Vayvio Privacy Policy

Last updated: 21st of July 2026

This Privacy Policy explains how Vayvio collects, uses and protects personal information when you use the Vayvio website and application.

1. Who controls your data?

Vayvio assumes the role of a “data controller” and/or “data processor”. You can reach out to us from Contact.

You may use the contact form to ask a privacy question or exercise your data-protection rights.

2. Information we collect

Account information

An account is required to use Vayvio. We collect:

your email address;
an account identifier;
authentication and account-security information;
account creation and deletion dates.

Vayvio uses passwordless magic-link authentication provided by Supabase.

Journal entries

When you use Journaling, we store the text you choose to write.

Journal entries may contain personal or sensitive information. You decide what to include and can delete individual entries at any time.

Journal entries are private to your account. Vayvio does not read, analyse, sell or use them for advertising, research, artificial intelligence training or product profiling.

Although access controls are used, limited technical access may be possible for authorised infrastructure personnel when strictly necessary for security, maintenance, recovery or legal compliance.

Activity and Insights information

To provide your personal Insights page, Vayvio may store information such as:

session dates and duration;
the feature, mode or soundscape selected;
historical app activity;
optional check-ins you choose to complete;
notification preferences.

Insights are generated from your own activity history. Vayvio does not use this information to diagnose you, make medical decisions or make automated decisions that produce legal or similarly significant effects.

Technical information

When you access Vayvio, our hosting and security systems may process:

IP address;
browser and device type;
operating system;
request timestamps;
diagnostic, security and error logs.

Contact information

When you use the contact form, we process your message and any contact details you provide so that we can respond.

3. Why we use your information

We process personal information to:

create, authenticate and manage your account;
provide soundscapes, guided sessions, Journaling and Insights;
store and display your journal and activity history;
send notifications you have enabled;
secure, maintain and troubleshoot the service;
respond to questions and privacy requests;
understand aggregate website usage;
comply with legal obligations.

Under European data-protection law, we rely on:

performance of a contract to provide your account and requested features;
your consent for optional notifications;
your explicit consent, where required, to store sensitive information you voluntarily include in journal entries or check-ins;
legitimate interests in protecting, maintaining and understanding the service, provided those interests do not override your rights;
legal obligations, where processing is required by law.

You may withdraw consent at any time. This does not affect processing that was lawful before withdrawal.

4. Service providers

Vayvio uses a limited number of service providers:

Supabase for authentication, account management and database storage;
Vercel for website and application hosting and delivery;

The Supabase database is configured in the European Union.

Your browser, operating-system provider or device provider may also process limited information when delivering notifications you have enabled.

Service providers may process information only as needed to provide their services, protect their systems or comply with applicable law.

5. International transfers

Vayvio aims to store primary account, journal and analytics data in the European Union.

Some providers may process limited operational, support or technical information outside the European Economic Area. Where required, transfers are protected through recognised legal safeguards, such as adequacy decisions, the EU Standard Contractual Clauses or equivalent mechanisms.

6. How long we keep information

Unless a longer period is legally required:

account, journal and Insights data are retained until you delete them or delete your account;
deleted information may remain in encrypted backups for up to 30 days;
authentication, diagnostic and security logs may be retained for up to 12 months;
contact-form correspondence may be retained for up to 12 months after the last exchange;

Anonymous or irreversibly aggregated information may be retained for longer because it no longer identifies an individual.

7. Account and data deletion

You may delete individual journal entries or your entire account through the application.

Deleting your account removes the account and associated journal and Insights data from active systems. Limited information may temporarily remain in backups, security logs or records that must be retained by law.

8. Your privacy rights

Depending on your location, you may have the right to:

access your personal information;
correct inaccurate information;
request deletion;
restrict or object to certain processing;
receive a portable copy of information you provided;
withdraw consent;
appeal or complain to a data-protection authority.

Vayvio does not sell personal information, share it for cross-context behavioural advertising or use it for targeted advertising.

To exercise a right, use: Contact.

We may request limited information to verify your identity before acting on a request.

9. Cookies and local storage

Vayvio may use cookies or browser storage that are strictly necessary to:

keep you signed in;
maintain security;
remember essential settings;
provide requested application functions.

Vayvio does not use advertising cookies or track your activity across unrelated websites.

10. Notifications

Notifications are optional. Your browser or device will ask for permission before they are enabled.

You can disable notifications at any time through Vayvio or your browser or device settings. Disabling notifications does not prevent you from using the other Vayvio features.

11. Children and teenagers

Vayvio is not intended for children under 15, and they may not create an account.

If you are under the age of legal majority where you live, you must have permission from a parent or legal guardian to use Vayvio. Your parent or guardian should review this Privacy Policy and the Terms of Use with you.

Where local law requires joint, explicit or verifiable parental consent, you may use Vayvio only after that consent has been obtained.

If we learn that an ineligible child has created an account without the required permission, we may delete the account and associated information.

12. Security

Vayvio uses reasonable technical and organisational measures intended to protect personal information.

However, no online service or storage system is completely secure. You should avoid including information in your journal that you would not want stored online and keep a separate copy of any content that is important to you.

13. Changes to this policy

We may update this Privacy Policy when Vayvio, its providers or applicable laws change.

Material changes will be communicated through the website, the application or another appropriate method. The date at the top indicates when this policy was last updated.

14. Contact

For privacy questions or requests, , use: Contact.