Privacy

Current availability

Vondilo is currently in private testing. The account and cloud features described here are the intended launch service. Paid cloud and Sign in with Apple are not yet available.

Who is responsible

LPS Group B.V. · Dutch registration KVK 97190136 · Vrouw Avenweg 131, 2493WT Den Haag, Netherlands. We operate Vondilo and are responsible for its use of personal data. Contact support@vondilo.app for a privacy request or support.

Your free account and device collection

An account is free and is required for ordinary collection use. We use your email/sign-in details and internal account identifiers to provide and protect it. If you use Sign in with Apple, Apple can provide an account identifier and an email address, including a private relay address. The required Vondilo profile does not ask for your name, date of birth, postal address or card details.

Free collection records and personal photos stay on your device. Once signed in, the local collection works offline. Signing out stops account updates but keeps the collection and photos on that device; backup/export remains available from the sign-in screen.

Optional paid cloud and separate photos

Cloud storage is optional. Buying a cloud plan does not start collection or photo uploads. You choose to enable cloud uploads separately for your Vondilo account on each device. New connections leave personal-photo transfers off until you separately turn on Saved photos.

When enabled, private cloud collection data can include item details, notes, quantities, custom fields, organization, storage locations, stable QR identities and selected favorites or estimates. Saved personal-photo uploads require their separate transfer choice. The monthly and yearly plan provide the same features: collection records and up to 1 GB of uploaded personal photos per account.

Turning cloud uploads or Saved photos off stops future covered transfers; it does not erase existing online or device copies. Pausing synchronization is also different from deletion or withdrawal of consent. To request removal of existing online photos or withdraw consent where it applies, contact support@vondilo.app. Photo-only removal keeps the account, collection details and copies on your devices. We verify the request and its scope before an irreversible action.

Purchases and subscription expiry

Apple processes subscription payments through in-app purchase. We receive the purchase identifiers, plan, status and dates needed to verify access and handle purchase or restore requests; Vondilo does not collect your card details. Apple handles its payment information under its own terms and privacy notice. Prices shown by Apple apply to your storefront.

Cancelling renewal keeps paid access until the paid period ends. After verified expiry, new cloud writes stop. We give notice and at least 30 days from delivery of that notice to download existing online collection copies. Unknown payment status or a failed notice is not a reason to start that deadline.

After the stated retrieval period, only online collection copies are removed. Your free account, device copies and backups you saved remain. Renew before cleanup begins to keep existing online copies. Renewing after cleanup begins does not restore copies already removed. Use Account → Download online collection to save an independent full backup without enabling uploads or buying a new plan.

Scanning and reference services

Supported MTG and Pokémon text recognition runs on your device. Catalog searches, recognized text or card identifiers, and connection information can reach the configured reference services, including the Vondilo reference catalog, Scryfall, TCGdex and reference-image hosts. Active supported-card matching does not send personal scan photos to those catalogs. Manual/custom items do not need a catalog match.

Please avoid including people, addresses or sensitive personal information in item photos or notes. Catalog artwork and your personal photos are separate. Public profiles, messaging and public collection-sharing links are outside the launch scope; personal QR retrieval is separate.

Service providers and international processing

Supabase provides account authentication, the database and private uploaded-photo storage. The primary project region has been verified as Ireland. Support, operational data and content delivery can involve processing elsewhere; this is not a promise that all processing stays in Ireland. Applicable provider terms, processor agreements and transfer safeguards must cover the actual service. Supabase also processes authentication and security logs. Its published API and database log history is seven days; provider-internal records, historical database entries and backups can follow separate retention rules.

Cloudflare provides the prepared public information pages, account/purchase-verification and email infrastructure. Email delivery and security records can include recipient addresses, timestamps and delivery results. Support mail is forwarded through Cloudflare to our existing Google Workspace business mailbox. Google stores support messages and attachments under its business data-processing terms. Apple supplies its own sign-in and purchase services. We use the existing providers needed for these functions rather than selling collection data to them.

