Privacy Policy

VayMind is a private, AI-powered digital vault operated by BiggerMind Group. People trust VayMind with their most important documents, so privacy is not a feature of the product — it is the product. This policy explains what information VayMind handles, where it lives, and the control you keep over it.

VayMind is local-first: your saved vault is held on your device. This does not mean AI runs entirely on your phone. When you use AI, relevant content passes through our secure processing gateway to the AI provider described below. We do not sell vault contents or use them for advertising.

Understanding where your information lives is the most important part of this policy:

• On your device — your documents, identity records, notes, dates, family profiles and folders form your local vault. Selected document content or relevant vault context is transmitted when needed for an AI request; the whole saved vault is not used as a server-hosted document library.
• Account and service operation (Supabase) — account identifiers, email and authentication details support sign-in. Subscription entitlement, usage counters, request status and security metadata support billing limits, refunds and abuse prevention. These operational records are separate from your saved document files.
• Purchases — Apple processes App Store purchases. RevenueCat and our backend process purchase, entitlement and subscription-period information so the app can apply the correct plan and allowances.
• Optional encrypted backup — on supported Apple devices, VayMind encrypts your vault on your device before saving the backup to your iCloud. The backup key is kept separately in iCloud Keychain and is not stored inside the backup file. You can turn backup off or delete the iCloud copy in Settings.

• Account information — your email, account identifiers and authentication details support sign-in, account administration and security.
• Vault contents — documents, notes, dates and family profiles are saved on your device. Encrypted iCloud backup and the AI requests described here are distinct ways content can leave the device.
• AI processing content — when you use AI features, the relevant document content is sent securely to our AI provider to process your request (see section 5).
• Technical data — device type, app version, and diagnostic information used to keep the app reliable and secure.

• To store and organise your vault on your device — naming, categorising, and filing documents, and detecting expiry dates so you can be reminded in time.
• To sign you in and keep your account secure.
• To create and restore the encrypted backups you choose to make.
• To send you the reminders you have asked for.
• To maintain security, prevent abuse, and diagnose technical issues.
• To respond to your support and data requests.

We do not sell or rent your data, and the contents of your vault are never used for advertising or unrelated profiling.

VayMind uses OpenAI through our authenticated server gateway for document analysis, Vi chat and letter generation. A scan request can include compressed page images or extracted text. Chat and letter requests include your question, the selected evidence or relevant saved context needed for that request. This processing is not entirely on-device.

AI results are returned to the app. Our operational usage records track allowance use and request outcomes rather than serving as your vault library. Processing providers apply their own applicable data-processing and retention terms. Local deletion does not itself erase a provider's operational or security records; contact us if you need help with a data request.

AI output can be incomplete or wrong. Check extracted dates, amounts, classifications and draft letters against the original documents. VayMind does not automatically send letters, make payments or cancel contracts.

VayMind is built privacy-first:

• Your saved vault is local. Original document files and previews are encrypted using device-held keys. Relevant content is decrypted for display or an AI request when authorised in the app.
• App access can be protected with biometric authentication (Face ID / Touch ID) on supported devices, on top of your device's built-in data protection.
• Backups are encrypted on your device before they leave it. On supported Apple devices, the backup key is kept separately in iCloud Keychain and is not stored inside the backup file.
• Data transmitted for AI processing and account sign-in is sent over encrypted connections.

• Add, edit, and permanently delete any document, note, or record on your device at any time.
• Turn encrypted iCloud backup on or off, run it manually, restore it, or delete the iCloud copy in Settings.
• Request information about your account data by contacting support@biggermindgroup.com.
• Delete your account and entire vault whenever you choose — see our Delete Account page for the exact process.

Family profiles are created and managed by the account holder, who is responsible for having the right to store documents and records relating to family members. Family profiles and their contents are stored on your device alongside the rest of your vault.

Documents moved to Trash remain recoverable until permanently deleted. Delete Account confirms removal of the authenticated account before clearing this device. An encrypted iCloud backup remains until you delete that copy from iCloud Backup settings. Account-linked subscription, usage, refund and security records may be retained where needed to operate the service, prevent repeated abuse or meet legal obligations; contact support for a request concerning those records.

We may update this policy as VayMind evolves, and will communicate material changes in the app or by email. For any privacy question or request, contact support@biggermindgroup.com — privacy requests are acknowledged within 2 business days and completed within 30 days.