Privacy Policy

Version 2026-11-07 (effective 7 November 2026)

This policy explains, in plain words, what personal data the Vettora app collects, why, where it goes, how long it is kept and what rights you have. It applies to the Vettora app (Android and iOS) and to Vettora’s servers. Please read it with our Terms of Service.

1. Who we are and how to reach us

Vettora is developed and run by Abhikshit Sarkar under the supervision of his parents (legal guardians), who are legally responsible for the service and for your personal data (the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023, and the “controller” under the GDPR). In this policy, “Vettora”, “we”, “us” and “our” mean Abhikshit Sarkar and his parents together.

Email: vettora.help@gmail.com. Location: Agartala, West Tripura, India. Abhikshit Sarkar handles privacy questions and complaints (our grievance contact); please write by email.

2. The short version

• We collect only what is needed to run your account and the checks you ask for.
• The files and text you check are analysed and then deleted. We never store them.
• Images you check for AI are analysed by VisionX AI, our own AI model on our own server. The files and text you check in Vettora’s checks are never sent to an outside company.
• Vettora Oblongata, our AI assistant, is different: what you send it (your messages, photos, and the other details listed in section 15) is processed by a third-party AI provider, Anthropic PBC in the USA, to write the answers, and the text of spoken replies is processed by ElevenLabs. You are told this and asked to agree before you first use it. Neither provider may use it to train its AI models.
• No advertising, no tracking or analytics tools, no profiling for ads, and we never sell or rent personal data.
• Vettora is for people aged 13 and over. People aged 13 to 17 need a parent’s or legal guardian’s consent first. This includes Vettora Oblongata and its website builder. Web tasks (Vettora Oblongata using websites for you) are only for people aged 18 and over.
• You can see, download, correct and delete your data inside the app at any time.

3. What we collect

Account details from Google. When you sign in with Google, our sign-in provider (Supabase Auth) receives from Google your name, email address, profile photo link and a Google account identifier. We never see your Google password. We also keep when the account was created and when you last signed in.

Age details. We ask for your age. From it, the app works out a birth date of exactly that many years ago (so you are never treated as older than you are); the day is used only once and is not stored, and we keep that month and year to apply the age rules in section 9 as you grow older. If you are under 13, we do not keep your age at all: we only record that the account cannot be used, and the account is deleted.

Agreement records. Which version of these documents you agreed to and when. For users aged 13 to 17, a consent record: the parent’s or guardian’s Vettora sign-in account, whether they are a parent or legal guardian, their confirmation that they are 18 or over, the version they agreed to, and when consent was given or withdrawn. The parent’s year of birth is checked but not stored.

Preferences. Theme, language, whether reports are saved, and your optional answers to the first-run questions (chosen from fixed lists, such as what you want to check and how you heard of Vettora; no free text). You can skip these questions.

Saved reports, only if you turn saving on. A report contains the findings, the type and size of the file and a SHA-256 fingerprint (a one-way code computed from the file that cannot be turned back into it). It never contains the file, the text, a file name or a link to the content. Unsaved reports exist only on your phone, in memory, until you leave them.

Feedback you choose to send in the app.

Subscription records, only if you buy Pro or Ultra: which plan, the Google Play purchase token (a code that identifies the purchase), its state (active, cancelled, expired, refunded…), when it ends and whether it renews. Payment happens entirely in Google Play: we never see your card, UPI, bank details or billing address. Each purchase is tagged with a one-way code made from your account identifier, so it can only be used for your account.

Technical and safety records: when an analysis was started and whether it finished (no content); when you used VisionX AI, sent a message to Vettora Oblongata, built a page or had a reply spoken (times only, no content), to stop abuse and keep within limits. Our server logs record how long each request took and short error codes, never what you wrote. Our hosting provider also keeps short-lived technical logs (such as IP address, time and request type) to run and protect the service.

