Privacy Policy

Last updated September 2026 · Applies to the VANI app and this website

VANI is a routine app that parents use to run a household. This page explains what the app and this website collect, what allows us to collect it, how long we keep it, and what you can tell us to stop.

Two things worth knowing before the detail. We do not sell your data and there is no advertising in VANI. The usage analytics in the app are switched off until you turn them on yourself. Crash reports and our overall statistics do run by default, and both are described below along with how to stop them.

Who we are

VANI is built and run by Guðmundur Ingi Sigurleifsson, a software developer in Garðabær, Iceland. It is a one-person operation rather than a company, so the person who writes the code is the same person who reads the email. Under GDPR he is the controller of the personal data described on this page.

For anything on this page, including a request about your own data, write to hello@vani.is. We answer within one month.

What the app stores about you

Your account: your email address and your password. The password is stored as a hash, so we cannot read it.

You and your family: the display name you choose, your birth date, and which family you belong to.

Profiles you create for your children: the name you type in (a nickname is fine) and the child's birth date. The birth date sets how routines are pitched to that child's age, and it decides whether the analytics question below is ever shown.

What you write in the app: routines and tasks, who they are assigned to, and what has been completed.

Subscription status: whether the account has an active subscription. Payments run through Apple or Google and we never see your card details.

Your privacy choices: whether you agreed to usage analytics, when you decided, and from which screen. We keep this so we can show that we asked you properly.

The app does not ask for your location, your contacts, your photos or your microphone.

None of this is required by law. It is required by the product: without an email address and a password there is no account, and without a name on a child profile there is nobody to give a routine to.

Our legal basis for all of the above is the agreement between us: we need this data to give you a VANI account and run it, Article 6(1)(b) GDPR. We keep the record of your privacy choices because data protection law requires us to be able to show that we asked you properly, Article 6(1)(c) with Article 7(1). We keep sales records because Icelandic accounting law requires it, Article 6(1)(c).

Crash reports, usage analytics and statistics, and why they work differently

These three are not the same thing. Crash reports keep the app working. Usage analytics tell us what to build next. The statistics tell us how VANI is doing overall. They are treated differently on purpose.

Crash reports, on unless you switch them off

When something breaks, the app sends a report so we can find the defect. This runs by default for everyone, because a crash that happens on one phone model and never reaches us is a crash we cannot fix. Our legal basis is legitimate interests, Article 6(1)(f) GDPR, and we have written down the assessment behind that decision.

A crash report contains what went wrong and where in our code it happened, the app version and build number, the device model and operating system version, the sequence of screens you passed through before it broke, and a random identifier for your account. A report is built from a fixed list of technical fields rather than by sending everything the app knows about the failure, and we redact database messages that can echo a name back at us. The report does not carry your IP address: the app is configured not to send it and Sentry is set not to store it.

The app also samples a small share of ordinary sessions for performance timings, so we can see where VANI is slow. Those carry the same technical fields and the same account identifier as a crash report, and the same switch turns them off.

You can object to all of this. In the app: Settings → Data & Privacy → "Send crash reports". Switch it off and the app stops sending reports and stops recording the trail of screens.

Usage analytics, off until you say yes

We would also like to know which parts of the app actually get used, so that we improve VANI on evidence rather than on a hunch. This one runs on your consent, Article 6(1)(a) GDPR. It is off when you install the app. We ask once, on a screen of its own, where declining is exactly as easy as agreeing, and we never make VANI conditional on saying yes.

If you agree, we record which screens you open and which features you use, together with the app version and device type. It carries the identifier of your account, so the data is tied to that account even though your name is not attached to it. It does not include names, and it does not include anything you or your children write in the app.

You can change your mind at any time: Settings → Data & Privacy → "Share usage data". Collection stops when you switch it off. Withdrawing does not affect the lawfulness of what we collected before you withdrew.

We only put this question to people aged 13 or over. See the section on children below.

Overall statistics from what the app already holds

We count what is already in the app to see how VANI is doing overall: how many routines and assignments get completed, and how many accounts and families there are. That is the same information we hold in order to run your account, counted rather than read. Nothing extra is collected for it, and it stays in our own database. Our legal basis is legitimate interests, Article 6(1)(f) GDPR.

During the beta we also look at which adult accounts have gone quiet, and we may write to that account holder to ask whether something went wrong. That is a message from a person about your own account, not a mailing list, and you can tell us not to write again.

You can object to either by writing to hello@vani.is.

This website

The website counts visits using PostHog, and only after you accept analytics cookies in the banner. The details are in our Cookie Policy.

The waitlist. If you ask us to tell you when VANI reaches your phone, we keep the email address you give us, whether you picked iOS, Android or both, which language the page was in, and the date. The language is there so we write to you in the one you were reading, and so we know which wording you agreed to. We use all of it for one thing: sending you that message. Our legal basis is your consent, Article 6(1)(a) GDPR, given when you tick the box and submit the form. You can take it back at any time by writing to hello@vani.is, and taking it back is as easy as giving it. The address does not go on a mailing list, is not used for anything else, and goes no further than the database provider named below. We do not check who owns an address before we store it, so if somebody has put yours on the list, tell us and it goes.

