Privacy Policy

1. Scope

This policy explains how Vynn ("we", "us", or "our") handles personal information when you use the Vynn mobile app, vynnapp.com, and the services they connect to (together, the "Service").

2. Information we handle

• Vynn+ purchases and subscriptions: your Vynn account identifier, purchase history, subscription and access status, product and transaction identifiers, and information used to recover interrupted purchases or restores.
• Account and security information: email address, name, password hash or chosen sign-in provider, linked-provider records, verification and reset records, active sessions, and security metadata such as IP address and user agent.
• Profile and shopping preferences: postal code, search radius, preferred stores, and optional dietary preferences or food restrictions you save.
• Search information: grocery queries, location or radius inputs, selected stores and filters, result interactions, and product identifiers needed to return and improve results. Recent-search displays may also be stored locally on your device.
• Local app information: the first-release shopping list and some preferences are stored on your device. They are separate from your Vynn account unless a feature explicitly says it is synchronized.
• Recipe information: when guarded recipe features are enabled, recipe URLs, pasted text, images you choose, imported drafts, edits, saved recipes, ingredient choices, quote decisions, and the list you choose as a destination.
• Communications: information you provide when joining a waitlist, contacting support, or making a privacy request. A waitlist submission may include the page, referral, and campaign context associated with that form.
• Technical information: service logs, error and rate-limit records, device/browser type, IP address, the Android SDK data described below and, after optional website analytics consent, website analytics information.

3. How we use information

• Provide account access, grocery search, store and location scoping, dietary filtering, product details, lists, and guarded recipe features.
• Secure accounts, prevent abuse, enforce request limits, diagnose failures, and maintain the Service.
• Respond to support, privacy, and account-deletion requests.
• Send launch or product communications you requested.
• Measure and improve public website use only when you allow optional analytics.

4. Optional website analytics, cookies, and ads

On our website, optional analytics are off unless you select Allow analytics. Choosing Use necessary only, or making no choice, leaves them off. Your choice is stored in your browser's local storage so the site can remember it.

• Google Analytics 4: after opt-in, Google Analytics may receive a page path (with no query values other than the utm_source, utm_medium, and utm_campaign campaign tags), page title, generic interaction events such as a completed waitlist signup and the traffic source that led to it, IP address, and device/browser information on eligible public marketing and content pages, including the home page. Google Analytics is disabled on Vynn's barcode lookup, grocery search, authentication, and account pages, and never receives what you type into the home-page search box. Advertising signals stay off.
• Microsoft Clarity: Vynn does not currently load Microsoft Clarity or record sessions. If Vynn enables it in the future, it will be named in the analytics prompt, will run only after opt-in, and will stay disabled on barcode lookup, grocery search, authentication, and account pages.
• Sensitive-route boundary: Vynn does not send grocery search terms, postal codes, dietary preferences, account details, or search-result interactions to either optional analytics provider.
• Google AdSense: Vynn does not currently load Google AdSense or serve AdSense advertising. Advertising remains disabled while Vynn evaluates the certified consent tooling required before any future use.

Google and Microsoft may process analytics information outside Canada, including in the United States, under their own terms and privacy practices. See the Google Privacy Policy and Microsoft Privacy Statement.

You can change or withdraw your analytics choice at any time using the Cookie settings link in the site footer or the Privacy choices button shown on this site. Withdrawal stops future optional measurement from Vynn's site; it does not retroactively erase information already processed by a provider. You can also use browser controls to block or delete cookies and local storage.

5. Service providers and sharing

We do not sell personal information. We use service providers for hosting, email delivery, authentication, security, optional website analytics you opt into, and other operations needed to provide the Service. If you choose Google or Apple sign-in, that provider processes the sign-in request under its own terms.

Google Play or the App Store processes your store purchases. We use RevenueCat to help manage subscriptions, confirm purchase history and access, restore purchases, and provide subscription analytics. This processing is separate from the optional analytics choice on our website. RevenueCat may process this information outside Canada, including in the United States, under its service arrangements.

