Privacy Policy

This Privacy Policy explains how Vynlo ("Vynlo", "we", "us", or "our") collects, uses, stores, shares, and protects your information when you visit our website at vynlo.io, join our early access list, or use the Vynlo application and related services (together, the "Service").

Vynlo is a household finance application. Because the Service handles sensitive financial information, we treat your data with care and only collect what we need to provide and improve the Service. By using the Service, you agree to the practices described in this Policy.

1. Who we are

Vynlo is the data controller responsible for your personal information processed through the Service. For any question about this Policy or your data, you can contact us at hello@vynlo.io.

2. Information we collect

2.1 Information you provide when you create an account

• Account details: your email address, an optional display name, and your language preference.
• Authentication data: a securely hashed version of your password (we never store your password in plain text), and, if you choose to use them, passkey or biometric credentials registered on your device (a public key and device label, not your fingerprint or face data).
• Sign-in with Google: if you choose to sign in with Google, we receive a stable Google account identifier and your email and email verification status from Google. We do not receive your Google password.

2.2 Financial and household information you enter

The core purpose of Vynlo is to let you record and plan your finances. Information you or other members of your household add to the Service may include:

• Accounts you set up (such as bank, cash, savings, or credit card accounts), their currency, balances, and credit card details such as limits and statement dates.
• Transactions, transfers, categories, payees, and notes, including amounts, currencies, dates, and descriptions.
• Post-dated cheques, accounts payable, planned income and expenses, budgets, loans, remittances (including beneficiary details such as bank name, IBAN or account number, and SWIFT or BIC), projects, and renewal reminders.
• Household information, including the household name, base currency, member roles (owner, editor, or viewer), and invitations you send to other members.

2.3 Documents you submit for scanning

Vynlo offers features that read information from images and files, such as scanning a cheque, a receipt, or a bank statement to help you enter data faster. When you use these features, the image or file you submit is sent for automated processing (see Section 5). We do not store the original cheque or receipt images after the relevant details have been extracted. For bank statement imports, extracted text and the structured result are kept temporarily so you can review and confirm the import, and are not retained long term after you commit or discard the import.

2.4 Location information

If you grant permission in your browser, Vynlo may use your device location when you add an expense, so it can suggest a nearby place or payee. We use this location only to look up a place name and to pre-fill the entry. You can decline or revoke this permission at any time through your browser or device settings, and the rest of the Service will continue to work.

2.5 Information collected on our website and early access form

• Early access requests: when you join our early access list, we collect your email address, the interest you select, and we may record your approximate country, language, IP address, and browser user agent to help us understand and respond to demand.
• Marketing attribution: if you reach our website from an advertisement or campaign link, we may capture campaign parameters (for example, UTM tags) so we can measure which channels are effective.
• Usage and device data: like most websites, we may receive standard technical information such as IP address, browser type, and pages visited.

3. How we use your information

• To provide, operate, and maintain the Service and the features you use.
• To create and secure your account, authenticate you, and prevent fraud or abuse.
• To process documents you submit and extract the relevant financial details.
• To convert and display amounts across currencies using exchange-rate data.
• To send you service messages, such as verification codes, password resets, household invitations, and important notices about the Service.
• To respond to your enquiries and provide support.
• To understand demand, measure marketing performance, and improve the Service.
• To comply with legal obligations and enforce our terms.

4. Legal bases for processing

Where data protection law requires a legal basis, we rely on: performance of our contract with you (to deliver the Service you request); your consent (for example, for location access and certain marketing); our legitimate interests (such as securing and improving the Service and measuring demand); and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

5. Automated processing and artificial intelligence

Some Vynlo features use third-party artificial intelligence to read and structure information you submit. Specifically, when you scan a cheque or receipt, or import a bank statement, the relevant image or text is transmitted to Anthropic (the provider of the Claude models) to extract details such as amounts, dates, payees, and descriptions. We send only the content needed for that task. Automated extraction may contain errors, so you should always review the results before saving them. We do not use this processing to make decisions that produce legal or similarly significant effects about you.

6. Cookies and similar technologies

The Vynlo application uses a token-based sign-in and a small number of strictly necessary cookies (for example, a short-lived cookie used only during passkey verification). The application does not use advertising or cross-site tracking cookies.

Our marketing website may load Google Tag Manager and related analytics tools to help us measure traffic and campaign performance. These tools may set cookies or process usage data. Where required by law, we will request your consent before using non-essential cookies, and you can control cookies through your browser settings.

7. Service providers and sub-processors

We share information with carefully selected service providers who process data on our behalf to deliver the Service. They are permitted to use your information only to provide their service to us. Our key providers include:

We do not sell your personal information, and we do not share it with advertisers for their own marketing.

8. How we share information within a household

Vynlo is designed for shared household use. If you belong to a household, the financial information in that household may be visible to other members according to their role (owner, editor, or viewer). If you invite someone to your household, the email address you provide will be used to send the invitation. Please add only people you trust to your household.

9. Other disclosures

We may disclose information when we believe in good faith that it is necessary to:

• comply with a law, regulation, legal process, or enforceable governmental request;
• enforce our Terms and Conditions or investigate potential violations;
• detect, prevent, or address fraud, security, or technical issues; or
• protect the rights, property, or safety of Vynlo, our users, or the public.

If Vynlo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, and we will notify you of any change in ownership or use of your personal information.

10. International data transfers

Vynlo and its service providers may process and store your information in countries other than the one in which you live. Where we transfer personal information across borders, we take steps to ensure it remains protected in line with this Policy and applicable law.

11. Data retention

We keep your personal and financial information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Documents submitted for scanning are not retained after processing, as described in Section 2.3.

12. Data security

We use technical and organisational measures designed to protect your information, including encryption of passwords, secure transmission of data, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your account by using a strong, unique password and keeping your sign-in credentials confidential.

13. Your rights

Depending on where you live, you may have rights over your personal information, including the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your personal information;
• object to or restrict certain processing;
• receive a copy of your information in a portable format; and
• withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at hello@vynlo.io. We will respond within the time required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

14. Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us so we can remove it.

15. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised Policy.

16. Contact us

If you have any questions, concerns, or requests regarding this Policy or your personal information, please contact us at hello@vynlo.io.