On your phone only (not stored by us): your language, the names and previews of files you recently checked, whether you have seen the introduction, your Vettora Oblongata conversations (shown under Recents), the memories you asked Vettora Oblongata to keep, its settings, your “My details” and saved logins (section 15), your post reminders (the photo or video you picked, the caption and the time; section 15), the games, apps and tools Vettora Oblongata built for you (“My apps”, section 15), and, only if you allowed location, the name of your approximate city. These are kept in your phone’s encrypted secure storage or the app’s private storage. Conversations, memories, your city, My details, saved logins, post reminders and My apps are removed when you sign out or delete them, and everything is removed when you uninstall the app. Parts of them are sent with your messages to Vettora Oblongata (section 15).

4. What we do not collect

We do not store the files or text you analyse: they are processed in server memory and discarded when the analysis ends. We do not read GPS location from photos. The camera is used only when you choose “Take a photo”, or tap the photo button in Vettora Oblongata, after you allow it. We do not ask for access to your photo library: the phone’s own photo picker shares only the photo or video you pick. The microphone is used only while a mic button in Vettora Oblongata is on, after you allow it (section 15). We do not read your contacts. We never use your precise (GPS) location: if you allow location for Vettora Oblongata, the phone works out only the name of your approximate city, and only that name is kept and sent; you can switch it off at any time. Notifications are used only for post reminders you set, after you allow them: each one is booked on your phone, and our servers send none. We do not use advertising IDs, analytics, tracking pixels or social media trackers. We do not use the content you analyse or your Vettora Oblongata chats to train AI models, and our AI providers are not allowed to use them for training either.

5. Why we use your data, and our legal bases

• To create and run your account and provide the checks you ask for (performing our agreement with you; under India’s DPDP Act, your consent).
• To check images with VisionX AI, our own AI model on our own server, when you ask for an AI-image check (performing our agreement with you; under India’s DPDP Act, your consent).
• To answer you and do the tasks you ask with Vettora Oblongata, using our AI providers (Anthropic for answers, ElevenLabs for the spoken voice), when you choose to use it (your explicit consent, given in the app before first use; performing our agreement with you).
• To suggest things near you and understand “near me”, using your approximate city, only if you allow location (your consent; you can withdraw it in Vettora Oblongata’s settings or your phone’s settings).
• To apply the age rules and record agreements and parental consent (legal obligation, and consent).
• To keep the service secure, prevent abuse and enforce fair daily limits (our legitimate interest in a safe, affordable free service; under the DPDP Act, a legitimate use for this purpose).
• To answer feedback and requests, and to keep records the law requires (legal obligation and legitimate interest).

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Vettora’s results are information about content, not decisions about you.

Where we rely on consent you can withdraw it at any time (see section 10). Withdrawing does not affect anything done before.

6. How analysis works, and VisionX AI

Your file or text travels over an encrypted connection (HTTPS) to Vettora’s server, which runs Vettora’s own checks (for example: file structure, editing software traces, content credentials and invisible AI markers). Then it is discarded.

AI-image checks also use VisionX AI, Vettora’s own AI model. It runs on a server that Vettora rents from Hetzner Online GmbH in Germany and that only Vettora controls. The image travels there over an encrypted connection (HTTPS), is held in memory only, is checked, and is then discarded. It is never stored, logged or used to train the model. Hetzner provides the computer and network only and does not look at the content.

We send VisionX AI only the image itself, under a generic file name. We never send your name, email, account identifier or any other account data with it. VisionX AI’s score is an estimate, not proof.

We do not send the files or text you check to any outside company for analysis. Please never check pictures or videos of other people without their agreement, or anything private, intimate, confidential or about children.

Text is checked only by Vettora’s own checks. AI-text detection and deepfake video detection are not available yet (“coming soon”). If we add them, this policy will be updated first.

