Privacy Policy for Vindra

Effective date: November 9,2026 Last updated: November 9,2026

Vindra is a private journal that works entirely on your phone. This policy explains what that means in practice. In short, we never see what you write.

1. Your journal stays on your phone
Your entries, moods, photos, videos, voice notes, transcripts, stickers, sealed letters and settings are stored only on your device, in an encrypted local database. They are never uploaded to us or to anyone else. We have no servers that hold your journal, and we cannot see, read or recover it.

2. What we don’t collect

• No accounts or sign-up

• No analytics, advertising or tracking tools

• No location, contacts, call logs, SMS or browsing history

• No AI or cloud service reads your entries

3. Subscriptions (Vindra Premium)
Purchases are handled by Google Play or the Apple App Store, depending on your device. We use RevenueCat to check whether your subscription is active. RevenueCat receives your purchase history (which plan, when it started or renewed) and a random, anonymous app ID. It does not receive your name, email or any journal content. We use this only to unlock Premium features and to understand subscriptions in aggregate. RevenueCat’s privacy policy: https://www.revenuecat.com/privacy

You can cancel anytime in your Google Play or App Store subscription settings. If Premium ends, nothing you wrote is deleted.

4. Permissions
Vindra only asks for a permission when you use the feature that needs it:

• Camera and photos: to add photos, videos or a journal cover

• Microphone: to record voice notes

• Notifications: for reminders you choose, sealed-letter opening days and a reminder before a free trial ends. All notifications are scheduled on your phone; we use no push server.

• Fingerprint / Face ID: to unlock the app or a locked entry. Your phone handles this, and Vindra never receives your biometric data.

We never request location, contacts, call logs, SMS or background location.

5. App lock and PIN
If you set a PIN, it’s stored on your device as a protected hash. There’s no account, so nobody, including us, can reset it for you.

6. Export and import
You can export your entries as PDF, plain text or a JSON backup, and import them again. Exported files are not encrypted and leave Vindra’s protection once you save or share them. Keeping them safe is up to you. Android’s automatic cloud backup is turned off for Vindra, so your journal isn’t copied to your Google account without you choosing to.

7. Deleting your data
Deleting an entry removes it from your device. Deleting the app removes everything. We hold no copy, so nothing can be restored afterwards.

8. Children
Vindra is not directed at children under 13, or under the minimum age in your country.

9. Your rights
Because we don’t hold any of your personal data on servers, there’s nothing for us to access, correct or delete under laws like GDPR or CCPA. Your data is on your device and fully under your control. For subscription records, you can contact RevenueCat or your app store.

10. Changes to this policy
We’ll post any changes on this page with a new date. We can’t notify you individually because we have no accounts or contact details.

11. Contact
Carl John Hicban · carlhicban813@gmail.com