Privacy Policy

What information Vekrin holds about your household, why it holds it, who else is involved and how to get it removed.

Last updated 2026-09-02 · version 2026-09-02.1

Vekrin is a private home-organisation service. Everything you add belongs to your household, and only people you have invited into that household can see it.

This policy is written in plain English and describes what the product actually does today. If anything here is unclear, email support@vekrin.app.

Who we are

Vekrin is the service available at vekrin.app. The contact point for privacy questions, data requests and security reports is support@vekrin.app.

Vekrin is currently in private beta and the operating entity behind the service is being formalised. Full business identity details will be published here before Vekrin becomes generally available or takes payment.

Information Vekrin processes

Vekrin holds the following, and nothing beyond it:

Account data — your email address, first and last name, profile photo if you upload one, the sign-in method you used (email and password, Google, or Login with Amazon), and your household membership and role.
Connected sign-in accounts — where you sign in with or connect Amazon: the provider's stable account identifier, and the name and email address Amazon shares with Vekrin if you authorise it, so the connection can be labelled and reused at your next sign-in.
Household data — the household name, its currency, language, timezone and units, an optional household photo, and the household members you add (name, role, colour, and a link to their sign-in where they have one).
Inventory — items you record: name, description, manufacturer, model, serial number, barcode, room, category, condition, notes, purchase date, purchase price and estimated value where you enter them, and archive or replacement history.
Photos and documents — item photographs, receipts, invoices, warranty documents and any other files you upload, together with their file name, type and size.
Bills, payments and spending — suppliers, amounts, due dates, account numbers you enter, payment records, purchases, merchants, categories and how a purchase is split between household members.
Email import — where you connect Gmail: the connected account's email address, and the messages and attachments Vekrin identifies as invoices or receipts, including sender, subject, date, extracted text and any attachment it saves as a document.
AI and OCR — the receipt, invoice or question you submit for processing, and the extracted or generated result, including Assistant conversations and Household Intelligence insights.
Insurance profile — if you complete it: policyholder name, address, phone, email, policy number and claim reference, used to fill in the Insurance Inventory Pack.
Usage analytics — a short list of fixed event names (for example that a landing page was viewed or an account completed onboarding), a device class of mobile, tablet or desktop, which call-to-action a visit came from, and a random session identifier. No household, financial or document content is ever included.
Technical and security records — sign-in sessions handled by our authentication provider, administrative actions recorded in an audit log, and feedback you submit through the in-app feedback form.

Why Vekrin processes it, and on what basis

Different information is held for different reasons. Accepting this policy is not treated as blanket consent to everything.

To provide the service you asked for — your account, household, inventory, documents, bills, spending records, exports and Insurance Inventory Packs. Basis: performance of our contract with you.
To run automated extraction and assistance — reading receipts and invoices, suggesting categories, generating insights and answering Assistant questions. Basis: performance of our contract, because these are the features you signed up to use.
To import invoices from a mailbox you connect — Basis: performance of our contract, initiated by your explicit, revocable authorisation of read-only access. You choose whether to connect a mailbox and can disconnect at any time.
To keep the service secure and prevent misuse — rate limits, audit logging, abuse controls. Basis: our legitimate interest in keeping households' data safe.
To fix problems and support you — investigating a fault you report. Basis: our legitimate interest in a working product, and performance of our contract.
To understand which parts of Vekrin help people — limited first-party statistics, described below. Basis: our legitimate interest in improving the service, with a simple way to turn it off.
To meet legal obligations — for example responding to a lawful request or keeping records we are required to keep. Basis: compliance with a legal obligation.

Gmail and Google user data

Connecting Gmail is optional, off by default, and separate from signing in with Google.

When you connect Gmail, Vekrin requests read-only access to your mailbox (the Gmail readonly scope) plus your basic Google profile and email address so the connected mailbox can be labelled correctly. Vekrin cannot send, edit, delete or archive any message in your mailbox.

Vekrin looks for messages that appear to be invoices, bills or receipts, using sender and subject signals and common invoice wording. For those messages it stores in your household: sender, subject, date, a snippet or text of the message, and any attachment it saves as a document. Attachments and message text may be processed by our AI provider to extract the merchant, amount, dates, invoice number and similar fields.

