Privacy Policy

Last Updated: January 2, 2026

Introduction

Welcome to Vembly (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your information. This Privacy Policy explains our practices regarding personal data collection when you use our mobile application (“App”).

By using Vembly, you agree to the collection and use of information as described in this policy.

Information We Collect

1. Account Information

We use anonymous authentication by default. When you first open the app, we automatically create an anonymous user account to provide you with personalized features and sync your data across sessions.

What we collect:

• Anonymous user identifier (UUID)
• Account creation timestamp

Optional (if you upgrade your account):

• Email address
• Authentication credentials (securely hashed)

2. User-Generated Content

When you use our AI content generation features, we collect and store the content you create:

• Conversations: Messages you send to create content
• Documents: Generated carousels, text posts, threads, storytelling content, and hooks
• Favorites: Content you mark as favorites

This data is stored securely and associated with your account to enable sync across devices and preserve your work.

3. Survey Responses

To improve our services, we may present optional surveys during onboarding or app usage:

• Selected survey options
• Free-form text responses (if applicable)
• Whether the survey was skipped

Survey participation is voluntary and helps us understand your content creation needs.

4. Usage Analytics

We use PostHog, a product analytics platform, to collect anonymized usage data:

Events we track:

• App launch events
• Onboarding progress (steps viewed/completed)
• Content generation actions (start/success/failure)
• Feature usage (sharing, favorites)
• Settings actions (sign out, data deletion)

We do NOT track:

• The actual content of your messages or generated documents
• Personal identifiers in analytics events

5. Subscription Information

For premium subscriptions, we use RevenueCat to manage purchases:

• Subscription status (active/inactive)
• Subscription type (weekly/yearly)
• Purchase history

Payment processing is handled entirely by Apple through the App Store. We never receive or store your payment card details.

6. Bug Reports

If you choose to submit a bug report, we collect:

• Report text you provide
• Your user identifier (to respond if needed)

How We Use Your Information

We use collected information to:

• Provide Services: Create and store your content, enable sync across devices
• Improve the App: Analyze usage patterns to enhance features and fix issues
• Manage Subscriptions: Verify premium entitlements and usage limits
• Customer Support: Respond to bug reports and support requests
• Personalization: Remember your preferences and settings

Data Storage and Security

Backend Infrastructure

Your data is stored using Supabase, a secure cloud infrastructure provider:

• All data is encrypted in transit (TLS/HTTPS)
• Data at rest is encrypted using industry-standard encryption
• Row-Level Security (RLS) ensures users can only access their own data
• Regular security updates and monitoring

Local Storage

The App uses SwiftData for local caching on your device to enable offline functionality. This data syncs with our secure servers when connectivity is available.

Third-Party Services

We integrate the following third-party services:

These services may collect additional information as described in their respective privacy policies.

AI Content Generation

Vembly uses AI technology to generate content based on your prompts:

• Your messages are sent to our backend servers for processing
• AI model providers (Anthropic) process requests to generate content
• Generated content is stored in your account
• We do not use your content to train AI models

Data Retention

• Active accounts: Your data is retained as long as your account remains active
• Deleted content: When you delete conversations or content, they are permanently removed from our servers
• Account deletion: Deleting your account removes all associated data from our systems

Your Rights and Choices

Access and Control

You have the right to:

• View your data: Access all conversations and generated content within the App
• Delete content: Remove individual conversations or all data at any time
• Delete your account: Permanently delete your account and all associated data via Settings → Data Controls
• Export capabilities: Copy or share your generated content

Managing Preferences

In the App’s Settings, you can:

• Enable/disable autocorrection
• Manage your subscription
• Delete all conversations
• Delete your account entirely

Children’s Privacy

Vembly is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable laws.

Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the “Last Updated” date and, when appropriate, through in-app notifications.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [Insert support email]
• In-App: Settings → Report Bug

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data based on:

• Consent: For optional features like surveys and analytics
• Contract: To provide the services you requested
• Legitimate interests: To improve and secure our services

You may withdraw consent at any time by deleting your account.

California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information

We do not sell your personal information.

To exercise these rights, use the Data Controls in Settings or contact us directly.