The short version: No account. No email. No name. Nothing. Your sessions, patterns, and insights are stored only on your device. We cannot read your data. The only moment data leaves your device is when the AI processes your input — and that happens without any identity attached. We also count a handful of anonymous events (things like "app opened" or "session completed") so we can tell whether the product is working — never the content of what you wrote.
Veynor is published by Mondivio. We built Veynor as a privacy-first decision clarity tool. We do not run an ad business, we do not sell data, and we do not benefit from knowing what you're thinking about.
Contact: hello@veynor.co
Everything below lives on your phone. None of it goes anywhere unless you back it up yourself.
| Data | What it is | Where it goes |
|---|---|---|
| Session input | The text you type into Veynor | Your device only |
| Session output | The AI's structured response | Your device only |
| Session metadata | Mode used, timestamp, ratings | Your device only |
| Profile insights | AI-extracted patterns from sessions | Your device only |
| Recurring patterns | Themes Veynor detects across sessions | Your device only |
| Uploaded documents | DISC profiles, coaching reports, PDFs | Your device only |
| Day summaries | AI-generated summaries of session days | Your device only |
| Affirmations & quotes | Daily AI-generated text, cached locally | Your device only |
| Book recommendations | Weekly AI-generated reading suggestions | Your device only |
| Chat messages | Talk It Out conversation history | Your device only |
| Streak and stats | Session count, streak, clarity rate | Your device only |
| Sealed envelopes | Notes you write to future-you, locked until their unlock date | Your device only |
| Predictions & calibration | Your forecasts on session outcomes and how accurate they turned out | Your device only |
| Verdicts & regret marks | Whether a past session landed, and which calls you later regretted | Your device only |
| Mental Hygiene Index | The composite score and its components | Your device only |
| Spillway entries | What you wrote in The Spillway and the digest built from it | Your device only |
| Annual Letter | The yearly letter Veynor writes you, kept locally | Your device only |
Veynor 5.0 added a record layer — Sealed Envelopes, predictions and calibration, the Mental Hygiene Index, The Spillway, the Annual Letter, and the rest of the memory features. All of it lives in the same on-device database as the rest of your sessions. The promise hasn't changed: nothing leaves your phone unless you back it up yourself.
When you submit a session, your text is sent to an AI to generate the response. That's how the app works.
What is sent:
What is NOT sent:
Once the AI responds, it's done. Your session isn't saved on any AI server, and the AI has no memory of it after that.
AI providers used: Anthropic (Claude), Groq, OpenRouter — all operate under their respective privacy policies.
Veynor uses RevenueCat to manage App Store and Google Play subscriptions. RevenueCat assigns a random anonymous identifier to your installation — no email, name, or personal information is passed to RevenueCat. Your payment is processed entirely by Apple (App Store) or Google (Google Play). Mondivio never sees your payment details.
RevenueCat's privacy policy: revenuecat.com/privacy
Veynor uses Sentry to capture application errors and crashes. Crash reports include your device OS, app version, and the error itself. Nothing from your sessions is included — no text, no name, nothing personal.
Sentry's privacy policy: sentry.io/privacy
We do not collect, store, or have access to:
We count a small number of anonymous events — things like the app being opened, a session being started, or a subscription being purchased — so we can tell whether the product is healthy and which modes people actually use. We never include the content of your sessions, your input, the AI's reply, or anything that could identify you. A random per-install ID is used so we can measure things like "did new users come back next week"; it's deleted when you uninstall.
The analytics provider is TelemetryDeck. Their privacy policy: telemetrydeck.com/privacy.
Everything stays in a private database on your phone. It's not synced anywhere. Mondivio can't access it, no third party can, and if you delete the app, it's gone completely.
Veynor offers an optional manual backup feature.
Important: If you lose your encryption key, the backup cannot be recovered — not by you, not by us. Keep it somewhere safe.
Veynor is for adults. It's not designed for anyone under 13 (or under 16 in the EU), and we don't collect data from children. If you think a child has used the app, reach out at hello@veynor.co.
Right of access: Because all your data is stored locally on your device, you have direct access to it at all times through the app.
Right to erasure: Delete the app. All locally stored data is permanently removed. For error reports held by Sentry, contact us and we will request deletion.
Right to data portability: Use the backup feature to export your data as an encrypted file at any time.
Right to object: There's no profiling, no targeting, and no automated decisions made about you in Veynor.
Right to rectification: Your data lives on your device. You can edit or delete individual sessions directly within the app.
Data controller: Mondivio — hello@veynor.co
Legal basis for AI processing: It's needed to deliver the service. No personal data is sent.
| Data type | Retention |
|---|---|
| Local device data | Until you delete the app or manually delete sessions |
| Error reports (Sentry) | 90 days per Sentry's default policy |
| RevenueCat subscription records | Per RevenueCat's policy (required for restore purchases) |
| AI processing | Not stored — each request is independent |
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Anthropic (Claude) | AI session processing | Session text only, no identity | anthropic.com/privacy |
| Groq | AI session processing (fallback) | Session text only, no identity | groq.com/privacy |
| OpenRouter | AI routing (fallback) | Session text only, no identity | openrouter.ai/privacy |
| RevenueCat | Subscription management | Anonymous install ID only | revenuecat.com/privacy |
| Sentry | Crash / error reporting | App errors, no personal data | sentry.io/privacy |
| TelemetryDeck | Anonymous usage counts | Event names only, no identity, no content | telemetrydeck.com/privacy |
| Apple IAP | Payment processing | Handled entirely by Apple | apple.com/privacy |
| Google Play Billing | Payment processing | Handled entirely by Google | policies.google.com/privacy |
If we make changes to this policy, we'll update the date at the top and let you know through the app. If you keep using Veynor after that, we'll take it as you being okay with the update.
For any privacy questions, data requests, or concerns:
We will respond within 2 days.
This privacy policy applies to the Veynor iOS and Android applications and the veynor.co website.