7. Who we share data with

Only these service providers, each for the purpose stated:

• Supabase (Supabase, Inc.): sign-in, database and server functions. Your account data is stored in its Singapore region.
• Google (Google LLC): Google sign-in, Google Play for app distribution, and Google Play Billing for Pro and Ultra (Google handles the payment; we ask Google only whether a purchase is real and paid up, and Google tells us when a subscription renews, is cancelled, refunded or ends). Google’s own privacy policy applies to your Google account and payments.
• Hetzner (Hetzner Online GmbH, Germany): the server that runs VisionX AI, in Germany. Hetzner hosts the machine only; images are processed in memory by Vettora’s own software and are not stored.
• Anthropic (Anthropic PBC, USA): the AI provider that writes Vettora Oblongata’s answers. It receives what is listed in section 15 for each message, web-task step and page you ask to build, but never your name, email, account identifier, birth date or other account data from us. Under its commercial terms it may not use this data to train its models, and it deletes it within 30 days, except that content its automated safety systems flag as breaking its usage policy may be kept for up to 2 years, and data may be kept longer where the law requires.
• ElevenLabs (Eleven Labs Inc.): only when Vettora Oblongata’s own voice is switched on, the text Vettora Oblongata speaks (its replies and Vex’s greeting; never your messages, photos, memories or account details), to turn it into speech (section 15). ElevenLabs keeps the generated text and audio in Vettora’s account history under its own privacy policy.
• Apple or Google speech services: when you speak to Vettora Oblongata, your phone’s own speech recognition (Apple’s on iPhone, usually Google’s on Android) turns your voice into text. Depending on your phone and settings, this may happen on the phone or on Apple’s or Google’s servers, under their own privacy policies. Vettora receives only the text.
• Websites you use through Vettora’s browser: when Vettora Oblongata does a web task, the website you visit receives what any visit sends (such as your IP address, and cookies kept in Vettora’s browser on your phone) and whatever you or Vettora type there. Each website’s own terms and privacy policy apply.

We may also disclose data if the law requires it (for example a valid court order), to protect someone’s safety, or to report illegal content such as child sexual abuse material to the authorities. If the service is ever transferred to someone else, we will tell you first and you can delete your account. We never sell, rent or trade personal data, and we do not “share” it for cross-context behavioural advertising.

8. International transfers

Vettora is run from India. Your account data is stored in Singapore. Images checked by VisionX AI are processed in memory on Vettora’s server in Germany (European Union). Google may process sign-in data in many countries. When personal data leaves your country, we use providers with recognised safeguards where available (such as the Standard Contractual Clauses in Supabase’s data processing terms, and the EU’s GDPR, which applies to Hetzner in Germany). India’s DPDP Act allows these transfers except to countries the Government restricts; we will stop any transfer that becomes restricted.

Vettora Oblongata messages pass through Vettora’s server functions (Supabase) and are processed by Anthropic, mainly in the USA (and possibly other countries where Anthropic or its cloud providers operate). When Vettora Oblongata’s own voice is on, the text it speaks is processed by ElevenLabs in the USA or other countries. Speech to text is done by your phone’s own speech service (Apple or Google) under its own terms. These transfers are made only after you agree in the app, and over encrypted connections.

9. Children and age rules

Vettora is not for children under 13. Everyone is asked for their age before they can use the app. If someone under 13 tries to sign up, the app does not let them continue, deletes the account and keeps nothing about them; this phone then cannot start a new sign-up for 24 hours. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used Vettora, contact us and we will delete their data promptly.

People aged 13 to 17 can use Vettora only after a parent or legal guardian gives verifiable consent. This follows India’s DPDP Act (consent of a parent for everyone under 18), the GDPR and UK GDPR (which require a parent’s consent below an age between 13 and 16, depending on the country), the US Children’s Online Privacy Protection Act (under 13) and similar laws elsewhere. We apply the strictest common rule, under 18, everywhere.

How parental consent works: on the young person’s phone, the parent or guardian reads this policy and the Terms, confirms they are the parent or legal guardian, confirms their year of birth shows they are 18 or over, and signs in with their own Google account (which must be a different account, and not one recorded as under 18). That sign-in is used only to record the consent, is ended straight away and is not saved on the phone. The code linking the two steps is single-use and expires after 15 minutes.

