Privacy Policy

Last updated: May 30, 2026

vlumo ("we", "us", "our") provides a lifestyle app to help you organize your schedule, budget, debts, savings, and wellness habits. This Privacy Policy explains what we collect, how we use it, and your rights.

1. What we collect

Information you give us

• Email address — used to create your account, sign you in, and send password-reset links.
• First name — used to personalize the app (greetings and copy). Stored with your account.
• Lifestyle data you enter into the app — events, calendar items, reminders, water intake, monthly income, expenses, debts, savings goals, theme preference, day-start hour, notification preferences, and similar information. All of this lives in your account.

Information we do NOT collect

• We do not collect your real name, physical address, phone number, date of birth, or any government ID.
• We do not access your phone's contacts, photos, location, or camera.
• We do not access your microphone in v1. (If a future version uses voice features, we will request that permission explicitly first.)
• We do not read your emails, messages, or any other apps.

Information collected automatically

• Product analytics — we use PostHog (PostHog Inc., US-hosted) to understand how vlumo is used so we can improve it. We capture anonymous event names like "app opened", "onboarding step completed", "settings opened" and similar product interactions. After you sign in, these events are associated with your account so we can measure things like signup-to-onboarding-completion rates.
  • We do not send PostHog the exact values of your financial data. When you enter a monthly income or savings goal, we send only a bucket like "2.5k-5k" so we can see aggregate ranges across users, never your specific amounts.
  • We do not use session replay, screen recording, or any form of behavioural tracking beyond the discrete events listed above.
  • See PostHog's privacy policy.
• Basic error diagnostics — if the app crashes, we may log the crash and the device model (e.g. "iPhone 15 Pro") so we can fix it. No personal data is sent with crash logs.
• No advertising trackers — we do not use Google Analytics, Facebook Pixel, AppsFlyer, or any third-party advertising/attribution service.

Device permissions we may request

• Notifications — if you opt in to break, hydration, snack, wind-down, or daily-briefing reminders, iOS will ask permission to display notifications. All notification content is generated on your device. We never send your data to anyone in order to deliver a notification.

2. How we use your information

We use the information above only to:

• Provide the vlumo app and its features
• Sync your data across your devices when you sign in
• Send you emails you've specifically requested (account verification, password reset)
• Fix bugs and improve reliability

We do not use your information to advertise to you or anyone else.

3. Where your data lives

Your account and app data are stored with Supabase, Inc., our database and authentication provider. Supabase hosts data in secure data centers and encrypts it both in transit (TLS) and at rest (AES-256). See Supabase's privacy policy.

Anonymous and identified product-usage events are sent to PostHog Inc. (US-hosted). PostHog encrypts data in transit and at rest. See PostHog's privacy policy.

Your PIN (if you set one) is stored only on your device — hashed and salted — and is never uploaded.

4. Who we share data with

We do not sell or rent your data. We share it only:

• With Supabase, our infrastructure and authentication provider, as described above
• With PostHog, our product analytics provider, as described above
• If legally required — for example, a valid subpoena or court order
• If you ask us to — for example, exporting your data to another service (on the roadmap)

We do not share your data with advertisers, data brokers, or any third parties for marketing purposes.

5. Your rights

You can, at any time:

• See all your data — it's all visible in the app
• Edit or delete individual items — use the edit and delete controls throughout the app
• Erase everything on your device — Settings → Security → Erase all data
• Delete your cloud data — Settings → Account → Delete cloud data
• Close your account entirely — email [email protected] and we'll delete your auth record within 30 days

If you're in the EU/UK (GDPR) or California (CCPA), you have additional rights including data portability and the right to object to processing. Email us at [email protected] to exercise any of these rights. We respond to all requests within 30 days.

6. Children

vlumo is intended for users 17 and older. We do not knowingly collect information from anyone under 13. If you believe we've collected information from a child under 13, email [email protected] and we'll delete it.

7. Changes to this policy

If we change this Privacy Policy, we'll update the "Last updated" date above. For material changes, we'll also show a notice in the app the next time you open it.

8. Contact

Questions, concerns, or requests? Email us at [email protected].