Invite links are a separate matter. When a family member sends you a VANI invite, the page it opens shows the family name, the name of the person who created the invite and how many people are in the family, to anyone holding that link. The page says so, and you can replace the link at any time in the app, which stops the old one working immediately.

Who else handles your data

We use a small number of providers, each under a data processing agreement, each processing only for us:

  • Supabase Inc. (United States), our database, login system and file storage. Your data is stored in the European Union.
  • Functional Software, Inc., trading as Sentry (United States), crash reports. Reports are sent to Sentry's European region in Germany.
  • PostHog, Inc. (United States), usage analytics for the app and this website. Events are sent to PostHog's European cloud in Germany.
  • RevenueCat, Inc. (United States), keeping track of whether an account holds a paid subscription. It receives the random identifier of your account and the purchase records the app store sends us. It never sees your name, your email address or your card details. We are confirming its storage region and will name it here once we have; until then, treat the sentence below about EU storage as covering the other four providers and not this one.
  • Vercel Inc. (United States), hosting for this website. Its servers keep ordinary request logs, including IP addresses, to deliver and protect the site.

These are American companies and the data described here is stored inside the EU. Where a transfer to the United States does happen, our agreement with the provider covers it, either with the European Commission's standard contractual clauses or, where the provider is certified, the EU-US Data Privacy Framework. Write to us and we will tell you which one applies to which provider.

Apple and Google handle subscriptions and app delivery. They act as controllers in their own right for the payment side, under their own privacy policies. We never sell your data and we share it with nobody for advertising.

How long we keep things

  • Your account and everything in it: for as long as the account exists.
  • After you delete your account: the account and its content are removed from the live database the moment you confirm. Copies stay in our host's encrypted backups for up to 30 days and are overwritten after that.
  • Crash reports: up to 90 days.
  • Usage analytics: up to 12 months.
  • The website waitlist: until we have sent you the message you asked for, and at most 24 months. If we have not sent it by then, we delete the address anyway.
  • Sales and payout records: 7 years, because Icelandic accounting law requires it.

You can delete your account in the app under Settings → Danger Zone → Delete Account, or start from our account deletion page.

Children in VANI

VANI is a tool for adults. The account holder is a parent or guardian running a household, and our App Store and Google Play listings are aimed at adults rather than at children.

Children take part in one of two ways. Most are managed profiles: an adult creates the profile, the child has no login of their own, and the child never deals with us directly. An older child can instead be invited to have their own account on their own phone.

Information about a child on a managed profile comes from the adult who created it, not from the child. Our legal basis for holding it is the consent of the adult with parental responsibility, given when they create the profile and confirm they are that child's parent or guardian, Articles 6(1)(a) and 8 GDPR. We do not ask for proof of guardianship, because verifying it would mean collecting far more information about your family than the profile itself holds. A child, or an adult acting for a child, can use every right in the section below.

What that means in practice:

  • We put the analytics question only to people aged 13 or over, which is the age used in Iceland, Norway, Sweden, Denmark and Finland. If we cannot read an age from the birth date we treat the person as under 13 and do not ask.
  • A child under 13 with their own account is never shown the question and stays switched off.
  • Nothing we collect is used to build a profile of a child, to target anything at a child, or to advertise. That covers crash reports, usage analytics and our overall statistics. There is no advertising in VANI at all.
  • When you create a child profile you are confirming that you are that child's parent or guardian.
  • You can see and delete any child profile in the app at any time.
  • If the adult who created a child profile deletes their account and the profile passes to another adult in the family, that adult has to confirm they are the child's parent or guardian before the profile is kept. The first adult's confirmation does not carry over. If that adult does not confirm, the child profile and everything on it are deleted.

If you believe a child's data has ended up in VANI without a parent or guardian behind it, write to hello@vani.is and we will remove it.

Your rights

Under GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or hand it over in a portable format. You can object to processing we base on legitimate interests. In VANI that means two things: crash reports, which you can switch off yourself in Settings, and the statistics described above, which you can object to by writing to us. You can withdraw consent to usage analytics whenever you like, and withdrawing it is as easy as giving it.

Use the switches in Settings for crash reports and for usage analytics, since they take effect immediately. For everything else write to hello@vani.is. We answer within one month. If a request is complicated we may need up to two months longer, and we will tell you inside that first month if that happens. Requests are free. We would charge a reasonable fee, or decline, only where a request is clearly unfounded or excessive, and we would tell you why.

We do not make automated decisions about you that produce legal effects or affect you in a similarly significant way. We do not use your data to build advertising or personalisation profiles, and we do not use it to make decisions about you.

If you want to complain

Tell us first if you can, because most things are quicker to fix that way. You also have the right to complain to a data protection authority, either in Iceland where we are based or in the country you live in:

Changes to this page

If we change something that matters, we will tell you by email or in the app before it takes effect, and the date at the top will change. VANI is in beta and the product is still moving, so this page will be updated as it does.