Parents and guardians can, at any time: withdraw consent (in the young person’s app under Settings → Privacy, or by contacting us), which pauses the account; ask to see, download, correct or delete the young person’s data; and delete the account from the app. For users under 18 we do not track behaviour, do not show advertising and do not build profiles.

Vettora Oblongata and its website builder are open to everyone who can use Vettora (13 and over; 13 to 17 only with the parent’s or guardian’s consent above, which covers Vettora Oblongata too). For users aged 13 to 17, every answer and every page built is first checked by an extra safety step and held back if it is not suitable for their age, Vettora Oblongata is told the person is a teenager and keeps everything age-appropriate, and their data is never used for tracking, profiling or ads. Web tasks (using websites, logins and payments) stay for people aged 18 and over only. Buying Pro or Ultra needs a parent’s or guardian’s permission and their Google Play payment method.

Honest limits: we cannot be certain of anyone’s real age or that the adult who consents is truly the parent. If we learn that information given was false, we may pause or delete the account. We will add stronger checks (such as age signals from Google Play or a government-approved digital token) when they become available and required.

10. Your rights

Wherever you live, you can:

• Access: see your data in the app and download a copy (Settings → Privacy → Export my data), or ask us for a summary of the data we hold and who we shared it with.
• Correct and update: change your name in the app, or ask us to correct anything else (including a wrongly entered age).
• Erase: delete reports, clear your answers, or delete your whole account in the app (Settings → Delete account). You can also ask us by email or through our account deletion page: our account deletion page.
• Withdraw consent: for parental consent, as in section 9; for everything else, delete your account.
• Object or restrict: ask us to stop or limit a use of your data based on our legitimate interests.
• Portability: receive your data in a machine-readable format (the export is JSON).
• Nominate: under India’s DPDP Act, you may nominate another person to exercise your rights if you die or become unable to.
• Complain: contact our grievance contact first (section 1). We reply within 30 days at most (within any shorter time your law requires). If you are not satisfied, you can complain to the Data Protection Board of India, your local data protection authority in the EU or EEA, the UK Information Commissioner’s Office, or the regulator where you live.

California and other US state residents: you have the rights to know, delete and correct, and the right not to be discriminated against for using them. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics. We will verify requests by asking you to make them from your signed-in account or from the email address on it.

We do not charge for requests. We may need to confirm your identity first, and may refuse requests that are manifestly unfounded or that the law lets us refuse; if so, we will tell you why.

11. How long we keep data

• Files and text you analyse: not kept (deleted when each analysis ends).
• Vettora Oblongata messages, photos, context, web pages and answers: not kept on our servers (discarded once each answer is sent). Anthropic deletes them within 30 days (up to 2 years only for content its safety systems flag, or longer where the law requires). Your conversations are saved only on your phone, encrypted, until you delete them, sign out or uninstall the app. Memories, your approximate city, My details and saved logins are stored only on your phone, encrypted, until you delete them, switch location off, sign out or uninstall the app. Pages, apps and games built for you are kept only on your phone (“My apps”) until you delete them, sign out or uninstall the app. Text spoken by ElevenLabs is kept by ElevenLabs as its privacy policy describes. Vettora Oblongata, page-building and voice use records (times only): 35 days.
• Account, profile, age and agreement records: until you delete the account.
• Parental consent records: while the account exists, as proof that consent was given or withdrawn; deleted with the account.
• Saved reports: until you delete them or the account.
• Subscription records: while the account exists (they also show when a subscription ended); deleted with the account. Google keeps its own payment records as its policies and the law require.
• Analysis start records: 2 days. VisionX AI use records (times only): 35 days. Feedback: 12 months. Consent link codes: deleted within a day of expiring. All are removed automatically.
• Accounts of children under 13: deleted immediately, or automatically within an hour if the phone goes offline.
• Hosting provider technical logs: a short period set by the provider.
• A parent’s sign-in account created only to give consent: kept as part of the consent record until the child’s account is deleted; the parent can ask us to delete it, which also ends the consent.