Android barcode scanning uses Google ML Kit to read images on your device. The SDK sends installation identifiers, device and app details, usage events, and performance and error data to Google for diagnostics and usage analytics. Our website analytics choice does not control this SDK processing. See Google's ML Kit data disclosure.

Where Vynn uses Cloudflare Turnstile to protect forms, Cloudflare processes security signals such as IP address, browser details, and TLS fingerprint. Cloudflare processes these signals on our behalf for bot protection and also uses them to improve its bot detection under its Turnstile Privacy Addendum.

When guarded Recipe Import is enabled, Vynn first uses deterministic parsing. If that cannot complete an import, unresolved recipe text, visible content fetched from a recipe URL, or sanitized recipe images may be sent to Google Gemini through a paid API for processing outside Canada. Vynn requests stateless processing with store=false; Google may still retain limited abuse-monitoring records for a period Vynn cannot disable.

We may also disclose information where required by law, to protect users or the Service, or as part of a business transaction subject to appropriate safeguards.

6. Location and dietary information

Postal code, search radius, preferred stores, and dietary preferences are used to tailor search and account behavior. The website does not request browser location, and the Vynn apps do not request device location; you enter a postal code to scope grocery search. Vynn may store your full postal code with your account and recipe quotes, and may use coordinates for that full postal code (or a broader area when they are not available) to find nearby stores. Depending on the postal area, this can indicate a precise location. Saved dietary preferences may include allergy-related choices and halal or kosher labels. We use these optional choices to provide and personalize app features; a food preference does not establish a person's religion. Dietary results are informational and depend on available source data; they are not medical advice.

7. Retention

• Account and profile information is kept while your account is active and removed through the account-deletion process, subject to the limited exceptions below.
• We retain minimized purchase-verification records after account deletion for payment support and audits, and to prevent a consumed transaction from being reused. Local purchase-recovery information may also remain on your device separately from your account sign-in information, including after sign-out or account deletion. Store and RevenueCat billing records are managed separately under their processing and retention arrangements. You can contact privacy@vynnapp.com with questions or requests about this information.
• Device-local lists, recent searches, postal codes, and preferences remain until you clear them in the app/browser or remove the app's local data.
• Operational, fraud-prevention, security, rate-limit, backup, legal, aggregated, or de-identified records may be kept where reasonably necessary and are not used to recreate a deleted account.
• Optional analytics information is retained according to Vynn's provider settings and the provider's policies.
• Temporary recipe images become eligible for cleanup after an import reaches a terminal state or the 24-hour staging limit expires. Parsed results for public recipe URLs may be used for up to seven days and then become eligible for cleanup.
• Deleting an individual saved recipe removes its database records and attempts to delete associated stored images. Failed image deletion is recorded for retry rather than being treated as complete.

8. Security

We use technical and organizational safeguards designed to protect personal information, including authenticated access controls and restricted service credentials. No method of transmission or storage is completely secure.

9. Your choices and account deletion

You may request access to, correction of, or deletion of personal information by emailing privacy@vynnapp.com. We may need to verify that you control the account before completing a request.

You can delete your Vynn account from account settings (the Profile tab on Android) or the Account screen on our website. See the public account-deletion instructions for the steps, what deletion covers, and the separate treatment of device-local data.

Deleting your Vynn account does not cancel a store subscription. Manage or cancel that subscription through Google Play or the App Store where you purchased it.

10. Policy changes

We may update this policy as the Service changes. We will post the revised policy here and update the date above. Material changes may also be communicated in the app or by another appropriate method.

11. Contact

For privacy questions or requests, contact privacy@vynnapp.com. For general app support, contact support@vynnapp.com.

Mailing address: Vynn, PO Box 32004 RPO Riverside, Windsor ON N8S 4T8, Canada.