1. Who we are
Vinqula is provided by Brillas Labs LLC, which is the controller of the personal data described here. For anything in this policy, write to support@vincula.app.
Vinqula is not for children: it is intended for people aged 16 and over, and we do not knowingly collect data from anyone younger.
2. What we hold
Almost everything here arrives because you asked the app to fetch it or because you typed it in.
- Your account. Your name, email address, and the identifier from the sign-in method you chose (Apple, Google, or an emailed link or code).
- Connected accounts. The address of each account you connect, and the access credentials for it, which are encrypted before they are stored.
- Conversations. Messages from the channels you connect, together with the drafts the service prepares and the messages you send from it.
- Contacts. Names, email addresses, phone numbers and the notes and labels you add. On a phone, only the contacts you pick are uploaded.
- Calendar. Events from a calendar you connect, and events the service creates when you ask it to.
- Your work. Projects, goals, labels and the settings you choose.
- Subscription status. Whether you have an active subscription, from the app store or payment provider. We never see your card details.
- Diagnostics and usage. App and device version, error reports, and product events made of identifiers and counts — never message content.
3. Google data
When you connect Gmail, Vinqula reads the Gmail messages and threads you ask it to sync, including sender and recipient addresses, subject lines, message bodies, thread history and labels. This lets Vinqula show your conversations, keep their context together and prepare draft replies for your review.
Vinqula uses Gmail write access only for actions you take: to send a message and any attachment you add after you approve it; and to mark messages as read, apply the Vinqula: Handled label, or optionally archive a handled thread when you choose that setting.
When you connect Google Calendar, Vinqula reads event titles, times, all-day status, locations and Google links from your primary Google Calendar so it can show your upcoming schedule. It creates an event or a Google Meet event on that calendar only when you ask it to.
Google account identifiers and encrypted access credentials are kept so the connections you request can continue working. Any Gmail or Calendar data imported into Vinqula is kept with the rest of your account as described under How long we keep it.
4. What we do with it
We process this data to run the service you asked for: syncing your channels, organising conversations by person and project, preparing drafts, sending what you approve, and keeping your account working across your devices.
We also use it to support you when you write in, to keep the service secure and detect abuse, to bill for a subscription, and to meet legal obligations. Where the law requires a lawful basis, ours is performing our contract with you, our legitimate interest in operating and securing the service, your consent for AI features, and compliance with the law.
We do not sell your personal data, and we do not use the content of your messages to train AI models.
5. AI features and your permission
AI assistance is off until you allow it. Until then, no message content, contact detail, project information or calendar entry is sent to an AI provider.
When you allow it, the relevant parts of that context are sent to Groq, which runs the model that produces the result and returns it to us. Under our agreement with them, that content is processed to serve the request and is not used to train models. You can read Groq’s privacy policy.
You can withdraw permission at any time in Settings, and the service goes back to working without AI. Requests already in flight may finish.
6. Who else is involved
We share data only with the providers needed to run the service, each bound to use it for that purpose alone:
- Google Cloud — hosting and infrastructure.
- Supabase — the database your account lives in.
- Firebase (Google) — sign-in.
- Groq — AI features, only with your permission.
- Resend — the sign-in emails we send you.
- RevenueCat and Apple — subscriptions and payment.
- Sentry — error reports, so faults can be fixed.
Separately, the providers you connect — Google, Microsoft, Telegram, Meta and any others — receive whatever an action of yours sends them, under their own policies.
We may disclose data where the law requires it, and we would transfer it as part of a sale or reorganisation of the business, in which case this policy continues to apply until you are told otherwise.
7. Google Limited Use
Vinqula’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google Workspace API data is used only to provide or improve the user-facing features described in this policy.
8. Where it is processed
Our servers and our providers are principally in the United States, so your data is processed there. Where data moves out of the European Economic Area or the United Kingdom, we rely on the appropriate safeguards for that transfer, such as Standard Contractual Clauses.
9. How long we keep it
We keep your data while your account exists. Deleting your account blocks it immediately and removes your data, including messages, contacts, drafts, projects and connected-channel credentials. Copies in routine backups age out on their own schedule, and we keep only what we must for accounting or legal reasons.
Disconnecting Google stops new Gmail and Google Calendar access and stops Vinqula from using the stored connection credentials. It does not delete imported history, drafts, or your Vinqula account. To remove those, use the separate Delete account control in Settings.
10. How it is protected
Traffic is encrypted in transit, and data at rest is encrypted by our infrastructure providers. Credentials for connected accounts, and message content, are encrypted with keys held separately from the database, and access to production systems is restricted to those who need it.
No service can promise perfect security, but we design for the smallest amount of data that makes the product work.
11. Your choices
In the app you can review and correct your profile, disconnect any channel, withdraw AI permission, and delete your account and everything in it.
Depending on where you live you may also have rights to access a copy of your data, to correct or delete it, to object to or restrict certain processing, to portability, and not to be discriminated against for exercising them. If you are in the EEA or the UK, you may also complain to your local data protection authority. Write to support@vincula.app and we will respond within the time the law allows.
12. Changes
If this policy changes materially, we will tell you in the app or by email before the change takes effect. The date at the top always says when it was last revised.