Privacy Policy

Last updated 26 October 2026 · Applies to the VANI app and this website

VANI is a routine app that parents use to run a household. This page explains what the app and this website collect, what allows us to collect it, how long we keep it, and what you can tell us to stop.

Two things worth knowing before the detail. We do not sell your data and there is no advertising in VANI. The usage analytics in the app are switched off until you turn them on yourself. Crash reports and our overall statistics do run by default, and both are described below along with how to stop them.

Who we are and how to reach us

VANI is built and run by Guðmundur Ingi Sigurleifsson, a software developer in Iceland. It is a one-person operation rather than a company, so the person who writes the code is the same person who reads the email. Under GDPR he is the controller of the personal data described on this page.

For anything on this page, including a request about your own data, you can reach us at:

Guðmundur Ingi Sigurleifsson
Kinnargata 37, 210 Garðabær, Iceland
Email: hello@vani.is
Website: vani.is

We answer within one month.

What the app stores about you

Your account: your email address, and either a password or your Apple or Google sign-in. A password is stored as a hash, so we cannot read it. If you sign in with Apple or Google, we get from them your email address (Apple may give us a private relay address instead), an identifier for your account with them, and your name: your first name from Apple, the first time you sign in, or your name and a link to your profile picture from Google. We use the name only to suggest your display name when you set up your profile, and we never use or show the picture. We never get your Apple or Google password. All of this is deleted with your account.

You and your family: the display name you choose, your birth date, which family you belong to, and your role in it, such as owner or member. Your birth date decides whether you can share usage data with us, as described below. Your birth date and your role decide whether the app offers you a subscription: it offers one to someone aged 18 or over who is the owner of a home in VANI, or who uses VANI on their own.

Profiles you create for your children: the name you type in (a nickname is fine) and the child's birth date. The birth date sets how routines are pitched to that child's age. The legal basis is your consent as the child's parent or guardian, as described under Children in VANI.

What you write in the app: routines and tasks, who they are assigned to, and what has been completed.

Subscription and access: whether your account or home has access to VANI, and why. Payments go through Apple, and we never see your card details.

When you buy a subscription, RevenueCat tells us its plan, whether it is a trial, the store, when it ends and whether it renews. Its message also includes the price and your country, which we do not keep. We keep the rest with your account so everyone in your home gets access. Other members see only that the home has access, not who pays. We delete this record within one month after you delete your account, or 6 months after the subscription ends.

If your account or home was part of the VANI beta, we record that it has free access, when it was given and, if it ends, when. The record is deleted with your account or your home.

The legal basis for both records is our contract with you. When you delete your account, we also ask RevenueCat to delete its record of it, if there is one. Until that is done, we keep your account's random identifier in a queue, for at most 30 days.

We also record the date a free trial was first used in your home, including a trial a member started before joining, so each home gets one trial. We keep that date for as long as the home exists, and it does not name the member who used the trial. The legal basis is our legitimate interest in preventing misuse of the trial.

If you start a free trial, we email you a reminder about 2 days before it ends, at the address you signed up with. It says which plan you have, when the trial ends and where to cancel in your Apple subscription settings. It has no marketing in it and we do not track whether you open it. The legal basis is our contract with you, Article 6(1)(b) GDPR. We keep a note that the reminder was sent until 30 days after the trial ends, so it is not sent twice. The note does not name you.

We store the language you choose in the app with your settings, so that the reminder emails and notifications we send you are in that language. If we do not know your language, we send both English and Icelandic. The legal basis is our contract with you, Article 6(1)(b) GDPR. It is deleted with your account.

Your privacy choices: whether you agreed to usage analytics, when you decided, and from which screen. If a yes is ever recorded for an account under 16, our system changes it to a no. That no is an entry made by our system, not a decision by the person. We keep this because the law requires us to show that we asked you properly, Article 6(1)(c) with Article 7(1) GDPR.

On your device: on an iPhone or iPad, the app keeps a short summary of today for the VANI widget and Lock Screen card, including the date and day of the week, and how many of the people taking part have finished their morning, day and evening routines. It holds no names and no profile characters. When you open the Routine tab, the summary can appear on your Lock Screen as a Live Activity, at most once a day per sign-in, so the app notes the day it last did. iOS can also show it on screens linked to your phone, such as an Apple Watch or CarPlay. The app does not send any of this to us or anyone else. All of it is removed when you sign out or delete your account, and the summary also when you delete a profile.

The app does not ask for your location, your contacts, your photos or your microphone.

No law makes you give us this data, but VANI cannot work without it: without an email address there is no account, and without a name on a child profile there is nobody to give a routine to. Unless we say otherwise next to an item, the legal basis is our contract with you, Article 6(1)(b) GDPR: we need the data to give you a VANI account and run it. We keep sales records because Icelandic accounting law requires it, Article 6(1)(c).

