Privacy Policy · iOS

This Privacy Policy explains what information Vulpie.AI collects through the website, desktop application, Android and iOS mobile applications, account services, and integrations; why we use it; who may process it; and the choices and rights available to you.

Depending on the features you use, we may collect:

• Account data such as your name, email address, and authentication identifiers.
• Tasks, lists, estimates, timer history, preferences, and content you submit.
• Google integration data you choose to access, including the connected account name and email address, granted scopes, encrypted OAuth access and refresh tokens, Gmail messages, message content, threads, metadata, labels and attachments, plus calendar names and event details.
• Subscription status and transaction records; full payment details stay with the processor.
• Device, application version, diagnostics, security, and basic usage information. When you press Report, the app sends the error code, affected feature, status, time, app version, platform, and locale; it does not attach task, email, or note content.
• Messages or prompts you intentionally send through optional AI-powered features.

• Provide, synchronise, personalise, and maintain Vulpie.AI.
• Authenticate users and protect accounts from abuse.
• Run timers, reports, reminders, integrations, and requested AI features.
• Process subscriptions and communicate service or billing updates.
• Diagnose failures, improve performance, and understand feature usage.
• Comply with legal obligations and enforce our Terms.

Where GDPR or UK GDPR applies, we process data as necessary to perform our contract with you, pursue legitimate interests such as security and product improvement, comply with legal obligations, or act on your consent. You may withdraw consent at any time without affecting processing already completed.

We do not sell your workspace content or Google integration data. We may share the data reasonably necessary with providers that help operate the service, including:

• Authentication, database, hosting, and infrastructure providers such as Firebase.
• Payment processors used to manage purchases and subscriptions.
• Google services when you explicitly connect a Google integration.
• OpenRouter and OpenAI for requested AI features, and ElevenLabs for voice features.
• Analytics, diagnostics, email, and customer-support providers; Meta for website marketing measurements as described below.

We may also disclose information when required by law, to protect legal rights or safety, or as part of a merger, financing, acquisition, or sale of assets with appropriate safeguards.

If you choose to connect a Google account, Vulpie.AI requests access needed to identify that account, display and organise Gmail messages, mark messages read or unread, archive or delete messages, compose and send email at your request, display your calendar list and events, and create, update, or delete events at your request. Google access is optional and begins only after you authorise it.

OAuth access and refresh tokens are stored on Vulpie servers in encrypted form for as long as that Google integration remains connected. Disconnecting the integration deletes those tokens and the stored Google account connection record. Gmail message bodies, threads, labels, attachments, calendar lists, and Calendar events are retrieved on demand and are not permanently copied into Vulpie’s server database.

If you convert an email into a task, the generated task title, description, and source email address are stored as ordinary task data in your Vulpie workspace until you delete the task or request deletion of your account data. Disconnecting Google does not delete tasks that you previously created from email.

Vulpie.AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the user-facing integration you request. It is not sold, used for advertising, or accessed for unrelated purposes.

When you explicitly select “Turn into task” or request another AI-powered email action, Vulpie may send the selected email’s sender, subject, and the portion of its body needed for that action to OpenRouter or OpenAI, depending on the server configuration and availability. This processing is used solely to generate the task or response you requested. Vulpie does not send your entire mailbox for this purpose, and “Turn into task” does not send email attachments to the AI provider.

When you use the app chat, prompts, relevant conversation history, tasks, lists, and assistant preferences may be sent to OpenRouter or OpenAI to answer questions and carry out requested actions. The website mascot chat can also send your entered prompt to the configured AI provider. Do not submit sensitive information that is not needed for the feature.

Optional voice playback sends the text to be spoken to ElevenLabs. Features that offer voice transcription may send the audio you provide to ElevenLabs or OpenAI. These providers process the submitted content under their own service and privacy terms. Available voice features differ by platform; installing the Android app does not itself enable microphone access.

Encrypted Google OAuth tokens and the related connection record are retained only while the integration remains connected and are deleted when you disconnect it. Gmail message bodies, attachments, and Google Calendar events are retrieved on demand and are not permanently stored in Vulpie’s server database.

Tasks created from email, other workspace content, settings, focus history, and AI chat history are retained while your account is active or until you delete the relevant item. Confirmed account-deletion requests begin automatically. Processing continues on the server if you close the app or browser, and temporary provider failures are retried. Completion is confirmed only after the deletion steps finish. Subscription and transaction records held by payment processors, support correspondence, and security logs may be retained where required for tax, accounting, fraud prevention, dispute resolution, or other legal obligations. We keep an anonymous deletion receipt for 30 days after completion, then remove it.

Vulpie.AI uses the same account and cloud services on supported platforms. The Android app keeps account-scoped workspace data and chat history on the device and protects saved sign-in credentials with Android Keystore-backed encryption. App backup is disabled in the current Android release. Local guest data is separate from signed-in account data.

Android app blocking is optional. If you enable it in system Accessibility settings, the service reads foreground application package identifiers to determine whether a selected app should be blocked during focus. The selected app list and blocking decisions stay on the device; this feature does not send your app usage to our server or read message text, passwords, or screen content. You can disable access at any time in Android settings.

Notifications are optional and are used for app reminders. Permissions and available integrations differ between Android and iOS; system permission prompts explain any additional access requested by a particular release. Optional integration access can also be revoked through the provider’s account settings.

You can request permanent deletion without an active subscription. In Android, open More → Settings → Account → Delete account and confirm. You can also use the public account-deletion page without reinstalling the app. Sign-in and confirmation verify ownership; if you cannot sign in, contact our support address below.

Deletion removes your Vulpie authentication account, profile, workspace content, notes, settings, focus history, AI chat history, stored integration tokens, and service-side billing association. Active Stripe subscriptions are cancelled immediately during the process. Previous payments are not automatically refunded, and processors may retain legally required financial records.

We do not delete existing Gmail messages or events and content held in Google, Notion, or Asana. The requesting Android app removes its account-scoped local data after the server accepts deletion; guest data is not affected. Offline caches on other devices may remain until app data is cleared or the app is uninstalled. See Data retention for limited records that may remain after account deletion.

We use reasonable technical and organisational measures designed to protect information, including encrypted connections, access controls, and restricted production access. No internet service can guarantee absolute security, so you should also use a strong, unique password and protect access to your device.

Depending on your location, you may have the right to:

• Access and receive a copy of your personal information.
• Correct inaccurate or incomplete information.
• Request deletion or restriction of processing.
• Object to certain processing or withdraw consent.
• Receive portable data and complain to a supervisory authority.

We may need to verify your identity before fulfilling a request.

The website uses essential storage for sign-in, security, preferences, and account-deletion receipts. Website marketing pages use Meta Pixel and, where configured, server-side Meta conversion measurements. Page views, download actions, browser and network information, and advertising identifiers such as _fbp, _fbc, and fbclid may be processed by Meta to measure advertising. Workspace content, Google integration data, and account-deletion sign-in credentials are not included in those marketing events. Marketing scripts are disabled on the account-deletion page. You can control cookies through your browser; disabling essential storage may prevent sign-in or deletion status recovery from working.

Vulpie.AI is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can review and delete it where appropriate.

Providers may process information in countries other than your own. Where required, we use recognised transfer safeguards such as adequacy decisions or standard contractual clauses.

We may update this Policy as Vulpie.AI or applicable law changes. The effective date will be revised, and material changes may be announced in the application, on the website, or by email.

For privacy questions, requests, or complaints, email vulpie.ai.support@gmail.com. You may also complain to the data-protection authority in your country.