Last updated:
1. Who we are
Vavyan (“Vavyan”, “we”, “us”, “our”) is an independent software company. We operate vavyan.com and all applications under the vavyan.com domain, including Abode (abode.vavyan.com).
For questions about this policy, contact us at privacy@vavyan.com.
2. What data we collect
Data you provide directly
- Account information — email address and display name when you sign up
- Content you create — items, recipes, notes, photos, and other content you add to our apps
- Communications — any messages you send us via email or contact forms
Data collected automatically
- Usage data — pages visited, features used, time spent (via server logs)
- Technical data — browser type, operating system, screen size, IP address
- Session data — authentication tokens stored in your browser to keep you logged in
Data we do not collect
We do not collect payment card details (processed directly by Stripe). We do not collect location data, contacts, or biometric data. We do not build advertising profiles.
3. How we use your data
We use your data only to provide and improve our services:
- Provide the service — store and sync your content across devices
- Authentication — verify your identity and keep your account secure
- Communication — send account-related emails (OTP codes, important notices)
- Improve the apps — understand how features are used to fix bugs and build improvements
- Legal obligations — comply with applicable laws
We do not sell your data, share it with advertisers, or use it for any purpose beyond what is listed above.
4. Legal basis for processing (GDPR)
If you are in the European Economic Area (EEA) or UK, we process your data under these legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the service | Contract performance (Art. 6(1)(b) GDPR) |
| Account security | Legitimate interests (Art. 6(1)(f) GDPR) |
| Improving the service | Legitimate interests (Art. 6(1)(f) GDPR) |
| Legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
5. Data storage and security
All data is stored on servers located in the European Union. We use industry-standard encryption in transit (TLS) and at rest. Access is restricted to authorised personnel only.
We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it by law.
6. Third-party services
We use a small number of third-party services:
| Service | Purpose | Privacy policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Brevo | Transactional email (OTP) | brevo.com/legal/privacypolicy |
| OAuth sign-in (optional) | policies.google.com/privacy | |
| Cloudflare | DNS and CDN for vavyan.com | cloudflare.com/privacypolicy |
| Anthropic / OpenAI / Google AI | AI item recognition in Abode | Per provider’s data processing terms |
These providers are bound by their own privacy policies and, where applicable, data processing agreements with us. We do not share your data with these providers beyond what is necessary for the service they provide.
7. Your responsibility for your data
You are solely responsible for all data that you transmit or that relates to any activity you have undertaken using our services. We are not responsible for any loss or corruption of data you submit, and you waive any right of action against us arising from such loss or corruption to the extent permitted by applicable law.
8. Your rights
Under GDPR, you have the following rights:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”)
- Portability — receive your data in a machine-readable format
- Restriction — restrict how we process your data
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent
To exercise any of these rights, email privacy@vavyan.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
9. Account termination
We reserve the right to suspend or permanently delete any account and associated content at any time, without warning, at our sole discretion — including but not limited to cases of Terms of Service violations.
10. Cookies
We use essential cookies only:
- Session cookies — keep you logged in during your session
- Authentication tokens — stored in
localStorageto maintain your login across sessions
We do not use tracking, analytics, or advertising cookies. We do not use third-party cookie networks.
11. Children’s privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, contact us immediately.
12. Changes to this policy
We reserve the right to change, modify, or update this Privacy Policy at any time at our sole discretion. We will notify you by email of material changes at least 14 days before they take effect. Non-material clarifications will be reflected by updating the date at the top of this page. Continued use of our services after any changes constitutes your acceptance of the revised policy.
13. Contact
Privacy enquiries: privacy@vavyan.com
General contact: hello@vavyan.com
Questions about this document?
We aim to respond within one business day.