Privacy Policy

Last updated: October 3, 2026

1. Controller

Controller: Vonland
Country: Spain
Contact and privacy requests: hello@vonlandapp.com

Vonland acts as data controller under the GDPR and other applicable laws where it operates.

2. Data We Collect

Account data

Reference name, email address, credentials managed by the authentication service, and language or theme preferences.

Content

Reflections, private notes, optional messages attached to resonances, favorites, suggestions and reports.

Journey data

Selected mode, stage, chapter, advancement dates, progress and unlocked achievements.

Community data

Resonances given and received, related entry identifiers and counters.

Notification data

Permission, user identifier and, for web notifications, the subscription endpoint and technical keys.

Technical and usage data

Device, operating system, version, usage events and security logs.

Advertising data

Advertising identifiers where permitted, ad interactions, ad unit and reward-verification data such as the transaction identifier, associated user and virtual amount granted.

3. Rewarded Ads and Verification

On compatible native apps, Google AdMob may process data to serve and measure ads according to your permissions and its policy.

When you voluntarily complete a rewarded ad, Google sends Vonland a signed confirmation.

We use the transaction identifier, associated user identifier, ad unit and reward amount to:

• Validate the operation.

• Prevent duplicate rewards.

• Prevent or investigate fraud.

• Add 10 resonances to the daily limit.

We do not receive payment data through this feature, and the reward has no monetary value.

4. How We Use Data

We use your data to:

• Create and manage your account.

• Provide the Journey and store your progress.

• Publish and moderate reflections.

• Manage resonances and their limits.

• Store private notes.

• Prevent abuse and fraud.

• Send notifications when authorized.

• Display and measure advertising.

• Analyze use to improve and protect the service.

• Handle requests relating to your rights.

• Comply with legal obligations.

5. Legal Bases

Contract performance

For the account, Journey, content, resonances and requested features.

Legitimate interests

For security, fraud prevention, moderation, basic measurement and service improvement, balanced against your rights.

Consent

For notifications, personalized advertising and non-essential technologies where legally required. You may withdraw your consent at any time without retroactive effect.

Legal obligation

Where processing is required by law.

6. Providers and No Sale of Data

We share only the data necessary with providers supporting:

• Hosting.

• Authentication.

• Storage.

• Email.

• Notifications.

• Analytics.

• Security.

• Advertising.

These providers may include Google AdSense and Google AdMob.

We may also disclose data to comply with legal requirements, protect safety or complete a business reorganization with equivalent safeguards.

Vonland does not sell personal data for money, provide it to data brokers or share it for cross-context behavioral advertising without offering legally required consent or opt-out choices.

7. International Transfers

Some providers may process data outside Spain or the European Economic Area.

Where required, we use adequacy decisions, Standard Contractual Clauses, transfer assessments or other recognized safeguards.

You may request information about applicable safeguards through the contact provided.

8. Retention and Deletion

Account, content, progress and preference data is retained while the account is active.

After you confirm deletion through Settings, we delete the account and associated personal records normally without delay and, in all cases, within 30 days, except for temporary backups or legally required retention.

Advertising transaction identifiers and security records may be retained for as long as reasonably necessary to prevent duplicates, investigate fraud or comply with legal obligations.

Aggregated or anonymized data may be retained for statistical purposes.

9. Your Rights

Depending on where you live, you may request:

• Access.

• Correction.

• Deletion.

• Portability.

• Objection.

• Restriction of processing.

• Withdrawal of consent.

You may exercise these rights by emailing hello@vonlandapp.com. We will respond within the legally required period, normally 30 days.

If you live in the European Union or European Economic Area, you may complain to the Spanish Data Protection Agency or your local data-protection authority.

California and other United States residents may exercise the rights provided by applicable state law, including opting out of the sale or sharing of personal data. Vonland does not sell personal data or discriminate against people for exercising their rights.

LGPD rights apply in Brazil.

10. Cookies, Storage and Identifiers

The web version may use local storage, cookies, pixels or equivalent technologies to:

• Maintain sessions.

• Remember language and theme preferences.

• Secure the service.

• Measure use.

• Manage advertising.

Native applications may use advertising identifiers and system permissions.

Necessary technologies enable the service. Non-essential technologies are used with consent where required.

You can control them through your browser, device and application choices.

11. Notifications

We send notifications only when you grant permission.

To decide whether a reminder is appropriate, we may check whether your Journey is active and whether you already advanced that day.

You may revoke permission through your device. Delivery providers receive the minimum technical data required to send the notification.

12. Security and Automated Decisions

We use reasonable technical and organizational measures, including:

• HTTPS transmission.

• Restricted access.

• Signed verification of advertising rewards.

• Measures intended to prevent duplicates, abuse and fraud.

No system is completely secure.

We do not make solely automated decisions that produce legal or similarly significant effects. We may use automated filters against spam, abuse or fraud, with review where appropriate.

13. Children

Vonland is not directed to children under 13, and we do not knowingly collect their data.

Anyone aged 13 or older who has not reached their country’s digital-consent age requires parental authorization.

If we discover data obtained without valid consent, we will delete it. A parent or guardian may request deletion through the contact provided.

14. Changes and Contact

We may update this policy when the service or legal obligations change.

We will notify you of significant changes through the application or by email.

For privacy questions or requests: hello@vonlandapp.com