Privacy

Privacy Policy

VAND runs only on your own machine — Mac or Windows. No accounts, no servers, no telemetry, no data leaves your device — this is the policy that makes the product work.

Last updated: August 2, 2026

One sentence

VAND is a personal AI that runs on your own computer. Everything you tell it — body data, journal, free-form memories, chat — lives in a single encrypted file on your own disk. There is no VAND account, no VAND server, no third-party SDK, and no party we could share your data with even if we wanted to.

What VAND stores on your machine

Habits, workouts, meals, sleep, mood, journal, weights, water, and anything you import from Apple Health, in a single file at ~/Library/Application Support/vand-desktop/vand.json. That file is encrypted with AES-256-GCM. The key is wrapped by your OS keychain by default, or by a passphrase you set, your choice. See /security for the full model.

What VAND does NOT collect

No analytics. No telemetry. No crash reports. No ad networks. No third-party tracking SDKs. We don't know if you opened the app today and we don't want to.

What the website collects

Vercel hosts this site and records anonymous, aggregate page views, referrers, country or region, browser, operating system, and device type. Vercel Web Analytics uses no tracking cookies and does not associate these events with a name, account, email address, or IP address. VAND removes checkout session IDs, license keys, emails, and token-like query values before an analytics event can be sent. The download API (/api/download) reads your browser's user agent only to choose the correct installer. None of this touches the desktop app or your local data.

Third parties

The desktop app talks to: your OS keychain (for the encryption key wrapper), the bundled AI engine on 127.0.0.1 (which fetches its model once on first run), and a public update feed (so the app can check for new versions). That is the entire network surface.

Your rights (GDPR, CCPA)

Export and delete are first-class buttons in the app's Settings. There is nothing for us to delete on a server because there is no server. If you want to be sure, throw away the file at vand.json.

Cookies

The marketing site uses no tracking cookies. If you disable anonymous website counts above, that preference is stored only in your browser's local storage. If we ever add account features, we'll update this page before collecting anything new.

Changes

If we update this policy, we'll note it in the release notes and on the website. There is no email list to notify.

Contact

Privacy questions: vand.app.ai@gmail.com. Security reports: vand.app.ai@gmail.com.

Operator

VAND.

This is honest, current, and aligned with the build at /download. Have a lawyer review before commercial launch with paid plans.