Privacy Policy

1. Who controls your data

The controller of your personal data is the person who runs Vantis — a private individual in Poland, without a registered business (“we”, “the Controller”).

Contact in matters of personal data: vantis.app@gmail.com, or by post to the Controller’s address.

We have not appointed a data protection officer — we are not required to (Article 37 GDPR).

This policy covers the Vantis application — in the browser, as an app added to the home screen and in the iOS and Android apps (“App”), available at https://vantis-life-os-app.vercel.app — and this website, https://vantis-life-os.vercel.app (“Website”).

2. The essentials

1. •We collect only what the App needs to work: your account, your entries (tasks, habits, goals, money, library) and basic technical data.
2. •Only you can see your entries. We don’t sell data, we don’t show ads and we don’t profile you for marketing.
3. •We keep the data on servers in the European Union. Some service providers are based in the USA — then we use the safeguards required by the GDPR (section 7).
4. •AI features work only with your consent. You can withdraw it at any time in Settings.
5. •You can download all your data at any time in Settings → Account. You can delete your account on the account deletion page, which also opens from Settings → Account: the account is deleted for good 30 days after your request, and until then you can cancel.

3. What data we process

What we don’t collect: payment card numbers (Apple, Google or Paddle handle them), location data, contacts, photos, data from other apps.

Special categories of data. We don’t ask for data about your health, beliefs or religion. If you enter such data yourself (e.g. a “medication” habit, an expense description), we process it only to store it and show it to you, and it goes to AI only with your explicit consent (section 5). Your journal mood can say something about how you feel — we keep the journal only to show it to you, and we never send it to AI.

4. Why and on what legal basis

Our legitimate interests are: the security of the App and of accounts, protection against abuse and excessive costs, fixing errors, improving the App based on aggregated usage data and defending against claims. You can object (section 9).

You need to give an e-mail address and a password (or sign in with Google or Apple) to create an account. Everything else you give voluntarily — without it some features work in a limited way.

5. Artificial intelligence (AI)

1. •AI features are optional and you turn them on with your consent (the welcome quiz or Settings → Profile). Without consent none of your data goes to AI, and the briefing is built from a template using your data in the App.
2. •After you consent, when you use an AI feature, we send to the model provider — Anthropic PBC (USA), the Claude model — only the data needed for the answer: e.g. tasks, habits, goals, money, today’s calendar events (if you connect a calendar), excerpts from the library and your quiz answers. For “Ask about your data” it’s your question and a summary of habits, goals, money (the last 3 months, budgets, recurring bills, account balances) and tasks. For “Plan with AI” in Goals — the goal name, deadline and the steps it already has (with which ones are done); the suggested steps are added to the goal only when you save them. We never send the journal or your mood to AI.
3. •Receipt and invoice scanner (Money): the photo or PDF you choose goes to Anthropic together with the list of your expense categories. We don’t store the file — only the expenses you approve remain (amounts, categories, shop name and main items). The document may contain the data printed on it (e.g. your name on an invoice) — the AI is instructed not to copy it.
4. •Anthropic acts as our processor: it processes data only to generate the answer; under Anthropic’s commercial terms it doesn’t use the data to train models and keeps it only for a limited time for security purposes.
5. •Content generated by AI is labelled in the App (the model name next to the briefing and summaries). AI can be wrong — it gives suggestions, not financial, investment, legal or medical advice.
6. •AI doesn’t make decisions about you that have legal effects or similarly significantly affect you (Article 22 GDPR).
7. •Withdrawing consent doesn’t affect the lawfulness of processing before the withdrawal.

6. Who we share data with

We don’t sell data and don’t share it for marketing. We use providers who process data on our behalf (processors, Article 28 GDPR — we have data processing agreements with them):

Independent controllers (they process data under their own rules, according to their privacy policies):

1. •Apple (App Store, Sign in with Apple) and Google (Google Play, Sign in with Google) — when you buy a subscription in a mobile app or sign in with their account;
2. •Paddle.com Market Ltd (United Kingdom) — the seller of subscriptions on the web (Merchant of Record): takes the payment, issues the receipt, settles taxes, handles refunds;
3. •providers of browser notification services (Google, Apple, Mozilla, Microsoft) — they deliver encrypted notifications;
4. •Google (Google Calendar) and Microsoft (Outlook, Microsoft 365) — when you connect your calendar with them. We get only read access to the calendar: we store the access key (token) encrypted and never pass it to the browser or anyone else; the provider learns that you use the App and sees our requests for events. After you click “Disconnect” we delete the key, and with Google we also revoke it; you can also remove access in your Google account settings (Security → Third-party apps with account access) or Microsoft account settings (Privacy → Apps and services). Use of data received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements: calendar data is used only to show your events and reminders in the App, isn’t used for ads or sold, and goes to AI only with your consent (section 5).

