Legal
Privacy Policy
We collect as little as possible. Here is exactly what that means.
Last updated: 21 May 2025
1. Who we are
Vegarise ("Vegarise", "we", "our") is an independent studio building privacy-respecting software, operating the website at vegarise.io and developing the Finvision iOS application. You can reach us at hello@vegarise.io.
2. This website (vegarise.io)
This website is a static marketing site. We do not use analytics trackers, advertising pixels, or behavioural cookies. We do not collect your name, email address, or any other personal data simply by you visiting this site.
2.1 Server logs
Our hosting infrastructure may automatically record standard server-access logs (IP address, browser user-agent, page requested, timestamp). These logs are used solely for security monitoring and infrastructure diagnostics. They are retained for a maximum of 30 days and are never sold or shared with third parties.
2.2 Email contact
If you email us at hello@vegarise.io, we will receive your email address and the content of your message. We use this only to respond to you. We do not add you to any marketing list and will not share your address with third parties. You can ask us to delete your correspondence at any time by sending a request to the same address.
2.3 Cookies
We do not set any cookies on this site — not for analytics, not for advertising, not for anything else. No cookie consent banner is shown because none is needed.
3. Finvision iOS app
Finvision is designed to be 100% on-device. All financial data you enter — income, expenses, budgets, goals — is stored exclusively in SwiftData on your own iPhone or iPad. It does not leave your device under normal operation, and we do not have access to it.
3.1 Penny AI chat
Finvision includes Penny, an AI chat assistant. When you ask Penny a question, the app sends a small set of redacted budget numbers (e.g. anonymised totals) to a large-language-model provider to generate a response. Specifically:
- No names, descriptions, or merchant details are ever included.
- No device identifiers or account identifiers are transmitted.
- The data sent is limited to the minimum numeric context needed to answer your question (amounts, category totals, date ranges).
You can disable Penny at any time from within the app. If disabled, no data of any kind is sent to any external service.
The AI provider currently used by Penny operates under its own privacy policy. We will identify the provider and link to its policy within the Finvision app and on the Finvision product page (finvision.vegarise.io) before launch.
3.2 Crash reporting and diagnostics
Finvision may use Apple's built-in crash-reporting mechanism. Any crash data is collected solely by Apple, subject to Apple's privacy policy, and only if you have opted in to share analytics with developers via iOS Settings. We receive anonymised crash stack traces and no financial data.
3.3 App Store
Downloading and purchasing Finvision through the Apple App Store is governed by Apple's own terms and privacy policy. We receive only the information Apple provides to developers (e.g. aggregated sales data); we do not receive your Apple ID or payment information.
4. Children
Our website and products are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
5. Data transfers
When Penny is enabled, the redacted numeric data described in §3.1 may be processed by servers located outside your country. We ensure that any such transfer is subject to appropriate safeguards (e.g. Standard Contractual Clauses under GDPR, or equivalent mechanisms in other jurisdictions).
6. Your rights (GDPR and equivalent laws)
If you are located in the European Economic Area, the UK, Switzerland, or another jurisdiction with similar privacy laws, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate data.
- Erasure— ask us to delete your personal data (“right to be forgotten”).
- Restriction — ask us to restrict processing of your data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where we rely on consent, you may withdraw it at any time.
To exercise any of these rights, email us at hello@vegarise.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Because we hold so little personal data, many of the above rights will typically be satisfied by confirming we hold nothing about you — which is almost always the case.
7. Legal basis for processing
Where we process personal data, we rely on the following legal bases under GDPR (or equivalent):
- Legitimate interests — server-access logs for security and infrastructure purposes.
- Contract / pre-contract — email correspondence where you have initiated contact with us.
- Consent — Penny AI processing of redacted budget data (you can withdraw by disabling Penny in the app).
8. Data retention
- Server-access logs: maximum 30 days.
- Email correspondence: retained as long as reasonably necessary for the conversation, then deleted. You may request earlier deletion at any time.
- Finvision app data: stored only on your device, under your control. We hold none of it.
9. Security
We take reasonable technical and organisational measures to protect the small amount of data we hold. Our website uses HTTPS. Email is transmitted using industry-standard TLS encryption. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take it seriously.
10. Third-party links
This website contains links to third-party sites (e.g. finvision.vegarise.io, the Apple App Store). We are not responsible for the privacy practices of those sites and encourage you to read their policies.
11. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect the most recent change. Significant changes will be announced on the website or via email if you are a registered user of a Vegarise product. Your continued use of the website or our products after changes take effect constitutes acceptance of the revised policy.
12. Contact
For any privacy-related questions, requests, or concerns, please email: hello@vegarise.io
We are not required to appoint a Data Protection Officer at this time due to our size and the nature of our processing. The contact above is the correct point of contact for all privacy matters.