← Back to app
Legal
Privacy Policy
Effective date: April 14, 2026  ·  Governing law: State of California
VIONYX is a behavioral intelligence platform. You share personal and emotional data with us to use the service. We take that seriously. This policy explains exactly what we collect, why, how it is stored, and what rights you have — including the right to access, correct, and permanently delete everything. This policy complies with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

1. Who We Are

VIONYX AI ("VIONYX," "we," "us," or "our") operates the VIONYX behavioral intelligence platform, accessible at vionyx-xi.vercel.app. We are based in California and subject to California privacy law.

Contact for all privacy matters: vionyxai555@gmail.com

2. What We Collect

When you use VIONYX, we collect the following categories of personal information:

Category What it includes Retention period
Account identifiers Email address, encrypted password hash, unique user ID Until account deletion
Conversation content Every message you send and every AI response you receive during a reflection session Session duration only (browser sessionStorage, cleared on tab close or sign-out)
Journal entry data Entry type, emotional trigger, full expression content, commitment details, action plans, deadlines, completion records, timestamps Indefinitely until deletion request
Sensitive personal information Emotional states, mental and behavioral patterns, identity-level reflections shared in session Indefinitely until deletion request (see Section 4)

We do not collect device fingerprints, IP addresses, precise geolocation, advertising identifiers, or payment card numbers directly. We do not use third-party analytics SDKs, advertising pixels, or tracking cookies of any kind.

3. Why We Collect It

All data collected has one purpose: providing you with the VIONYX service. Specifically:

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. We do not use your data to train AI models.

4. Sensitive Personal Information

Under the California Privacy Rights Act (CPRA), information that reveals your mental or emotional health, psychological state, or behavioral patterns is classified as sensitive personal information. The content you share in VIONYX — including emotional triggers, unfiltered expressions, and pattern reflections — falls within this category.

We use sensitive personal information solely to provide the VIONYX service to you. We do not sell it, share it for advertising, or use it for any purpose beyond what you explicitly use the platform for.

You have the right to direct us to limit the use and disclosure of your sensitive personal information to what is necessary to perform the service. To exercise this right, contact us at vionyxai555@gmail.com.

5. How It Is Stored

Supabase — Your account data and journal entries are stored in Supabase, a cloud database provider acting as our service provider. Supabase encrypts data at rest using AES-256 and in transit using TLS 1.2 or higher. Your data is stored in a dedicated, access-controlled database table. Supabase processes your data only as directed by VIONYX and under a data processing agreement.

Anthropic Claude API — AI responses are generated through the Anthropic Claude API, routed through a Cloudflare Worker proxy operated by VIONYX. Messages sent to the AI are processed to generate responses. Anthropic does not store or train on API inputs under their API usage policies. Your conversation content is not retained by Anthropic or Cloudflare after processing.

Browser sessionStorage — Conversation history within an active session is temporarily stored in your browser's sessionStorage. This data is scoped to your tab and is automatically cleared when you close the tab or sign out. It never leaves your device.

6. Service Providers

We share personal information with the following service providers solely to operate the platform. These companies are contractually prohibited from using your data for their own purposes:

We do not sell your data to any of these providers or any other party. We do not share your individual data with other VIONYX users.

7. Your California Privacy Rights

If you are a California resident, you have the following rights under CCPA and CPRA:

To exercise any of these rights, email vionyxai555@gmail.com with your account email and the specific right you wish to exercise. We will respond within 45 days. If we need additional time (up to 90 days total), we will notify you within the initial 45-day window with an explanation.

We may need to verify your identity before processing a request. We will not require you to create an account to submit a request, and we will not charge a fee for reasonable requests.

8. Do Not Track

California law requires us to disclose how we respond to Do Not Track (DNT) signals. VIONYX does not use tracking cookies, behavioral advertising, or cross-site tracking of any kind. DNT signals have no effect on our data practices because we do not engage in the tracking activities those signals are designed to limit.

9. Shine the Light Disclosure

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about personal data shared with third parties for those parties' direct marketing purposes. VIONYX does not share personal information with third parties for their direct marketing purposes. No disclosure is required under this law, but we make this statement for completeness.

10. Data Retention

We retain each category of personal information for the periods described in Section 2. In general:

To request deletion of your account and all associated data, email vionyxai555@gmail.com. We will complete deletion within 30 days and confirm when it is done.

11. Children's Privacy

VIONYX is not directed to individuals under the age of 18 and we do not knowingly collect personal information from minors. If you believe a minor has submitted data, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy as the platform evolves. Material changes will be communicated via email to registered users at least 30 days before taking effect. Continued use of the platform after changes take effect constitutes acceptance of the updated policy. The effective date at the top of this document will be updated with each revision.


Contact

For all privacy requests — data access, correction, deletion, or questions about this policy:

vionyxai555@gmail.com

We aim to respond to all privacy requests within 45 days.

VIONYX AI  ·  California, United States