.com.br/vibestation/excluir-conta
You give the account's e-mail and receive a confirmation link there, valid for 30 minutes. Opening the link deletes the account. We ask for that confirmation for one reason only: without it, anybody could delete anybody else's account by typing their address.
The page answers the same thing whether or not the account exists. Saying "we did not find that e-mail" would turn the form into a checker of who uses Vibe Station, and that is not ours to tell.
- Without an account, and without the app installed: the same page has a second path, for people who used Vibe Station without creating an account. What exists on our side, in that case, is the device code and the quota counters tied to it — and deleting them requires that code.
It is in the app's Settings, and it can be copied. Write it down before uninstalling: once uninstalled, the code stops existing on the phone and we have no way to tie you to it — which is precisely what makes that datum nearly anonymous, and what makes this caveat necessary.
- By e-mail: privacidade@tensorial.com.br
We answer within 15 days.
What is not deleted
The access logs that art. 15 of the Internet Civil Framework requires us to keep for six months, and anything under a tax retention period. None of that contains what you played or what you said.
Complaint to the ANPD
If you are not satisfied, you may complain to Brazil's National Data Protection Authority: www.gov.br/anpd
11. Children and adolescents
People under 13 may not create an account on Vibe Station. If we discover an account belonging to somebody under 13, we delete its data.
Between 13 and 17 years old, a parent's or guardian's consent is required. When creating the account we ask for the date of birth and, when it falls in that range, for a guardian's e-mail, which receives a confirmation request. The account only starts syncing after that consent arrives, and we keep the record of it: who consented, when, and against which version of this document.
The LGPD (art. 14) requires that consent for children under 12. We require it up to 17 by our own decision, not by obligation — an adolescent learning to play deserves the same protection the law gives an eleven-year-old.
The guardian may, at any time, request deletion of the account and the data through the channel in section 1, and we comply without arguing with the adolescent.
We do not run advertising directed at anybody, of any age, and we do not profile behaviour for commercial purposes.
12. When this policy changes
Each version has the identifier vAAAA.N, and it is that identifier that is recorded when you agree — so that it is always possible to say precisely what you agreed to.
A material change is announced inside the app and requires a new acceptance. A wording correction with no change of substance does not, and it is recorded in the version history.
13. Final provisions
This policy is governed by Brazilian law. The authoritative language is Portuguese: the translations exist so that you can understand, and in case of divergence of interpretation the Portuguese text prevails.