Vecanv Privacy Policy

Last updated: 2026-05-27

Vecanv is a personal AI assistant ecosystem built and operated by Yashraj Singh (“we”, “us”). This policy describes what data Vecanv collects, how it is used, and what your rights are.

In short: Vecanv collects data only from the devices and services you explicitly connect, stores it on infrastructure controlled by us (never shared with third parties), and uses it solely to serve your own personal assistant. Vecanv has no advertising business and does not sell, rent, or share your data.

What we collect

Vecanv collects only what you choose to connect, plus the minimum needed to operate the app:

• Identity — your Apple ID name + email via Sign in with Apple. Required to authenticate.
• Health data — heart rate, HRV, sleep, steps, workouts — only the HealthKit categories you grant permission to. Pulled from your iPhone / Apple Watch.
• Calendar events — when you enable EventKit, the title, time, and participants of your calendar events.
• Wearables data — readings from Bluetooth devices (e.g. WHOOP heart-rate strap) when you pair them in the app.
• Third-party integrations — when you connect Strava, Gmail, etc., we read the data you explicitly grant access to via OAuth.
• Conversations + voice transcripts — text and voice transcripts of what you say to your assistant. Speech-to-text runs on-device; the transcript is sent to our server to generate a reply.
• Notifications + interactions — what notifications we sent you and whether you opened or dismissed them, so the assistant can learn what is useful vs. noise.
• Crash + error reports — when the app fails, we record the error message, screen, and app version. No personal content.

What we do NOT collect

• Advertising identifiers (IDFA) — Vecanv does not show ads
• Location data — unless you explicitly add a location-based integration
• Contacts — Vecanv does not read your address book
• Photos / videos — only the ones you explicitly attach to a chat

Where it lives

All Vecanv data is stored in a single Postgres database on infrastructure under our control. Data is scoped to your account — queries are filtered by user id at the database layer, and Postgres row-level security ensures no cross-user access is possible.

Vecanv data is never sold, rented, or shared with third parties for marketing or any other purpose. The only third parties that ever see your data are:

• Anthropic (Claude API) — to generate assistant replies. Messages you send to your assistant are forwarded to Anthropic. See Anthropic’s privacy policy at https://www.anthropic.com/legal/privacy.
• Apple (APNs) — to deliver push notifications. Apple sees the notification title and body.
• Integration providers you connect — Strava, WHOOP, etc. — only data you explicitly grant.

We do not use any analytics or tracking tools (no Google Analytics, no Mixpanel, no Segment, no Sentry).

Encryption

• All network traffic between Vecanv and our servers uses HTTPS (TLS).
• Authentication uses Apple Sign-In (industry-standard OAuth 2 + JWT).
• The .p8 keys we use for APNs and App Store Connect are stored on servers under our control and never transmitted to clients.

Your rights

You can, at any time:

• Export every byte of your data in JSON form (planned feature; in the meantime, email us)
• Delete your account, which removes all your data from our database, irrecoverably
• Disconnect any integration in Settings → Connections

To exercise any of these rights, email us (address in the Support URL).

Children

Vecanv is not directed at children under 13 and we do not knowingly collect data from anyone under 13.

Changes

If we change this policy materially, we will notify you in the app and update the “Last updated” date at the top.

Contact

Email: yashbhadauria@gmail.com

Operator: Yashraj Singh, Bangalore, India.