On our current hosting plan we keep no database backups. If backups are added, this policy will say so, and deleted data will disappear from them when they expire.

12. How we protect data

All traffic is encrypted (HTTPS). Data is encrypted at rest by our hosting provider. Database security rules mean each person can reach only their own data, and the most sensitive records can be written only through checked server functions. Secret keys stay on the server and are never put in the app. Sign-in uses Google with PKCE, and your session is kept in your phone’s encrypted secure storage. The app does not allow Android cloud backups of its data. Uploads are size-limited and checked by their real contents, and there are rate limits against abuse. We keep access to the systems to the minimum people needed.

No system is perfectly secure. If a personal data breach happens, we will act quickly to contain it and will tell affected people and the authorities as the law requires (for example the Data Protection Board of India, and EU or UK authorities within 72 hours where the GDPR applies), including what happened, what data was involved and what you can do.

13. Changes to this policy

When we change this policy, we update the version and date at the top. For any change that matters, the app shows the new version and asks you (and, for users aged 13 to 17, a parent or guardian when the law requires) to read and agree again before you continue.

14. Language

This policy is written in English. If a translation is provided and differs, the English version applies, except where your local law requires otherwise.

15. Vettora Oblongata

Vettora Oblongata is an optional AI assistant in the Vettora app, made by Vettora and powered by a third-party AI model provided by Anthropic PBC (USA). Vettora did not create that model. You can type or speak to it, send it a photo you take or choose, and ask it to do things: answer questions, add calendar events, set alarms and timers, remember things, tell you your plan for the day, open apps, start searches, directions, messages and calls, prepare payments, do tasks on websites in Vettora’s own browser (web tasks), and build small web pages, apps and games (the website builder). “Talk to Vex” opens a voice conversation, and Vex greets you out loud. Before you first use Vettora Oblongata, the app tells you that your messages are processed by a third-party AI provider and asks for your explicit agreement; it does not work until you agree.

What is sent with each message: your words; the photo for that message (if any); the last few messages of the chat; your phone’s date, time and time zone; the memories you asked it to keep; your approximate city, only if you allowed location; and, only if you switched on “Read my calendar”, the titles, times and places of today’s and tomorrow’s calendar events. These go over an encrypted connection to Vettora’s server, which checks your account and age and then sends them to Anthropic, without your name, email or account identifier. Photos are made smaller first and carry no location data. Nothing is sent while the app is closed or the phone is offline.

Web tasks: when Vettora Oblongata does a task on a website, Vettora’s browser runs on your phone and, for each step, sends a description of the page (its address, title, visible text and the buttons and boxes on it), a small screenshot of the part of the page on your screen, and your task to Anthropic to decide the next step. No screenshot is taken on login, account, address, checkout or payment pages, or on any page that shows your saved phone number, email or street address. It never reads or sends what is in password, one-time-code, card or PIN boxes; you type those yourself. Any tap that may pay or book needs your “Yes” first, and you can take over or stop at any time. Logins and cookies for those websites stay in Vettora’s browser on your phone.

My details and saved logins: in “My details” you can save your name, mobile number, email and up to 3 addresses, and, like a password manager, the username and password you use on websites, so Vettora Oblongata can fill in forms and you can log in with a tap. They are saved only on your phone, encrypted in the phone’s secure storage, and never sent to Vettora’s servers, to Anthropic or to anyone else. The AI is only told which details you saved (for example “mobile number”), never the values; it types a placeholder and your phone puts the real value into the website’s box. If a page shows your saved details back, the phone replaces them with the placeholders again before describing the page to the AI. A saved login is filled in only when you tap to fill it, only after Face ID, your fingerprint or your phone’s lock code, and only on that login’s own website (a look-alike website gets nothing); the website itself then receives what you or Vettora typed there, as on any visit. You can see, change or delete them at any time in “My details”, and signing out of Vettora on the phone deletes them. Do not save card, bank or UPI details, PINs or one-time codes there; Vettora does not accept them.

