Privacy & trust

Vekrin stores what you put into it: your home, rooms, categories, items, documents, warranties, receipt scans and assistant conversations. Every record is tied to your account.

Database access rules are enforced per row on the server, scoped to your signed-in user id, so one account's queries cannot return another account's records. Files live in private storage buckets and are only ever served through short-lived signed links.

We do not sell your data and we do not show it to other users.

When you ask the assistant a question, Vekrin searches your own records first and sends a bounded extract of the matching rows — item names, rooms, dates, amounts, warranty details and relevant receipt text — to an AI model, together with your question.

The assistant is read-only. It cannot add, edit or delete anything, and it is instructed to answer only from the records it was given and to cite them. Answers that reference records you don't own are discarded before the reply is saved.

Text inside your documents and receipts is treated as untrusted content, so instructions hidden in a scanned file are not followed.

AI processing happens through a third-party model provider. Extracts of your data leave our systems for the duration of that request. If you would rather not use AI features, simply don't use the assistant or receipt scanning — the rest of Vekrin works without them.

You upload a JPEG, PNG, HEIC or PDF. The file is stored privately, then read by an AI model that extracts the store, date, totals, tax, line items and any warranty terms it can find.

Nothing is saved to your inventory automatically. You always see a review screen with confidence indicators and can edit every field, choose which items to create or link, and discard the scan entirely.

Extraction is imperfect. Always check amounts and dates before saving — we surface confidence levels precisely because the model can be wrong.

You can delete individual items, documents, warranties, receipt scans and conversations at any time. Deleting a record also queues its stored files for removal.

Settings → Your data → “Delete my account” removes your profile, every household record and every uploaded file, then deletes your login. It requires typing DELETE and cannot be undone.

Retention limitation we can't avoid: encrypted infrastructure backups taken before your deletion may hold a copy until they rotate out on their normal schedule. They are not used to restore individual accounts.

Sign-in supports email and password or Google. Passwords are checked against known breach lists at sign-up and change, and are never stored by us in readable form.

Data is transmitted over HTTPS and encrypted at rest by our hosting provider. Storage buckets are private; there are no public file URLs. Server-side operations that need elevated access run only after your identity has been verified for that request.

We are a small private beta. We do not hold SOC 2, ISO 27001 or similar certifications, and we don't claim regulatory compliance we haven't been audited for. Please don't store documents you couldn't tolerate losing without your own backup.

Found a security issue? Send it through Beta feedback in Settings and we'll respond.