Legal

1. Acceptance

By using the app you agree to these Terms. If you don't agree, please don't use the app.

2. What VibeScout is

VibeScout is a free, informational travel-discovery tool that suggests nearby places and draws in-app walking routes. It is offered on an "as is" and "as available" basis, without warranties of any kind.

3. Accuracy of information

Place details locations, opening times, prices, tips and descriptions may be incomplete, out of date, or wrong. Always verify independently before relying on them. We are not responsible for closures, changes, costs, or any decisions you make based on the app.

4. Directions & your safety

In-app walking routes are computed by a third-party routing service and are estimates only. You are responsible for your own safety: obey local laws, stay aware of your surroundings, and use good judgment about where you go and when.

5. Location feature

The location feature is optional and depends on your device and browser. We don't guarantee its accuracy or availability.

6. Acceptable use

Don't misuse the app: no attempting to disrupt or break it, no automated scraping or bulk extraction of its data, and no use that violates applicable law or the terms of the third-party map, image and routing providers.

7. Intellectual property

The VibeScout name, design and software belong to Kaleab Yonas Tilahun. Map data is © OpenStreetMap contributors and map tiles are provided by CARTO, under their respective licenses. Photos belong to their respective owners.

Some place photos are by Wikimedia Commons contributors, used under their stated licenses: © José Luiz Bernardes Ribeiro; Bernard Gagnon and Derbrauni (CC BY 4.0); Sicilian mama (CC BY 2.0); Jeanne Griffin (CC BY-SA 4.0); Giovanni Dall'Orto (attribution license) — all via Wikimedia Commons.

8. Disclaimers & limitation of liability

To the maximum extent permitted by law, VibeScout and Kaleab Yonas Tilahun are not liable for any indirect, incidental, or consequential damages, or for any loss arising from your use of (or inability to use) the app, including reliance on place information or third-party directions. Nothing in these Terms limits liability that cannot be limited under applicable law.

9. Changes

We may update these Terms. Continued use after a change means you accept the updated Terms.

10. Governing law

These Terms are governed by the laws of Italy, without regard to conflict-of-laws rules.

11. Contact

Questions about these Terms? Reach Kaleab Yonas Tilahun at vibescout.taormina@gmail.com.

Who we are

VibeScout is operated by Kaleab Yonas Tilahun ("we", "us"), a mobile-first web app that helps travelers find nearby photo spots, food, drinks and activities. For any privacy question, contact vibescout.taormina@gmail.com.

What we process — and what we don't

Location and routing. When you enable GPS, your browser uses your location to show your position and sort nearby spots by distance. When you request a walking route, your starting point and destination coordinates are briefly sent to our server API to calculate the path. We don't permanently store your travel history or locations, and no profiles are built from this data. If you deny permission, the app still works.

IP address for security. To protect our routing from bot abuse, our server temporarily processes your IP address to limit how many route requests you can make per minute. We don't use your IP to track you across the internet.

On-device storage. We keep a few small items in your browser's local storage — your chosen language (vibescout-lang), your saved favourites, your most recent walking route (so directions work offline), a random identifier used to count visits and repeat opens (vibescout:aid), flags that stop the feedback and install prompts repeating (vibe_feedback_seen, vibescout-install-dismissed), and, if usage analytics have been switched off for this device, a flag that records that choice (va-optout). Apart from the random identifier — a meaningless string that isn't linked to your name, email or any account — these items hold no personal information, and all of them stay on your device until you clear your browser data.

We do not collect your name, email, or contact details; create user accounts; use advertising or analytics cookies; build advertising or cross-site tracking profiles; or sell or rent any data. The one exception is the optional feedback form: anything you choose to type there is sent to us (via Web3Forms, below) so we can read it — please don't include personal details you'd rather not share.

Third parties that help run the app

To display maps, calculate walking routes, load images, and deliver any feedback you choose to send, the app connects to trusted external services. When it does, those services necessarily process technical data such as your IP address, map coordinates, or the content you submit:

• GraphHopper (routing). When you tap Navigate, the origin and destination coordinates are sent to GraphHopper to generate the turn-by-turn walking instructions shown in the app.
• CARTO (map tiles). The maps are served by CARTO using OpenStreetMap data; the area you view is requested from their servers — see CARTO's privacy policy.
• Our own usage analytics (not a third party). Separately from the outside services listed here, we record a few app actions — such as opening a spot, choosing a vibe, or starting and finishing a walking route — in our own Supabase database. Each event is tied only to the random device identifier described above, never to a name, email or account, and is never sold or shared. We use this to see which spots and vibes are popular, and whether visitors come back and navigate — including a per-device view of when a device first and last opened the app and whether it navigated or arrived, so it is device-level, not only aggregate. We keep these events for up to 12 months, after which they are automatically deleted.
• Vercel (hosting, security & analytics). The app is hosted on Vercel, which keeps standard, short-lived server logs for security and reliability. We use Vercel KV to temporarily check IP addresses against our rate-limiting rules so the routing engine isn't overwhelmed, and Vercel Analytics & Speed Insights to collect aggregate, cookieless usage and performance data (page views, load times) with no cross-site tracking.
• Supabase (data & images). Place data and photos are served from our Supabase backend; loading them reveals your IP to that host, a standard part of any internet request.
• Web3Forms (feedback delivery). If you use the optional feedback form, the message and rating you enter are passed through Web3Forms so they reach our team by email. Only what you type is sent.
• Sentry (error monitoring). If enabled, Sentry receives JavaScript error reports (stack traces, browser type) to help us find and fix bugs. No personal data is intentionally included. See Sentry's privacy policy.
• Cloudflare Turnstile (bot protection). The admin sign-in form uses Cloudflare Turnstile to verify you are a real person. Cloudflare may process your IP address and browser signals — see Cloudflare's privacy policy.

These are separate services governed by their own privacy policies. We don't send them any information about your identity beyond the technical data strictly required to make the app function.

Legal bases (GDPR)

Where the EU/UK GDPR applies: we process your location on the basis of your consent, which you give through your browser's location prompt and can withdraw at any time in your browser settings. The limited technical data handled by our hosting, map, image and routing providers is processed on the basis of our legitimate interest in delivering and securing the app.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, and to object to or restrict processing. Because we don't hold personal data on our servers, most of your data is already under your control on your device — you can revoke location access or clear local storage at any time. For anything else, contact Kaleab Yonas Tilahun at vibescout.taormina@gmail.com. California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

Children

VibeScout is a general-audience travel tool and is not directed to children under 16. We do not knowingly collect data from children.

International users

The third-party services above may process technical data in countries other than your own. By using the app you understand that such transfers may occur as part of delivering maps, images and routes.

Changes

If we change how the app handles data, we will update this page and the "last updated" date above.