Messages that are not identified as invoices or receipts are not imported into your household. Vekrin never uses Gmail content for advertising, behavioural marketing, unrelated analytics, sale of data, or training generative models.

You can disconnect Gmail at any time from the Inbox import page. Disconnecting stops all further access and removes the stored authorisation. Records already imported stay in your household so your bills and documents remain intact; you can delete them individually, or delete your account to remove everything.

Login with Amazon

You may sign in to Vekrin using Login with Amazon, or connect Amazon to an existing Vekrin account from Settings → Connected accounts. It is optional and only ever starts when you choose it.

When you authorise it, Amazon may share basic identity and profile information with Vekrin: a stable account identifier, and your name and email address where you permit it. Vekrin uses this only to create or recognise your account and to label the connection.

Amazon sign-in does not give Vekrin access to your Amazon orders, purchases, order history, addresses or payment information. Vekrin does not request, receive or store any of that. If Vekrin ever offers an Amazon purchase-data connection in future, it will be a separate feature requiring your explicit permission, described here before it is used.

The authorisation Vekrin holds is stored encrypted on the server and is never exposed to the browser. Your Amazon account is matched by Amazon's own account identifier, never by email address alone, so accounts are never merged automatically. You can disconnect Amazon at any time in Settings, provided you still have another way to sign in.

Voice and audio processing

Vekrin Voice lets you talk to the Assistant instead of typing. It is optional, and nothing is captured until you start a voice conversation yourself. There is no wake word and no background listening in this release: when Voice is paused, exited or closed, the microphone is not in use.

While a voice conversation is active, your microphone audio is captured on your device and transmitted over an encrypted connection so it can be turned into text. That audio is processed for that request only. Vekrin does not save the raw recording into your household record and does not keep a permanent archive of voice recordings.

What is kept is the same as a typed conversation: the text transcript of what you said, and the Assistant's written answer, stored in your Assistant conversation history until you delete the conversation.

Speech transcription and the spoken reply are produced by third-party AI and speech providers reached through Vekrin's AI gateway, listed under “Who else is involved” above. Their own processing and retention of the audio sent to them is governed by their terms as processors for Vekrin. Voice audio is never used for advertising or marketing.

Usage analytics

Vekrin uses limited first-party usage statistics to understand which parts of the product are useful and where people get stuck. It does not track you for advertising, does not build a profile about you, and does not share this data with anyone.

Only fixed event names and enumerated values are accepted; free text is rejected before it can be stored. Nothing about your belongings, documents, money or household is included.

Individual and session-level analytics rows are aggregated into daily, non-identifying statistics and then deleted, with a target of 7 days. Only the aggregated statistics are kept long term.

You can turn usage analytics off at any time in Settings → Legal & privacy, or on the Cookies & analytics page if you are not signed in. Turning it off takes effect immediately in your browser.

How long information is kept

Account, household, inventory, documents and financial records — kept until you delete them or delete your account.
Archived inventory items — kept, with their photos and documents, until you delete them permanently. Archiving is not deletion.
Files in storage — removed when the record that owns them is deleted; a background cleanup finishes shortly afterwards.
Imported email records — kept until you delete them or delete your account, even after Gmail is disconnected.
Raw usage analytics — aggregated then deleted, target 7 days. Aggregated statistics are non-identifying and kept long term.
Administrative audit records — kept while needed for security and accountability.

Your rights

You can access and correct your information directly in the product, export your household data at any time, object to usage analytics with a single switch, and delete your account from Settings.

You also have the right to ask for a copy of your data, to have it corrected or erased, to restrict or object to certain processing, and to complain to your national data protection regulator. Email support@vekrin.app and we will respond.

Age

Vekrin accounts are for adults: you must be at least 18 to create one. You can record other people in your household as members without giving them a sign-in.

Changes to this policy

If this policy changes materially, the version and date at the top of this page change and we tell you in the product before the change affects you. Minor wording and typo fixes are made without notice.