If you turn on notifications in the app, we store your device's push token, and an identifier that lets us replace the token when it changes, so we can send you a notification when a free trial is ending or a subscription payment needs attention. The token and the notification text pass through Expo's push service (United States) and Apple's push notification service to your phone. The notification contains no name, date or price. The legal basis is your consent, Article 6(1)(a) GDPR, which you give when you allow notifications and withdraw by turning them off in the app or in your phone's settings. We delete the token when you turn notifications off, sign out or delete your account.

Crash reports, usage analytics and statistics, and why they work differently

These three are not the same thing. Crash reports keep the app working. Usage analytics tell us what to build next. The statistics tell us how VANI is doing overall. They are treated differently on purpose.

Crash reports, on unless you switch them off

When something breaks, the app sends a report so we can find the defect. This runs by default for everyone, because a crash that happens on one phone model and never reaches us is a crash we cannot fix. Our legal basis is legitimate interests, Article 6(1)(f) GDPR, and we have written down the assessment behind that decision.

A crash report contains what went wrong and where in our code it happened, the app version and build number, which app update the device was running, the device model and operating system version, the sequence of screens you passed through before it broke, and a random identifier for your account. A report is built from a fixed list of technical fields rather than by sending everything the app knows about the failure, and we redact database messages that can echo a name back at us. The report does not carry your IP address: the app is configured not to send it and Sentry is set not to store it.

You can object to all of this. In the app: Settings → Data & Privacy → "Send crash reports". Switch it off and the app stops sending reports and stops recording the trail of screens, for every account on that device. Your choice also follows your account to other devices you sign in on. If someone else on the device switches reports back on, your choice applies again the next time you sign in there.

Usage analytics, off until you say yes

We would also like to know which parts of the app actually get used, so we can improve VANI on evidence rather than a hunch. This runs on your consent, Article 6(1)(a) GDPR, and only in the App Store version of VANI, never in the test builds we share through TestFlight. Usage analytics are off for each account until that account says yes. On a shared phone or tablet each account has its own answer, and nothing that identifies you is sent to PostHog before your own account says yes. We ask during setup, on a screen of its own, where saying no is exactly as easy as saying yes, and we never make VANI conditional on saying yes.

We only offer usage analytics to people aged 16 or over, in every country. The app takes your age from the birth date in your profile and never asks for it before you sign in. If you are under 16, or the app cannot read an age from your birth date, you are never asked and usage analytics stay off.

If you agree, we record which screens you open and which features you use, together with the app version and device type. It carries the identifier of your account, so the data is tied to that account even though your name is not attached to it. It does not include names, and it does not include anything you or your children write in the app. PostHog is set not to store your IP address, and session replay, which records what happens on screen, is switched off.

You can change your mind at any time: Settings → Data & Privacy → "Share usage data". Collection stops when you switch it off. When you switch it off or sign out, any events the app has not sent yet are discarded rather than sent. Withdrawing does not affect the lawfulness of what we collected before you withdrew.

Earlier beta builds work differently: they keep one answer per device and record it on whichever account signs in there. We do not treat an answer recorded during setup in those builds as consent, and we clear it. If your account was affected and you are 16 or over, you can turn usage analytics on yourself in Settings.

Overall statistics from what the app already holds

We count what is already in the app to see how VANI is doing overall: how many routines and assignments get completed, and how many accounts and families there are. That is the same information we hold in order to run your account, counted rather than read. Nothing extra is collected for it, and it stays in our own database. Our legal basis is legitimate interests, Article 6(1)(f) GDPR.

We also look at which adult accounts have gone quiet, and we may write to the account holder to ask whether something went wrong. That is a message from a person about your own account, not a mailing list, and you can tell us not to write again.

You can object to either by writing to hello@vani.is.

This website

The website counts visits using PostHog, and only after you accept analytics cookies in the banner. The details are in our Cookie Policy.

The waitlist. If you ask us to tell you when VANI reaches your phone, we keep the email address you give us, whether you picked iOS, Android or both, which language the page was in, and the date. The language is there so we write to you in the one you were reading, and so we know which wording you agreed to. We use all of it for one thing: sending you that message. Our legal basis is your consent, Article 6(1)(a) GDPR, given when you tick the box and submit the form. You can take it back at any time by writing to hello@vani.is, and taking it back is as easy as giving it. The address does not go on a mailing list, is not used for anything else, and goes no further than the database provider named below. We do not check who owns an address before we store it, so if somebody has put yours on the list, tell us and it goes.

