Vondi Privacy Policy

Vondi is designed to collect as little personal data as possible. There is no registration. The app signs you in anonymously, and we do not collect your name, email address, phone number or password.

We process the following data:

• Anonymous account ID. A random identifier created when you first open the app. It is not linked to your identity.
• Photos you take. Photos of items are sent to our secure server only to perform the analysis. They are not stored on our servers after the analysis completes.
• Analysis results. The item title, brand, category, condition and price estimates produced by the analysis are stored, linked to your anonymous account ID, so you can view your scan history.
• Purchase history. If you subscribe to Vondi Pro, we receive purchase records (product, dates, status) linked to your anonymous account ID. Payments are handled entirely by Apple or Google. We never see your payment card details.

We do not use advertising SDKs, we do not track you across other apps or websites, and we never sell your data.

We use the data described above to:

• Analyze your photos with AI to estimate resale value and condition, and to generate listing texts.
• Show your scan history in the app.
• Enforce usage limits (3 scans per month on the free tier, a fair-use limit of 500 scans per month on Vondi Pro).
• Manage your subscription and unlock Pro features.
• Fetch aggregated market price statistics for comparable items.

Our legal bases under the GDPR are performance of a contract (providing the app and your subscription) and our legitimate interest in operating, securing and improving the service.

We work with a small number of service providers to run Vondi:

• Supabase (EU-hosted Postgres backend): anonymous authentication, database and secure server functions.
• Google Gemini API: the AI model that analyzes your photos. Photos are sent to the Gemini API through our secure server solely to perform the analysis.
• RevenueCat: subscription management. Receives purchase information linked to your anonymous account ID.
• Apple App Store / Google Play: payment processing for subscriptions, under their own privacy policies.
• eBay Browse API: used to fetch aggregated price statistics for comparable items. No personal data is shared with eBay.

Where processors handle data on our behalf, this is governed by data processing agreements in line with the GDPR.

Photos are processed transiently and are not stored on our servers. Analysis results and scan history are kept until you delete them in the app or until your anonymous account is removed. Purchase records are kept as long as needed for subscription management and legal obligations. You can contact us at any time to request deletion of all data linked to your anonymous account.

Under the GDPR you have the right to access, rectify and erase your data, the right to data portability, and the right to object to or restrict processing. Because accounts are anonymous, we may ask you for your anonymous account ID (shown in the app) to locate your data. You also have the right to lodge a complaint with your data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

Vondi is not directed at children under 13, and we do not knowingly process personal data of children under 13. If you believe a child has used the app, contact us and we will remove the associated data.

We may update this policy from time to time. The current version is always available at this page, and the effective date at the top shows when it was last revised. Material changes will be communicated in the app.

MoviByte Studio, the Netherlands. For privacy questions or data requests, email us at info@movibytestudio.com.