Privacy Policy

Who we are

These apps are made by Varnish Labs LLC, a company registered in the State of Washington. When this policy says “we”, “us”, or “our”, that is who we mean.

We build software for a living, and we use the things we make. We wrote this policy the way we would want one written for us: plainly, and without burying the parts that matter.

What this policy covers

This policy applies to the Varnish Labs apps and smaller products that link here for their privacy information, across iOS, Android, and the web. A few of our larger products have their own dedicated privacy policy. If an app sends you somewhere else for privacy, that policy governs instead of this one.

Our apps differ in what they do, so not every part of this policy applies to every app. Where an app collects something specific or unusual, we tell you inside the app, at the moment it happens.

Information we collect

Information you give us

• Account information. If an app has accounts, this is what it takes to create one, such as your email address and a display name. If you sign in with a provider like Google or Apple, we receive basic profile information from them, never your password.
• Content you create. Anything you enter, save, or upload while using an app, so the app can do its job and show it back to you.
• Messages you send us. The contents of any support request, feedback, or other message you choose to send.

Information collected automatically

• Usage analytics. We use privacy-friendly analytics (such as Vercel Analytics) to understand how an app is used in aggregate. This is anonymous and does not rely on tracking cookies or advertising identifiers.
• Server logs. Standard technical logs, including IP address, device or browser type, and request timestamps. We keep these for security and debugging, not to track you.

Device permissions

Some apps ask for device permissions, such as notifications, camera, photos, location, or health data. These stay off until you grant them, are requested at the moment a feature needs them, and are explained in the app first. You can turn any of them off later in your device settings. Where a permission involves sensitive information, we use it only for the feature you enabled, and we say so in the app. We never use that information for advertising, and we never sell it.

How we use your information

We use the information above to:

• Run the app and provide the features you ask for
• Keep your account secure and your data available to you
• Send notifications and emails you have turned on, such as reminders or confirmations
• Respond to your support requests and feedback
• Understand and improve the app through anonymous, aggregated analytics

We do not:

• Sell your personal information
• Use your data for advertising, or to build an advertising profile of you
• Share your individual data with third parties for their own purposes without your consent

How we store and protect it

Our apps are built on a common, modern stack. Where an app stores data on our servers, it lives in a Supabase-hosted PostgreSQL database with Row Level Security, so records are isolated and reachable only through authenticated requests tied to your account. Apps are hosted on Vercel, and email is sent through Resend. Depending on the app, we may use other reputable providers for specific features, and any provider that handles your personal data does so only on our behalf.

All data travels over encrypted HTTPS connections. We take reasonable measures to protect your information, but no system is ever completely secure. If you find a vulnerability, please tell us at team@varnishlabs.io and we will act on it.

When we share information

We share your information only in these situations:

• Service providers. The providers above (such as Supabase, Vercel, and Resend) process data so the app can function. They act on our instructions and under their own privacy commitments.
• Features you choose. If an app has sharing or social features, anything you make visible through them is described in the app, and you stay in control of it.
• Legal reasons. We may disclose information if the law, a court order, or a valid government request requires it.

We do not sell your personal information, and we do not share it for anyone else’s advertising.

How long we keep it

We keep your information for as long as your account is active, or as long as we need it to provide the app. When you delete your account, we permanently delete the personal data tied to it within 30 days, apart from anything we are legally required to keep. For apps that do not have accounts, we do not hold personal data that identifies you.

Your rights and choices

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you
• Export your data, often directly from the app’s settings
• Correct information that is wrong or out of date
• Delete your account and the data attached to it
• Object to specific uses of your data

Many apps let you do these things yourself in settings. For anything you cannot do in the app, email us at team@varnishlabs.io and we will help.

If you are in the European Economic Area or the United Kingdom, we process your data on the basis of your consent and our legitimate interest in running and improving the app. If you are in California, you have rights under the CCPA, including the right to know what we collect and to request deletion. We do not sell personal information.

Cookies and local storage

Our apps use only the cookies and local storage they need to work, such as keeping you signed in or remembering a preference like your theme. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Children’s privacy

Our apps are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

International users

We operate from the United States, and our providers store and process data there. If you use an app from outside the United States, you consent to your information being transferred to and handled in the United States.

Changes to this policy

We may update this policy as our apps change. When we make a material change, we will update the date above and, where we reasonably can, let you know in the app or by email. The “last updated” date always reflects the current version.

How to reach us

Questions about this policy, your data, or anything else? Email us at team@varnishlabs.io. A human will read it.