Privacy Policy

iGuos cares about your personal information and privacy. iGuos is operated by independent developer Guo's; "we" and "us" in this Policy refer to Guo's. This Privacy Policy (the "Policy") applies to the websites, software and related services operated by iGuos, including products such as Vibe Mind (together, the "Service"). It explains how we collect, use, store, share and protect your personal information, and the rights you have.

1. Information we collect

• Account information: the email address and display name you provide when signing up, and the password you set. We store only an irreversible hash of your password, never the password itself.
• Your content: the memories (including your Brain — the preferences agents learn from how you work, such as your workstyle, goals and boundaries), work notes and version history submitted by you or the agents you authorize, along with your sharing settings. Your Brain is visible only to you and can't be shared.
• Usage and security information: sign-in devices, IP addresses, browser type, the time and source IP an access token was last used, and MCP call records (the tool called, time, result and duration). We use this to keep your account secure, troubleshoot issues and prevent abuse.
• Code repository identifiers: when you use Vibe Mind inside a code repository, the session-start hook reports the repository's first commit ID and remote address (only "host/owner/repository", without usernames, tokens or other credentials) so we can match it to the right project and keep memories from going into the wrong one; you can view and unbind them under Settings › Data in the console.
• Cookies and local storage: after you sign in, we use a necessary session cookie to keep you signed in; the theme and interface language you choose are stored in a cookie on the iguos.com domain so your display preferences stay consistent across this website and our products. We do not use third-party advertising or tracking cookies.

2. How we use information

• to provide, maintain and improve the Service, including storing and retrieving your content and keeping it in sync across the agents you authorize;
• to run account features such as sign-up, sign-in, email verification and password reset, and to send you necessary service notices;
• to keep the Service secure, including detecting unusual sign-ins, preventing brute-force attempts and abuse, and troubleshooting;
• to meet our legal obligations.

We do not sell your personal information, and we do not use your content for purposes other than those described in this Policy.

3. Sharing, transfer and disclosure

• We never sell or rent your personal information to third parties.
• To send notices such as verification emails, we may engage an email service provider to process the necessary information (such as your email address) and require it to protect that information in line with this Policy and applicable law.
• Content you choose to share with other accounts or publish through a public link is shown to the recipients you set.
• We may disclose information where required by law or by a lawful request from the competent authorities.

4. Storage and protection

• We use reasonable technical and organizational measures to protect your information: all traffic is encrypted with HTTPS; access tokens and sessions are stored only as hashes, and public-link addresses and passwords are stored encrypted so that only you can view them again; and sign-in, sign-up and email sending are rate-limited.
• The memories and work notes you store must be readable by the agents you authorize, so they are kept in readable form on our servers (encrypted in transit). Our staff do not look at this content on their own initiative; we view only the parts needed, and only with your consent, when troubleshooting or handling a request or complaint from you, except where the law requires otherwise. Please do not store passwords, keys or other sensitive credentials in memories or notes.
• We keep your information only as long as necessary for the purposes described in this Policy. Logs are cleaned up regularly, and when you delete content or close your account (after its 7-day grace period) the corresponding information is deleted, except where the law requires otherwise.
• While we work hard to protect your information, no security measure is perfect. If a personal information security incident occurs, we will notify you promptly as required by law.

5. Your rights

• Access and correction: view and update your account information, and view all of your content, in the console. Memory (including your Brain) is written by the agents you authorize; to correct it, ask an agent to update it, flag it as wrong in the console, or delete it. You can also write and edit work notes yourself (agent-written notes can be taken over for manual editing).
• Export: export your project memory by project, or download work notes one at a time; to protect your data, you will be asked to verify your email first.
• Deletion and account closure: delete any content, or request to close your account; closure has a 7-day grace period you can cancel by signing in, after which your account and all of your data are permanently deleted.
• Managing access: revoke access tokens and turn off sharing and public links at any time.

To exercise other rights, or if you object to how we handle your personal information, contact us using the details at the end of this Policy.

6. Children

The Service is intended for developers and is not directed at children under 14. If you are a minor, please use the Service with the consent and guidance of a parent or guardian.

7. Changes to this Policy

We may update this Policy from time to time. The updated Policy will be published on this page with a new effective date, and we will give separate notice of significant changes.

8. Contact us

If you have any questions about this Policy or want to exercise your rights, please email us at support@iguos.com.