Appendix F · Product & Technology · March 2026

Product & Technology Overview

VIBEUP's entire platform is built from scratch by our founding engineering team. Every line of code is owned, every architectural decision is intentional, and no technical debt has been inherited — covering core jobs to be done, key features, system architecture, security posture, product roadmap, and IP register.

1. Engineering Philosophy

100% Custom-Built
No third-party app builders, no no-code tools, no inherited codebase. Every system is engineered in-house — giving us full IP ownership and zero accumulated tech debt.
OpenAI-Powered, Provider-Independent
Mira AI runs on OpenAI's GPT-4o. However, our architecture is LLM-agnostic — we can swap any AI provider without re-engineering the platform. We are not locked into any single AI vendor.
Proven Weekly Release Velocity
Our team ships weekly product updates. This is not aspirational — it's proven. Serverless deployment via Vercel and native iOS builds via Capacitor enable rapid, reliable iteration.
Zero Tech Debt Architecture
Building from scratch in 2024–2026 means we benefit from modern tooling, modern patterns, and modern security standards — without legacy constraints that hamper competitors.

2. What VIBEUP Does — Jobs to Be Done

VIBEUP is a social-wellness super-app. It solves the fragmentation problem in the wellness economy: practitioners, studios, creators, and seekers are scattered across dozens of disconnected platforms with no unified identity layer, no trusted discovery, and no seamless commerce. VIBEUP consolidates all of this into one trusted ecosystem.

Wellness Seeker

Discover trusted practitioners, studios, and experiences near me
Build daily wellness habits and track progress over time
Find and join communities aligned with my values
Get personalised AI guidance without selling my data

Wellness Business / Practitioner

Create a verified, searchable business profile to attract aligned clients
Accept bookings and process payments in one place
Build a community around my practice or studio
Run sponsored content and ads to a targeted wellness audience

Conscious Creator

Publish content and build an audience without algorithmic suppression
Monetize through courses, digital products, and affiliate commissions
Access a mission-aligned audience that wants what I create
Track reach and revenue in one dashboard

3. Key Features & Outcomes

Mira AI Guide
Emotionally intelligent AI built on GPT-4o. Personalises practice recommendations, answers wellness questions, and guides users through habits — without selling data or optimising for screen time.
Identity Profiles
Values-based user profiles that form the trust layer of the platform. Users define their wellness identity; the platform uses this to match people, practitioners, and experiences.
Discovery & Map
Deep-filter search across practitioners, studios, events, and communities. Custom PostgreSQL match scoring with geolocation proximity matching (Haversine formula). Visual map view on roadmap.
Business Profiles
Verified listings for wellness businesses. Includes booking, hours, pricing, photos, reviews, and community tie-ins. Three tiers: Regen, System, System+.
Booking & Payments
In-app session and class booking with integrated payment processing. 10% platform fee on GMV. Supports one-off and recurring bookings.
Daily Practices
Habit tracking and accountability layer. Users log daily practices; streaks and accountability partners drive retention and DAU.
Communities
Purpose-driven groups with shared practices, events, and accountability. Operators pay Community+ tier ($396/yr). Members get access to structured programs.
Creator Tools
Profile, content publishing, course creation, and affiliate management for Conscious Creators. Revenue sharing on digital product sales and referrals.
Feed & Content
Conscious feed shows content from followed creators and businesses — no algorithmic toxicity, no engagement-bait. Chronological with curation controls.

4. High-Level Architecture

VIBEUP is a fully custom-built platform — every service, every database schema, every API endpoint is proprietary. There is no no-code, no inherited codebase. The architecture is a Next.js monolith with a structured service layer (not independently deployed microservices), backed by Supabase for auth, database, and storage. Clients are served via Capacitor (iOS) and the Next.js web app.

