Privacy Policy

This policy explains what Vanilyst ("the Service") collects, why it is collected, how long it is kept and what control you have over it. It applies to the Service only. The Adarsh Yadav website has its own privacy policy.

The Service is operated by Adarsh Yadav, an independent software developer working as a sole trader rather than an incorporated company. The guiding principle is simple: collect the minimum needed to make the product work, be explicit about it, and delete it when it is no longer needed.

Every category of data handled by the Service is listed below, together with its purpose and retention period.

Each permission is requested in context, with an explanation, at the moment it is first needed — never in a burst at first launch. Optional permissions can be declined and the app keeps working without them.

Any permission can be revoked at any time in your device settings. Revoking a required permission stops the features that depend on it, but does not delete your account or your data.

Vanilyst can export a JSON backup of your collection, but only when you explicitly choose to. Nothing is backed up automatically.

• A backup file is generated only after you take that action in the app.
• You choose where to save the file or who to share it with using the system share sheet.
• Vanilyst does not automatically upload backup files anywhere.
• A backup may contain the product information and photos you have added, so treat it like any other personal file.
• You are responsible for securing exported backup files once they leave the app.

Vanilyst Pro purchases are processed entirely by Apple through StoreKit. Vanilyst does not receive or store your payment-card information — Apple's own privacy terms apply to App Store transactions.

• Your data is never sold, rented or traded.
• Your content is never used to train machine learning models.
• There is no advertising in the Service and no advertising trackers are embedded.
• No data is shared with data brokers.
• No profile is built about you for any purpose beyond operating the Service.

Personal information is handled in line with applicable privacy law wherever you are. Where GDPR-style law applies, processing rests on one of the following bases:

• Contract — processing needed to provide the Service you signed up for.
• Legitimate interests — keeping the Service secure, reliable and free from abuse, balanced against your rights.
• Consent — optional features such as marketing email, which you can withdraw at any time.
• Legal obligation — retaining billing records where tax or accounting law requires it.

Vanilyst does not use any third-party infrastructure, hosting or analytics providers to operate. It works entirely on your device, so there is no server for your data to pass through and no provider for it to be shared with.

• Your data is protected by the same on-device encryption and sandboxing Apple applies to every app's local storage.
• Nothing is transmitted off your device as part of normal use, so there is no network transport to secure.
• Purchases are handled entirely by Apple's StoreKit — the app never sees or stores payment details.
• If you export a backup file, its security in transit and at rest becomes your responsibility once it leaves the app.

No system is perfectly secure. If you believe you have found a security issue, email support@adarshyadav.com and it will be looked at promptly.

Regardless of where you live, you can exercise all of the following:

• Access — request a copy of the data held about you.
• Correction — fix anything inaccurate.
• Deletion — remove any data you have entered, at any time, from within the app.
• Portability — export your data in a machine-readable format.
• Objection and restriction — object to or limit certain processing.
• Withdraw consent — for anything based on consent, at any time.

Most of these are self-service inside the Service. For anything else, email support@adarshyadav.com and it will be actioned within 30 days.

The rights above are offered to everyone, everywhere. Some regions add specific rights or wording, set out below. Exercising any of them is free, and you will never be treated differently for doing so.

If your region is not listed, the rights in the previous section still apply — email support@adarshyadav.com and your request will be handled the same way.

No authorised agent, verification fee or account requirement stands between you and these rights. Requests are verified only to the extent needed to confirm you are the person the data relates to.

There are no accounts and no backend, so there is nothing held on a server to retain or delete. Data you enter stays on your device until you delete it — either individually, by archiving or removing it in the app, or entirely by deleting the app. Any backup file you have exported persists wherever you chose to save it until you delete it yourself.

The Service is not directed at children under 13. If you believe a child has provided personal data that reached us directly (for example, in a support email), email support@adarshyadav.com and it will be deleted promptly.

If this policy changes materially, the effective date at the top of this page is updated and the current version is always available here and inside the app. Past versions are available on request.

Questions, requests or complaints about privacy: support@adarshyadav.com. If you are not satisfied with the response, you can complain to the data protection authority in your country.