Vondi Privacy Policy

1. What we collect

Vondi is designed to collect as little personal data as possible. You can use the app without registering: it signs you in anonymously. Creating an account is optional and only needed if you want to back up your data and use it on multiple devices.

• Anonymous account ID — a random identifier created when you first open the app.
• Account details (optional) — if you create an account with your email address, or sign in with Apple or Google, we store your email address and, if you set one or your Apple/Google account shares one, a display name. Passwords are stored by our authentication provider in hashed form only; we never see or store them in readable form.
• Photos you take — sent via our secure server to the Google Gemini AI service for analysis only, and not kept after the analysis is done.
• Analysis results — title, brand, category, condition and price estimates, plus any note or asking price you add to a scan, linked to your account, and the inventory and sales you record in the app.
• A hashed device code — an irreversible fingerprint of your device, linked to your account. See section 2.
• Purchase history — if you subscribe to Vondi Pro (weekly, yearly, Pro Power or Pro Max), purchase records and the date your paid period started, linked to your account. Payments are handled by Apple or Google.
• Push notification token — only if you enable notifications: a device token so we can send you reminders and tips. You can turn this off anytime in the app or your device settings.
• App settings and usage events — your language, currency, platform and app version, plus events about which steps in the app you complete or leave, so we can see where people get stuck.

We do not use your advertising ID, we do not use advertising SDKs, we do not track you across other apps or websites, and we never sell your data.

2. The hashed device code

To keep the free tier fair and to let you get your own data back, Vondi links a hashed code from your device to your account.

• What we read — on iOS, a code the app generates itself and keeps in your device's secure storage, together with the vendor identifier Apple gives the app; on Android, the Android ID. These codes identify a device, not a person, and say nothing about who you are.
• How we store it — never in raw form. The app converts the code into an irreversible SHA-256 hash and only that hash reaches our servers, where it is stored next to your account ID. The hash cannot be turned back into the original code.
• Why we use it — first, to enforce the free scan limit per device per month, so that reinstalling the app does not hand out extra free scans; second, to give you your own data back if you delete and reinstall Vondi, so your scan history, inventory, sales and preferences return to the same account instead of being lost.

Because of this, deleting the app does not erase your data on our side. If you want it gone, delete your account in the app or send us a deletion request — see section 5.

3. How we use your data

We use this data to analyze photos, show your scan history, inventory and sales, let you sign in and sync your data across devices, send account emails such as confirmation and password-reset messages, send push notifications you have enabled, enforce usage limits (including the paid-period start date so scans refill on that anniversary) and prevent abuse of the free tier, restore your data after a reinstall, manage subscriptions, fetch aggregated market price statistics and improve the app. Legal bases: performance of a contract and legitimate interest in operating, securing and improving the service.

4. Third parties and processors

Processors include Supabase (EU) for accounts, authentication and data storage, the Google Gemini API for photo analysis, RevenueCat and the Apple App Store / Google Play for subscription status, Expo for push notification delivery, and the eBay Browse API for aggregated price statistics. Processing is governed by GDPR-aligned agreements where applicable.

5. Data retention and deletion

Photos are processed transiently. Analysis results, inventory, sales and the hashed device code are kept for as long as your account exists, or until you delete them in the app. Purchase records are kept as needed for subscriptions and legal obligations.

You can delete your account directly in the app (Profile → account → delete account). Deletion takes effect after a 30-day grace period: signing in again within those 30 days cancels it, and after 30 days everything is permanently erased. You can also email us a deletion request at info@movibytestudio.com.

Deleting the app by itself does not delete your data, because the hashed device code lets us return it to you if you reinstall.

When an account is deleted, we erase:

• your account and profile, including your email address, display name, language, currency and app preferences;
• your scan history;
• your inventory and the sales you recorded;
• your push notification token;
• the link between the hashed device code and your account.

One thing stays: the separate monthly counter for your device. That is only a hash plus the number of free scans used in the current month, with no link to an account or to you. Without it, a deletion request would simply be a way to reset the free scan limit. The counter disappears by itself once the month is over.

6. Your rights

Under the GDPR you may access, rectify, erase, port, object to or restrict processing of your data. If your account has an email address we may verify your request via that address; for anonymous accounts we may ask for your account ID from the app settings. You may lodge a complaint with the Autoriteit Persoonsgegevens in the Netherlands.

7. Children

Vondi is not directed at children under 13. Contact us if you believe a child has used the app and we will remove associated data.

8. Changes

We may update this policy. The effective date above shows the latest revision. Material changes will be communicated in the app.

9. Contact

MoviByte Studio, the Netherlands. Email info@movibytestudio.com.