Writing to us. The “Get in touch” form on this website does not send or store what you write. It only opens your own email app with your message filled in, and you send it from there. When you email hello@vani.is, from the form or directly, we get your email address, your name if your email app includes it, and whatever you write. We use it only to answer you and, if it is feedback, to improve VANI. Our legal basis is our legitimate interest in answering messages sent to us, Article 6(1)(f) GDPR, or, if you write about your VANI account, our contract with you, Article 6(1)(b). A request about your own data is handled as described under Your rights. Email to that address is forwarded by ImprovMX Incorporation (United States) to a mailbox hosted by Google, and either may handle it outside the EU, including in the United States. We delete the emails 12 months after the last message in the conversation, unless we need them longer to show how we handled a request about your data, or for a legal claim. Please don't send passwords, and don't send more about your children than we need to help.

Invite links are a separate matter. When a family member sends you a VANI invite, the page it opens shows only the family name, to anyone holding that link. The page says so, and you can replace the link at any time in the app, which stops the old one working immediately.

Who else handles your data

We use a small number of providers to process data on our behalf:

  • Supabase Inc. (United States), our database, login system and file storage. Your data is stored in the European Union.
  • Functional Software, Inc., trading as Sentry (United States), crash reports. Reports are sent to Sentry's European region in Germany.
  • PostHog, Inc. (United States), usage analytics for the app and this website. Events are sent to PostHog's European cloud in Germany.
  • RevenueCat, Inc. (United States), keeping track of whether an account holds a paid subscription. It receives the random identifier of your account and the purchase records the app store sends us. Every request the app makes to RevenueCat also carries your device model, operating system and app version, your language, the store's country and a device identifier, and RevenueCat sees the IP address the request comes from. It never sees your name, your email address or your card details. The data is stored in the United States, under the standard contractual clauses described below.
  • Plus Five Five, Inc., trading as Resend (United States), sending the emails we send you: login and account emails and the reminder before a free trial ends. It receives your email address and the text of each email, and keeps the emails and their logs for 30 days. Emails are sent through Resend's European region in Ireland. The data is stored in the United States, with the safeguards described below.
  • Expo (650 Industries, Inc.) (United States), delivering push notifications. It receives the device's push token and the notification text and passes them to Apple's push service. The data is processed in the United States, under the standard contractual clauses described below.
  • Vercel Inc. (United States), hosting for this website. Its servers keep ordinary request logs, including IP addresses, to deliver and protect the site.

Supabase, Sentry and PostHog keep the data described here in the European Union. RevenueCat, Resend and Expo keep what they receive in the United States, and Vercel serves this website from servers around the world, so a visit can be handled outside the EU. Each transfer to the United States is covered by our agreement with the provider, using the European Commission's standard contractual clauses or, where the provider is certified, the EU-US Data Privacy Framework. RevenueCat and Expo rely on the standard contractual clauses. Write to us to find out which applies to each provider, or for a copy of the safeguards.

Apple and Google handle subscriptions and app delivery. They act as controllers in their own right for the payment side, under their own privacy policies, and so does Apple's push notification service for the notifications it delivers. We never sell your data and we share it with nobody for advertising.

How long we keep things

  • Your account and everything in it: for as long as the account exists.
  • After you delete your account: the account and its content are removed from the live database the moment you confirm. Copies stay in our host's encrypted backups for up to 30 days and are overwritten after that.
  • Crash reports: up to 90 days.
  • Usage analytics: up to 12 months.
  • Emails we send: our email provider keeps a delivery record for up to 30 days.
  • Child invites that are not completed: if an invite is never used, expires, is cancelled, is declined or lapses, we delete it, including the child's name and birth date as the adult entered them, within 31 days after that.
  • The website waitlist: until we have sent you the message you asked for, and at most 24 months. If we have not sent it by then, we delete the address anyway.
  • Sales and payout records: 7 years, because Icelandic accounting law requires it.

You can delete your account in the app under Settings → Danger Zone → Delete Account, or start from our account deletion page.

Children in VANI

VANI is a tool for adults. Under our Terms, the person who sets up a home must be 18 or over, and usually that is a parent or guardian running a household. Our App Store listing is aimed at adults rather than at children.

Children take part in one of two ways. Most are managed profiles: an adult creates the profile, the child has no login of their own, and the child never deals with us directly. An older child can instead be invited to have their own account on their own phone.

Information about a child on a managed profile comes from the adult who created it, not from the child. Our legal basis for holding it is the consent of the adult with parental responsibility, given when they create the profile and confirm they are that child's parent or guardian, Articles 6(1)(a) and 8 GDPR. We do not ask for proof of guardianship, because verifying it would mean collecting far more information about your family than the profile itself holds. A child, or an adult acting for a child, can use every right in the section below.