CLIENTSBACKENDAI ENGINE + PAYMENTSDEPLOYMENTiOS AppCapacitor 8.0.2Web AppNext.js 14 (React 18)AndroidCapacitor (planned)Partner APIREST / WebhookNext.js API Routesserver-side logicSupabase AuthSMS OTP via TwilioSupabase PostgreSQLprimary databaseSupabase Storagemedia / avatarsOpenAI GPT-4oVercel AI SDKGPT-4o-minifast modeStripebilling + payoutsCustom DiscoveryPostgreSQL + HaversineVercelserverless hostingCapacitor + XcodeiOS native buildsServerless deployment via Vercel · Native iOS builds via Capacitor + Xcode · Weekly production deploys
LayerTechnologyNotes
Mobile (iOS)Capacitor 8.0.2WebView wrapping Next.js. Push notifications, geolocation, camera.
Web FrontendNext.js 14.2.0 (React 18, TypeScript)Tailwind CSS, App Router, custom design system with 17 theme variants.
AndroidCapacitor (planned)Same codebase as iOS. Capacitor enables identical deployment to Android without a separate build.
Backend APINext.js API RoutesREST endpoints. Supabase Auth on all routes. Input validation, request logging.
Core ServicesNext.js service layerProfileService, DiscoveryService, ConnectionsService, MessagingService, AnalyticsService, AttributesService, VibesService — monolithic, not independently deployed microservices.
Mira AI EngineOpenAI GPT-4o (LLM-agnostic)Streaming via Vercel AI SDK. Three modes: fast (gpt-4o-mini), deep (gpt-4o), creative (gpt-4o). Context management, wellness knowledge. Provider-swappable.
Search & DiscoveryPostgreSQL (custom queries)Custom match scoring algorithm. Deep-filter: modality, geo, proximity, values alignment. Haversine formula for distance calculations.
GeolocationBrowser Geolocation APILocation capture, proximity matching, distance calculations. LocationField component with city/country autocomplete. Map view planned.
DatabasePostgreSQL (Supabase)Relational data store for all entities. Row-level security policies. Conversations stored in Supabase.
File Storage & CDNSupabase StorageUser media, avatars, business assets. Supabase CDN for delivery.
PaymentsStripeSubscription billing, booking transactions, creator payouts. 10% platform fee on GMV. PCI-DSS compliant via Stripe.
DevOps & DeploymentVercel + CapacitorServerless deployment via Vercel. Native iOS builds via Capacitor + Xcode. Weekly production deploys.

5. Security & Privacy Posture

VIBEUP is built on a trust-first foundation — not just as a product promise, but as an engineering mandate. Every system is designed with security and user privacy as primary constraints, not afterthoughts.

Authentication
Supabase Auth with short-lived tokens and PKCE flow for mobile security. SMS OTP via Twilio Verify API. Session management via Supabase SSR cookies. Row-level security policies enforce data access at the database level.
Data Encryption
All data encrypted at rest (AES-256) and in transit (TLS 1.3). Database-level encryption on all PII fields.
AI & Privacy
Mira never stores raw conversation data beyond session context. No user data is sold to advertisers or used to train third-party models. GDPR/CCPA compliant by design.
Payment Security
Payments processed exclusively via Stripe. VIBEUP never stores raw card data. PCI-DSS compliance delegated to Stripe.
Content Moderation
Community content subject to automated moderation + human review pipeline. Zero tolerance for harmful content; trust-first platform positioning.
Access Controls
Role-based access control (RBAC) throughout. Admin, operator, business, creator, and user permission tiers. All API endpoints require scoped authorization.
Audit Logging
All sensitive operations (auth events, payment actions, admin changes) written to immutable audit log. Available for compliance review.
GDPR & CCPA
Right to erasure, data portability, and consent management built into the platform. Privacy policy and consent flows live at app launch.

7. IP Asset Register

All source code is 100% custom-built and owned by VIBEUP Inc. with a clean chain of title. No open-source licensing issues, no third-party IP inherited.

TypeAssetJurisdictionStatus
TrademarkVIBEUP brand name and wordmarkUSPTO (US)Planned Q2 2026
Trademark"Social Wellness" category positioningUSPTO (US)Planned Q2 2026
TrademarkVIBEUP wordmark and visual identityUSPTO (US)Planned Q2 2026
Patent (potential)Trust-based identity matching algorithm for wellness communitiesUSPTOPlanning phase
Patent (potential)AI-driven wellness identity profile construction and recommendation engineUSPTOPlanning phase
Patent (potential)Wellness business community seeding and LOI conversion methodologyUSPTOPlanning phase
CopyrightAll platform source code (custom-built, not licensed)US (Berne Convention)Automatic upon creation
Trade SecretStrategic partner pipeline, growth methodology, and proprietary discovery algorithmsInternalProtected via NDA

Confidential · Q1 2026 · VIBEUP Inc. · Technology stack and roadmap reflect current engineering state as of March 2026. Subject to change. For accredited investors only.

← Back to Data Room