App privacy policy

Introduction

This privacy policy explains how Vzla.io (“Vzla.io”, “we”, “us”) collects, uses, and protects your personal data when you create an account and use our product application — both the web app and the mobile app (together, the “app”).

Vzla.io is operated by a company registered in the United States (Wyoming). Although we are not established in the European Union, we have chosen to comply with the EU General Data Protection Regulation (GDPR) for every user, wherever they are. We consider strong data protection a commitment, not an obligation imposed on us.

This policy covers the app, where you hold an account and use the product. Our marketing website is covered by a separate website privacy policy.

Our privacy principles

We collect the minimum data needed to run the app and serve you.
We never sell your personal data, and we never use it for advertising.
We use no advertising networks and no third-party tracking cookies.
Our usage analytics are cookieless and do not identify you.

Data we collect

Account data you provide

To create and maintain your account, we process:

Name or display name
Email address
Authentication data (we store your password only as a salted cryptographic hash; we never store it in plain text) or, if you sign in with a third-party identity provider, the identifier that provider returns
Any content and settings you choose to create or store in the app

Data collected automatically

To keep the app secure and working, we process a limited amount of technical data:

IP address and device or browser type, processed transiently for security, abuse prevention, and session management
Basic diagnostic and error logs

Usage analytics

We measure how the app is used with Umami, a privacy-first, cookieless analytics tool. It sets no cookies, builds no advertising profiles, and does not collect data that identifies you personally. It records aggregate signals such as page or screen views and general device category, which we use only to understand and improve the product.

We do not use Google Analytics, advertising networks, or third-party trackers.

Lawful bases for processing

Under the GDPR, we process your personal data on the following legal bases:

Performance of a contract — to create your account, authenticate you, and provide the app and its features to you.
Legitimate interests — to keep the app secure, prevent abuse, fix errors, and understand aggregate usage so we can improve the product. We balance these interests against your rights.
Consent — where we ask for it, for example optional communications; you may withdraw consent at any time.
Legal obligation — where we must retain or disclose data to comply with the law.

How we use your data

We use the data we collect to:

Provide, maintain, and secure the app and your account
Authenticate you and keep your session active
Respond to your requests and provide support
Send you service messages essential to your account (for example, security or account notices)
Understand aggregate usage and improve the product
Comply with legal and regulatory obligations

We do not sell or rent your personal data, and we do not share it for advertising.

We share data only in these limited cases:

Service providers (processors) — trusted vendors that host our infrastructure and help us operate the app, acting only on our instructions and under data protection agreements.
Legal compliance — where required by law, regulation, or a valid legal request.
Business transfer — if Vzla.io is involved in a merger, acquisition, or sale of assets, in which case we will notify you and this policy will continue to apply.

International data transfers

Vzla.io is operated from the United States, so your data may be processed there and by our service providers in other countries. Where we transfer personal data of users in the European Economic Area or the United Kingdom outside those regions, we rely on appropriate safeguards recognized under the GDPR — such as the European Commission’s Standard Contractual Clauses — together with additional technical and organizational measures to protect your data.

Data retention

We keep your account data for as long as your account is active. When you delete your account, we delete or irreversibly anonymize your personal data within a reasonable period, except where we must retain limited information to meet a legal obligation, resolve disputes, or enforce our agreements.

Because our usage analytics are cookieless and do not identify you, they are not tied to your account and are retained only in aggregate form.

Data security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure — including encryption of data in transit (HTTPS/TLS), hashing of passwords, and access controls that limit access to authorized personnel. No system can be guaranteed completely secure, but we work to protect your data and to address incidents promptly.

Your rights

Under the GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”)
Restrict or object to certain processing
Data portability — receive your data in a structured, commonly used, machine-readable format
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at privacy@vzla.io. We respond to all requests within 30 days. Exercising your rights is free, and you will not be treated differently for doing so.

Account deletion and data export

You can request deletion of your account at any time, either from within the app where available or by contacting us at privacy@vzla.io. You can also request an export of the personal data associated with your account in a portable format.

Children’s privacy

The app is not intended for children. You must be at least 16 years old to create an account. We do not knowingly collect personal data from children under this age; if we learn that we have, we will delete it. If you believe a child has provided us with personal data, please contact us at privacy@vzla.io.

Changes to this privacy policy

We may update this privacy policy from time to time. We will post any changes on this page and, where changes are significant, notify you within the app. We encourage you to review this policy periodically.

Contact and complaints

If you have questions about this privacy policy or how we handle your data, contact us at privacy@vzla.io. For general product help, contact support@vzla.io.

If you are in the European Economic Area or the United Kingdom and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concerns first.