What that means in practice:

  • We only offer usage analytics to people with their own login who are 16 or over, wherever they live. If we cannot read an age from the birth date, we treat the person as under 16.
  • A child on a managed profile has no login and is never asked about usage analytics.
  • We do not build a profile of any child, target anything at a child, or show ads. Our overall statistics count children's completed routines along with everyone else's. The only per-account activity measure is for adults (18 or over), to see which accounts have gone quiet, and a managed child's completed routines can count toward the adult who manages that profile.
  • When you create a child profile you are confirming that you are that child's parent or guardian.
  • You can see and delete any managed child profile in the app at any time.
  • If the adult who created a child profile deletes their account and the profile passes to another adult in the family, that adult has to confirm they are the child's parent or guardian before the profile is kept. The first adult's confirmation does not carry over. If that adult does not confirm, the child profile and everything on it are deleted.

If you believe a child's data has ended up in VANI without a parent or guardian behind it, write to hello@vani.is and we will remove it.

Children with their own login

How the invite works. A parent or guardian can invite a child to have their own login with a personal invite. Only an owner or admin of the home whose saved birth date shows 18 or over can create one. The adult enters the child's first name or a nickname and the child's birth date, and confirms that they are the child's parent or legal guardian and agree to VANI storing the child's data. We record who confirmed, for which child account and which home, when, and which version of that wording they saw.

The link works once and for 72 hours. The child signs in with Apple, Google or email and types their own birthday. We store only whether it matched the date the adult entered, never the date the child typed, and the adult is told if it did not match. The adult then approves or declines the request. Only on approval are the child's name and birth date, as the adult entered them, saved to the child's account, and the birth date is then locked. A request nobody answers lapses after 14 days, and the child can cancel their own request.

Birth dates are what people type in, and being the child's parent or guardian is something the adult confirms. We do not check either.

Ages.

  • Under 16: our legal basis is the consent of the parent or guardian, Articles 6(1)(a) and 8 GDPR. The child is never asked about usage analytics, and they cannot be switched on.
  • 16 and 17: the young person accepts our Privacy Policy and Terms themselves at first sign-in, and we record which version they accepted. They can answer the usage analytics question themselves, and analytics stay off unless they say yes.
  • Nobody under 18 is offered a subscription. Using VANI on your own, without a home, is only for people aged 18 or over.

New accounts in the App Store version. In the App Store version of VANI, a child under 16 who opens a home's ordinary invite link is asked to get a personal invite instead. A new account under 18 cannot use VANI on its own, and a new account under 16 that sets up its own home is put on hold. An account on hold can only sign out or delete itself. We do not delete it automatically. This applies to new accounts only. Accounts that already exist are not put on hold, removed or deleted because of it.

Removing a child's account. While the child is under 18 and still in the home, the adult who confirmed them can delete the child's account in the app under Family Settings. That deletes the account and its data, such as routines, progress and streaks. The child can also delete their own account in Settings at any time. If the child signed in with Apple, VANI may still appear in the child's "Sign in with Apple" list after the account is deleted, and the child can remove it there.

The parent's or guardian's confirmation and the young person's own acceptance are deleted together with the child's account. Consent given for a child does not pass to anyone else.

If the adult who confirmed a child deletes their own account, their confirmation is deleted with it. The child's account stays in the home, and the child can still delete it in Settings at any time.

Your rights

Under GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it over in a portable format. You can object to processing we base on legitimate interests. In VANI that means three things: crash reports, which you can switch off yourself in Settings, and the statistics and the free-trial date described above, which you can object to by writing to us. You can withdraw consent to usage analytics whenever you like, and withdrawing it is as easy as giving it.

Use the switches in Settings for crash reports and for usage analytics, since they take effect immediately. For everything else write to hello@vani.is. We answer within one month. If a request is complicated we may need up to two months longer, and we will tell you inside that first month if that happens. Requests are free. We would charge a reasonable fee, or decline, only where a request is clearly unfounded or excessive, and we would tell you why.

We do not make automated decisions about you that produce legal effects or affect you in a similarly significant way. We do not use your data to build advertising or personalisation profiles. The app does use it for a few simple rules described on this page: the age rules, the one-trial-per-home rule, whether your account or home has access to VANI, and whether the app offers you a subscription. If you think one of them got it wrong for you, write to us and a person will look at it.

Who you can turn to

Tell us first if you can, because most things are quicker to fix that way. You also have the right to lodge a complaint with a data protection authority, either in Iceland where we are based or in the country you live in:

Elsewhere in the EEA, the EDPB lists every national authority.

Changes to this page

If we change something that matters, we will tell you by email or in the app before it takes effect, and the date at the top will change.