Why we use information

We use your email and sign-in details to create and protect your free account. If you subscribe to Vondilo’s cloud plan, you can choose to upload your collection and photos. Subscribing does not turn uploads on, and photos need their own separate choice.

We use the information needed to provide the account and cloud services you request under a valid service agreement. We also use limited security and email-delivery information to protect the service, prevent abuse and avoid repeated failed or unwanted emails. When you contact support, we use what you send to help you.

The legal basis for those security and support uses is our “legitimate interests”—protecting the service and helping its users while respecting their rights. You can object to those uses by emailing support@vondilo.app. These uses do not include advertising, public sharing or unrelated profiling.

When the law requires us to handle a privacy request, we use only the information needed to check that it’s yours and respond. That duty does not mean keeping your request forever.

Your photos remain your choice. Turning photo uploads off stops future uploads; it leaves existing online photos in place. You can ask us to remove those online photos while keeping your account, collection details and photos on your devices.

Retention and deletion

We keep account information while your account is open. Online collection data is removed as part of account deletion or the disclosed online-copy expiry process. A photo-only removal request deletes the covered online photos while keeping collection details. Turning transfers off does not remove earlier uploads. Local device copies and exports you saved are under your control.

Purchase-access identifiers, plan status and verification dates are linked to your account so we can verify access, restore purchases and prevent duplicate use. These account-linked service records are removed as part of account deletion; we do not keep a separate multi-year payment archive. Apple handles its own payment and purchase records under its terms. Minimal photo-removal request and permission history remains with the account to prevent replay or an old device re-uploading removed photos; after a photo-removal request, permission to resume uploads is tied to the current sign-in session and other devices must make their own choice.

Incomplete deletion or cleanup requests keep the identifiers needed to finish or retry safely. After account deletion finishes, its operational receipt no longer contains the account link; completed receipts and notification replay identifiers become eligible for pruning after 30 days. Eligible records are removed during subsequent service processing, so 30 days is not an automatic maximum if that processing stops.

Closed support conversations and operator-controlled attachments, copies and recoverable trash are removed within 90 days of closure under the adopted weekly disposal review. Open requests are kept while needed to resolve them. Independent operator backups are planned to retain at most 30 days of history; that backup service and its restore/deletion controls are not yet activated. Restores must respect completed removal requests. User-saved exports and local recovery copies remain until you remove them.

Supabase publishes a seven-day API/database log-history window for the current plan. Cloudflare email message previews are disabled for the inspected authentication sending domain, but delivery and suppression records still exist. Some delivery blocks expire after hours or days; complaint and invalid-mailbox blocks can have no automatic expiry. Those blocks help prevent repeated failed or unwanted messages and are reviewed when handling a verified delivery or deletion request. These published windows and settings do not guarantee erasure of every provider-internal record, older database entry or backup.

Deleting a Vondilo account does not cancel an Apple subscription. Manage and cancel it in Apple subscriptions to stop renewal. You can still delete the account immediately without waiting for the paid period to end.

Your choices and privacy rights

You can edit collection information, export a complete .vdstn backup, change future cloud/photo transfers and request account deletion. A backup saved only inside the app is not protection against losing the device or deleting the app. Save to Files lets you choose a separate destination; that provider’s handling is your own choice. The .vdstn format includes integrity checks, not password encryption.

Depending on applicable law, you can request access, correction, deletion, portability, restriction or objection and withdraw consent where it is the basis. Contact support@vondilo.app. We use the minimum necessary information to verify authority and respond within the applicable period. You can complain to the Dutch Autoriteit Persoonsgegevens or another competent data-protection authority. No routine date-of-birth or identity-document collection is part of the account profile.

Support and these information pages

Support processes your email, message and any attachments you choose to provide. Replies currently use Support Team <support@bcworks.net>; the receiving address is support@vondilo.app. Do not send passwords, sign-in codes, access tokens or deletion-progress receipts. Agree on a safe route before sending private photos or a full backup.

These information pages store only your optional appearance preference in browser local storage. They have no account form, advertising, analytics or embedded external media. Hosting/security providers can still process connection and security information. We do not sell customer data; advertising is not implemented.