Post reminders: you can ask Vettora to remind you to post something on Instagram, X, Facebook, YouTube or another app at a set time. The photo or video you pick, the caption and the time are kept only on your phone (the photo or video as a private copy in Vettora’s own folder) and are never sent to Vettora’s servers. At that time your phone shows a notification. When you tap it, Vettora copies the caption and hands the photo or video to the app you choose through your phone’s share menu; you post it yourself in that app, under that app’s terms. Vettora never logs in to your social media accounts and never posts for you. A reminder and its copy are deleted when you mark it done, delete it, sign out or uninstall the app. If you ask Vettora Oblongata to set a reminder, your words go to Anthropic like any other message.

My apps: each app, game or tool Vettora Oblongata builds for you is kept as a file in Vettora’s own private folder on your phone, so you can open it again without internet, together with what you save inside it (for example a planner’s tasks or a best score). None of this is sent anywhere when you open or use it. You can delete an app and its saved data in My apps; all of them are deleted when you sign out or uninstall the app.

Website builder: when you ask for a page, app or game, your description (and, for changes, the current page) is sent to Anthropic, which writes the page. The page runs only inside Vettora, in a sandbox with no internet access, and is not stored by us once you leave it.

Voice: when you use a mic button, your phone’s own speech service (Apple or Google) turns what you say into text, and only that text is sent to Vettora (section 7). When Vettora Oblongata’s own voice is switched on, the text it speaks is sent to ElevenLabs to be turned into speech; otherwise your phone’s voice reads it.

Please do not send passwords, PINs, one-time codes, bank, card or ID details, health information, private documents, photos of people who have not agreed, or anything else you would not want an outside company to process. Vettora Oblongata tries not to save such details as memories.

What we keep: we do not store the photos, messages, context, web pages, answers or built pages on our servers. Your conversations are saved only on your phone (Recents) until you delete them, sign out or uninstall the app; memories likewise, and you can see and delete every memory in Vettora Oblongata’s settings. We keep only the time of each message, built page and spoken reply for 35 days, to apply limits and prevent abuse.

Actions and payments: Vettora Oblongata only does what you ask. On the phone it uses the phone’s own features: calendar events (with your calendar permission), alarms and timers in the Clock app, and opening other apps with your task ready. It cannot tap or type inside other apps; it acts only inside Vettora’s own browser. Payments always show a confirmation pop-up first; after you tap Pay, your UPI app opens with the payment filled in and you approve it there with your own UPI PIN. Vettora never moves money, never sees your PIN and never stores payment details.

Age: Vettora Oblongata is for people aged 13 and over, and for those aged 13 to 17 only with a parent’s or guardian’s consent and extra safety checks; web tasks are for people aged 18 and over only (section 9). It is an AI assistant, not a person or a companion, and does not role-play relationships.

Permissions: the app asks before using the camera, the microphone, the calendar and location, and uses each only for the Vettora Oblongata features above. You can switch off “Read my calendar” and location in Vettora Oblongata’s settings, and withdraw any permission in your phone’s settings at any time. Withdrawing your agreement to the AI provider: stop using Vettora Oblongata and delete your conversations; you can still use the rest of Vettora.

16. Indian law, and our grievance contact

We aim to follow India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, including their parts that come into force in stages up to May 2027, as well as the Information Technology Act, 2000 and the rules made under it. We follow these privacy rules now, before every part becomes mandatory.

Vettora does not ask for or store passwords, financial account or card details, health, biometric or other sensitive personal data. If you put such information in a message to Vettora Oblongata, it is processed only to answer you, as described in section 15, and is not stored by us.

Grievance contact: Abhikshit Sarkar, vettora.help@gmail.com, Agartala, West Tripura, India. We acknowledge complaints as soon as we can and resolve them within 30 days at most (or any shorter time the law sets). If you are not satisfied, you can complain to the Data Protection Board of India.

Apple App Store and Google Play: as their rules require, the app tells you clearly, and asks for your agreement, before any personal data is shared with a third-party AI service, and our store listings describe the data the app collects and shares.