Privacy Policy

VAND is a personal AI that runs on your Mac. Everything you tell it — body data, journal, free-form memories, chat — lives in a single encrypted file on your own disk. There is no VAND account, no VAND server, no third-party SDK, and no party we could share your data with even if we wanted to.

Habits, workouts, meals, sleep, mood, journal, weights, water, and anything you import from Apple Health, in a single file at ~/Library/Application Support/vand-desktop/vand.json. That file is encrypted with AES-256-GCM. The key is wrapped by your OS keychain by default, or by a passphrase you set, your choice. See /security for the full model.

No analytics. No telemetry. No crash reports. No ad networks. No third-party tracking SDKs. We don't know if you opened the app today and we don't want to.

Vercel hosts this site and may record basic Web Vitals (LCP, INP, CLS) for the marketing pages, aggregated, no IP retention, no cookies, no profile. The download API (/api/download) sees the redirect target from your browser's user agent so it can route Mac users to the Mac build; that request is not logged beyond standard server access logs. None of this touches the desktop app or your local data.

The desktop app talks to: your OS keychain (for the encryption key wrapper), the bundled AI engine on 127.0.0.1 (which fetches its model once on first run), and a public update feed (so the app can check for new versions). That is the entire network surface.

Export and delete are first-class buttons in the app's Settings. There is nothing for us to delete on a server because there is no server. If you want to be sure, throw away the file at vand.json.

The marketing site uses no tracking cookies. If we ever add account features, we'll add a session cookie and update this page.

If we update this policy, we'll note it in the release notes and on the website. There is no email list to notify.

Privacy questions: vand.app.ai@gmail.com. Security reports: vand.app.ai@gmail.com.

VAND.