We may also share data with public authorities when the law requires it.

7. Transfers outside the European Economic Area

Some providers are based in the USA or process data outside the EEA. We transfer data only with the safeguards of Chapter V GDPR: a European Commission decision finding an adequate level of protection (including the EU-US Data Privacy Framework — for providers covered by it) or standard contractual clauses approved by the Commission. You’ll get a copy of the safeguards on request (section 1).

United Kingdom (Paddle) — a Commission adequacy decision.

8. How long we keep data

1. •Account data, profile, your entries, activity days, AI counters, subscription status and devices with notifications — until the account is deleted. After you request deletion (on the account deletion page, which also opens from Settings → Account), the account stays for 30 days so that you can change your mind and cancel; after that we delete the account and all the data above from our database.
2. •Database backups — up to 7 days; after that, deleted data is gone from the backups too.
3. •An address on the waitlist — until we send the invitation, at the latest until the App launches; the invitation to testing — until the account is deleted.
4. •The log of sent notifications — 7 days.
5. •Error reports and page-view statistics — according to the providers’ settings (error reports up to 90 days).
6. •Correspondence with you — until the matter is closed, and then until claims expire.
7. •Billing data for subscriptions is kept by the sellers (Apple, Google, Paddle) according to their obligations; by us — only as far as tax and accounting law requires.

9. Your rights

You have the right to:

1. •access your data and get a copy — Settings → Account → “Download my data”;
2. •rectification — in the App or by contacting us;
3. •erasure (“the right to be forgotten”) — on the account deletion page (also from Settings → Account); the account is deleted 30 days after the request, and until then you can cancel;
4. •restriction of processing;
5. •data portability — the export file is in JSON format, readable by other programs; you can load the same file back in Settings → Account → “Restore from backup” (it replaces the module data from the file; your AI consent and acceptance of the Terms stay as they are on the account);
6. •object to processing based on legitimate interest (section 4);
7. •withdraw consent to AI at any time — Settings → Profile; you turn notifications off in Settings → Notifications or in your device settings;
8. •lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl).

We respond to requests without undue delay, at the latest within one month (with a possible extension under Article 12 GDPR). We may ask you to confirm your identity — e.g. with a message from your account’s e-mail address.

10. Cookies and device storage

1. •Essential cookies — the sign-in session. Without them you can’t use your account; they don’t require consent (Article 399(3) of the Polish Electronic Communications Law). Also the remembered language and currency of the App (pos-locale, pos-currency) — without them the interface wouldn’t know in which language to display.
2. •Browser storage (localStorage) — the chosen theme, the last generated briefing and summaries (so that they aren’t generated again), hiding “First steps”, modules opened today on this device (so that visits for the statistics in section 3 aren’t counted several times), habits checked off without internet — only until they’re sent to the account (they also disappear when you sign out). It doesn’t leave your device except for that sending. Also your answers to the welcome quiz before you create an account — they reach us only after you create it, and they disappear from the device after the plan is saved, after you sign out and after the account is deleted.
3. •Service worker — stores only the “No connection” screen; it doesn’t store pages with your data.
4. •Statistics (PostHog) work without cookies and without storing anything in the browser, on anonymised page addresses.
5. •On the Website we don’t use cookies. The chosen theme is remembered in your browser’s storage (localStorage). On the account deletion page your sign-in is kept only in the open browser tab (sessionStorage) and disappears when you close it.
6. •We don’t use advertising cookies or cookies that track you across websites.

11. Security

We use, among other things: encrypted connections (HTTPS), isolation of account data at the database level (each account sees only its own data), password hashes instead of passwords, protection of sign-in against guessing (limits and CAPTCHA), confirming a recent sign-in before an account can be deleted, limited access to keys and provider dashboards, error reports without the content of entries, a content security policy (CSP) that doesn’t let the page send data to other servers. When you create an account or change your password, we check whether the password has leaked before from another service (Have I Been Pwned): we send only the first 5 characters of the password’s SHA-1 hash, never the password itself or the full hash. You can also turn on two-step sign-in (Settings → Account): when you sign in, besides your password you then enter a one-time code from an authenticator app on your phone. To check the codes we store that app’s key (in the Supabase database, like the account data) and the date it was turned on; we delete them when you turn two-step sign-in off or delete your account. If a personal data breach is likely to result in a high risk to you, we’ll inform you as required by Article 34 GDPR.

12. Age

The App is intended for people aged 16 and over. We don’t create accounts for younger people — the welcome quiz ends without saving any data if you choose an age under 16. If we learn that an account was created by a person under 16, we’ll delete it.

13. Changes to this policy

We may change this policy when the App’s features, providers or the law change. We’ll tell you about significant changes in the App or by e-mail at least 14 days before they take effect. Previous versions are available on request.