Privacy Policy

1.1 Personal Information

When you create an account or use our services, we may collect:

• Name and email address
• Account credentials (your password is stored only as a one-way hash, which cannot be turned back into your password)
• Profile information you choose to provide
• Payment information, if you purchase a paid product — handled by Paddle, our merchant of record; we never see or store your full card details, only your subscription status, billing period dates, and Paddle's subscription reference
• Communication preferences

1.2 Usage Data

We automatically collect certain information when you use our services:

• Device information (type, operating system, browser)
• IP address (to record consent and to protect the service against abuse)
• Usage patterns and feature interactions
• Performance metrics and error logs
• Session duration and frequency

Vincoder is a Windows program that runs an AI model on your own PC. Except as described in this section, your prompts, your code, your files, what the tools read and what the model writes never leave your computer: the model server listens on 127.0.0.1 only and the app's own code has no path that uploads conversation content. Commands the model runs on your PC (section 5 of the Software License says when it asks you first), and hook and verify scripts that you add or that come with a project folder you choose to trust, are ordinary programs that can use the network like any other program you run. This section lists the few things the app does send, and what it keeps on your PC.

What the app sends

Each request the app sends to Vincdata or to our account service also carries your IP address and the standard header PowerShell adds, which names your Windows version, your Windows regional format (for example en-CA) and your PowerShell version. Every request that carries your sign-in refuses redirects, so the token can never be forwarded to another host. The app has no crash reporter and never sends its logs itself; you can send them to support yourself.

What stays on your PC

In the app's data folder under your Windows profile: your account email, name and account ID (plain text), and the session tokens and your last subscription check (sealed by Windows Data Protection); your settings; the usage counter; your typed prompt history; your conversations, including tool output and any command output or file contents you add to a message (older versions kept only the 20 newest; current versions keep all of them and show older ones under /resume all); a transcript you save with /export, unless you name another file for it (deleting the conversation does not delete the transcript); the notes you asked the model to remember; snapshots of files before the app changed them with its own file-editing tools (so you can undo those edits; files over 8 MB are not copied, and nothing is copied when a command it runs changes, moves, renames or deletes a file); per-turn timing records with no content; the project folders you chose to trust (each folder's path, the names and fingerprints of its hook and verify files, and when you trusted it); small status files (for example, when you accepted the risk notice, when updates were last checked, and whether the first-start signal was sent); and, if the model runs a command in the background, that command, a small wrapper script and what the command printed, each deleted once it has gone 7 days without being written to, the next time you start an interactive Vincoder session or a later background command starts. The model files and the app's logs live in the install folder: the engine log, a crash log, short startup and sizing records, and, if you run vincoder -Doctor, a diagnostic report that includes your account email and your PC's setup, kept until you delete it so you can send it to support. The crash log records errors, including ones the app recovers from; an entry can include file and folder names and an error message from the model engine, which can repeat part of a conversation. The app never sends it; we may ask you to email it to support. /logoutremoves the account file and revokes the session on our side; the uninstaller offers to delete the models, and separately the data folder together with the logs folder; if you say no, or the uninstall runs unattended without being told to delete them, they stay. The app trims some of these as it goes, keeping only the newest timing records and undo copies, and the crash log is capped at about 1 MB: when it grows past that, the oldest records are dropped. It never empties the folders; you can delete a conversation from the /resume picker, or delete the folders yourself if you want everything gone.

VincBuddy is a Windows program that watches your own computer and tells you what needs you. It reads on your machine and keeps what it reads on your machine. This section says exactly what it looks at, what stays on your computer, and the few things that leave it.

What it reads, on your computer only

The AI model that judges all of this runs on your computer (a local llama.cpp server on 127.0.0.1). Nothing VincBuddy reads is sent anywhere by the app — not to Vincdata, not to any AI provider. What the app has read is kept in a local file sealed with Windows Data Protection (DPAPI) to your Windows account; its log contains what the app did and when, never the text it read.

What leaves your computer

That is the whole list. The chat has no access to the internet; the app cannot send mail, reply, post or purchase anything on your behalf.

Reading your mailbox (off until you choose it)

If you switch on Settings → Mail → Let this app read your mailbox, you sign in on Microsoft's own page and grant read-only permissions (Mail.Read, plus your basic profile and offline access so the sign-in lasts). The app then reads the sender, subject, date and first lines of recent messages, as text, onto your computer. It cannot send, reply, move or delete mail, and nothing it reads is sent to Vincdata. You can withdraw the permission at any time in Settings (Turn off), which also forgets the sign-in, or from your Microsoft account's app permissions. Google mailboxes are not offered in this version.

VincChat is our chat service. You can use it in your browser at vincdata.ca or with the Android app; both work with the same Vincdata account. Section 1.4 describes the chat service itself. This section lists what the Android app reads on your phone and what it sends.

What the app sends to us

What stays on your phone

Google Play: if you install the app from Google Play, Google handles the download, installation and updates under its own privacy policy. Links to Google Play on vincdata.ca carry a label naming the page the link was on, so Google Play can show us how many installs came from each page; the label says nothing about you. Google Play also shows us statistics such as install counts and crash rates, and the reviews people choose to post publicly.

The app contains no advertising or analytics SDK and sends no push notifications. Deleting your Vincdata account (Settings → Delete account, or the Account Deletion page) removes your chat history; uninstalling the app removes what it kept on the phone (turn off biometric login first so its stored token is cleared). The app is not available to residents of Quebec and is not directed to anyone under 18.