VulpesX Privacy Policy

Last updated:

This policy explains how VulpesX (“we,” “our,” or “us”) handles personal data for our mobile app (iOS/Android) and our simple marketing website. We designed VulpesX to be offline-first and privacy-respecting.

1) Who we are

VulpesX is a mobile expense-tracking app and a basic marketing website for product information and updates. Payments for the app (including subscriptions or lifetime options) are processed only by Apple App Store and Google Play Store after launch—no pre-sales or pre-orders through our website.

2) Scope

  • VulpesX mobile app (on your device), and
  • VulpesX marketing website (including the launch notification form). .

3) Data we process

App (on-device)

  • No account required. We do not run servers for the app and cannot access your on-device data.
  • On-device OCR. Receipt scanning/recognition happens locally on your device.
  • Optional app lock. You may enable a device passcode/biometric lock within the app.
  • Exports/backups. You can export to CSV/PDF or create local backups. We do not receive these unless you choose to send them to us.

Website

  • Launch notification form. We collect your email and optional name via Google Apps Script to Google Sheets to send a single launch email. A hidden “honeypot” field helps reduce spam; if it’s filled, we discard the submission.
  • Local/session storage (no cookies for these). Minimal keys to improve your experience: theme, locale, announceDismissed, introSeen.
  • Analytics (optional). If enabled, we use a privacy-friendly analytics service (e.g., Plausible) that provides aggregated metrics and typically does not use cookies. We do not set tracking cookies and do not respond to “Do Not Track” browser signals because we do not track you across sites.
  • No ad trackers.

Hosting/CDN logs (minimal)

Our hosting or CDN provider may generate transient server logs (e.g., IP address, user agent, referrer, requested URL) for security, abuse prevention, and reliability. We do not combine these logs with other data to identify you; retention follows provider defaults and operational needs.

4) Why we use data (purposes) & examples of legal bases

  • Provide the app/website: enable core features (e.g., saving your theme or locale locally).
  • Communicate with you: send a one-time launch notification or respond when you contact us (your consent or our legitimate interest in product updates).
  • Improve reliability and security: rate-limiting, spam/abuse detection, and site protection (legitimate interests).
  • Comply with law: respond to lawful requests or enforce our terms (legal obligations).

Note: The references to “legal bases” are general examples to help users understand common justifications for processing. Specific rights and bases may vary by jurisdiction.

5) Sharing & processors

We do not sell your personal information and do not share it with ad networks. We use trusted service providers (“processors”) to operate limited website features:

  • Google (Apps Script/Sheets) – processes waitlist submissions.
  • Email provider – sends the launch notification or replies to your message.
  • App stores (Apple/Google) – handle purchases and subscriptions; we do not receive your full payment details.
  • Analytics provider (e.g., Plausible) – aggregated usage metrics, typically without cookies.

When you use these features, those providers process your information under their own terms and privacy notices. We are not responsible for their policies.

6) International transfers

If you submit your email/name to the waitlist, your data may be processed in countries other than yours (for example, by Google or our email/analytics vendors). Protections vary by country. Where applicable, we use contractual and technical safeguards (e.g., Standard Contractual Clauses or equivalent). By submitting information, you understand your data may be transferred as described, to the extent permitted by law.

7) Retention

  • App data: stored locally on your device and remains until you delete it, uninstall the app, or change devices. We cannot access or restore on-device data.
  • Launch notification data: kept only until we send the launch email (or until you ask us to delete it at vulpesxapp@gmail.com). We periodically purge the list.
  • Communications: retained as needed to respond, maintain records, and comply with law.

8) Your choices & rights (generally)

Your rights depend on your location, but commonly include the ability to:

  • Access, correct, or delete your information (e.g., ask us to remove your launch notification request).
  • Withdraw consent: email us at vulpesxapp@gmail.com to stop emails or request deletion anytime.
  • Object or limit certain processing and request portability where applicable.
  • Lodge a complaint with your local data authority.

To exercise rights related to the website/launch notification list, email vulpesxapp@gmail.com. For app data, changes are made in the app on your device (we don’t have your app data).

To protect your data, we may request reasonable information to verify your identity before fulfilling a rights request. We aim to respond within 30–45 days, subject to applicable law. We may deny manifestly unfounded or excessive requests.

9) Security

  • On-device first. App data stays on your device. Consider enabling the optional app lock and your device’s system security.
  • In transit. Website submissions are sent over encrypted connections where supported (HTTPS).
  • Least data. We collect as little website data as possible and limit access to those who need it.

Security depends on shared responsibility. Keep your OS updated, enable device/app locks, and maintain your own backups. We cannot recover local data stored only on your device.

10) Children’s privacy

VulpesX is not directed to children under 13 (or under 16 where that age applies). If you believe a minor provided us information via the website, contact vulpesxapp@gmail.com. Upon verified notice, we will delete such information.

11) Pricing & purchases (clarity note)

Pricing may include subscriptions and/or a lifetime option and may change over time. All purchases are processed by Apple App Store or Google Play Store under their terms and privacy notices.

12) Changes to this policy

We may update this policy to reflect product or legal changes. We will post the new version here with a new “Last updated” date. Material changes will be highlighted where reasonable.

13) Contact us

Questions or requests: vulpesxapp@gmail.com

If you submitted your email for launch notification and want it removed before launch, contact us at the address above.

This Privacy Policy is provided for general information only and is not legal advice. You should consult your own counsel about your specific situation.