Vynkify Privacy Policy

Version: 2.0.0
Last Updated: 14 October 2026

Vynkify is operated by Fluition Sphere LLP ("Vynkify", "we", "our", or "us").

Vynkify is a productivity, collaboration, financial-organisation, and personal information-management application. Depending on the features you choose, Vynkify can help you manage tasks, habits, goals, financial records, subscriptions, shared Vynks, documents, secrets, trips and itineraries, and optional Gmail-derived transaction suggestions.

This Privacy Policy explains how we collect, use, store, share, and delete information when you use the Vynkify mobile application, website, integrations, and related services (collectively, the "Services").

Our Terms & Conditions govern your use of the Services.

Eligibility

Vynkify is intended for users 18 years of age or older.

We do not knowingly offer accounts to children. If we learn that a person who does not meet our age requirement has provided personal information through an account, we will take reasonable steps to restrict the account and handle the information in accordance with applicable law.

1. Information We Collect

The information we collect depends on the Vynkify features you choose to use.

1.1 Account and Profile Information

We may collect:

• name;

• email address;

• profile photo, if provided;

• internal account and user identifiers;

• authentication-provider identifiers; and

• account settings and preferences.

1.2 Productivity Information

When you use productivity features, we may process:

• tasks, subtasks, reminders, status, assignments, and completion history;

• habits, streaks, check-ins, reminders, and progress;

• goals, milestones, progress, and notes; and

• calendar and activity information created from your Vynkify records.

1.3 Financial and Subscription Information

When you use financial features, we may process:

• expenses, income, savings, investments, and self-transfers;

• amounts, dates, merchants, categories, and notes;

• payment-method records used for bookkeeping, which may include a user-provided name, type or category, bank or institution label, and optional limited identifying digits;

• budgets, including name, amount, period, start and end dates, category or Vynk scope, alert threshold and alert-enabled status, notes, status, and calculated spending progress;

• shared expenses, splits, balances, and settlement records within Vynks;

• financial goals and related progress;

• third-party subscription names, expected renewal dates, and related records; and

• suggested transactions or subscription information generated from data you provide or from optional Gmail processing.

Payment-method records are organisational metadata, not payment credentials. Vynkify does not require or intentionally collect full payment credentials as part of these financial tracking features.

1.4 Vynks, Collaboration, and Invitations

When you create, join, or participate in a Vynk, we may process:

• Vynk name, type, settings, and metadata;

• membership, roles, and permissions;

• shared tasks, habits, expenses, goals, documents, secrets, trips, and other Vynk content;

• invitation details, such as invite codes, invitation status, inviter information, and an invitee email address where you choose email invitation; and

• information needed to support invite links and QR-code based joins.

Information you intentionally share in a Vynk may be visible to other members according to the Vynk's permissions and feature behaviour.

1.5 Documents, Attachments, and Secrets

If you use document, attachment, or secret-sharing features, we may process:

• files, images, documents, and their contents;

• file names, types, sizes, and related metadata;

• descriptions or labels you provide;

• secrets, credentials, passwords, important records, or other sensitive information you choose to store; and

• sharing, ownership, membership, and access-control information.

Please only upload or share information that you are authorised to store or disclose.

1.6 Trips and Itineraries

If you use Trip features, we may process:

• trip names, destinations, dates, participants, and notes;

• itinerary items, places, schedules, and related details;

• travel-related documents or attachments that you choose to upload; and

• collaboration information for people participating in the Trip Vynk.

1.7 Support and Communications

If you contact support or submit a support ticket, we may process the information you provide, including your contact details, issue description, screenshots or attachments, and communications with our support team.

1.8 Third-Party Sign-In Information

If you sign in using a supported authentication provider, we receive limited information as permitted by that provider.

Google Sign-In

This may include:

• email address;

• name;

• Google account identifier; and

• profile picture, if shared.

Apple Sign-In

This may include:

• Apple-generated user identifier; and

• email address, including an Apple private-relay address where you choose that option.

Facebook Sign-In

This may include public profile information made available through the configured Facebook login permissions, such as name, email address, and provider identifier.

Signing in with Google does not by itself give Vynkify access to your Gmail inbox. Gmail access is requested only if you separately enable Inbox sync as described in Section 6.

1.9 Device, Linked-Device, Notification, Analytics, and Diagnostic Information

We may automatically process technical information needed to operate and secure the Services, such as:

• device type and operating-system version;

• app version;

• device name and device or app identifiers used for session management and the Linked Devices feature;

• information about active or recent Vynkify sessions needed to show and manage devices where your account is signed in;

• push-notification tokens;

• network and request metadata processed by our infrastructure, which may include IP-address information;

• app interaction and usage events collected through Firebase Analytics;

• crash reports and diagnostic information collected through Firebase Crashlytics;

• performance and reliability information; and

• other technical information reasonably necessary to operate, secure, and troubleshoot the Services.

We use this information for account and session security, the Linked Devices feature, reliability, troubleshooting, analytics, and product improvement.

1.10 Biometrics and Device Authentication

Vynkify may use device authentication, including Face ID, fingerprint, or other biometric authentication supported by your device, to protect access to sensitive features.

Your biometric template or raw biometric data is processed by your device and operating system. Vynkify does not receive, upload, or store your fingerprint, facial biometric template, or other raw biometric data. Vynkify receives only the result needed to determine whether device authentication succeeded.

2. How We Use Information

We use personal information as reasonably necessary to:

• create, authenticate, and maintain your account;

• provide tasks, habits, goals, financial tracking, budgets and budget progress/alerts, payment-method organisation, subscription tracking, and related features;

• provide Vynks, invitations, sharing, and collaboration;

• store and deliver documents, attachments, secrets, and other content that you choose to store or share;

• provide Trips and itinerary features;

• synchronise supported data across devices and offline/online states;

• process optional Gmail data for the user-facing purposes described in Section 6;

• provide automated transaction detection, categorisation, subscription detection, suggestions, and related user-facing features;

• send service-related notifications and reminders;

• respond to support requests;

• monitor reliability, diagnose failures, prevent abuse, and secure accounts and infrastructure;

• improve Vynkify features and usability using data we are permitted to use for that purpose; and

• comply with applicable legal and regulatory obligations.

We do not sell your personal data.

We do not use Gmail data for advertising.

We do not use Gmail message content to build unrelated advertising profiles or to train general-purpose models for unrelated purposes.

3. Information Sharing and Disclosure

We may disclose information only as reasonably necessary in the following circumstances.

3.1 Other Vynkify Users

We share information with other users when you intentionally use collaborative features, such as joining a Vynk, assigning a task, sharing an expense, document, secret, or itinerary, or otherwise choosing to make information available to another member.

Gmail mailbox content and private Gmail-derived suggestions are not automatically shared with other Vynk members. A derived Vynkify record may become shared if you intentionally create or share it in a collaborative context.

3.2 Service Providers

We may use service providers to operate the Services, including providers for:

• cloud hosting and databases;

• object or file storage;

• email and Gmail-processing infrastructure;

• automated extraction or classification used to provide requested features;

• Google Firebase Analytics for product and usage analytics;

• Google Firebase Crashlytics for crash and diagnostic reporting;

• push notifications;

• security, monitoring, and infrastructure operations; and

• customer support.

These providers process information on our behalf and are expected to handle it only for the contracted service and subject to applicable confidentiality, security, and data-protection obligations.

3.3 Legal, Safety, and Security Reasons

We may disclose information where reasonably necessary to:

• comply with applicable law, court orders, or valid legal process;

• investigate fraud, abuse, security incidents, or violations of our Terms;

• protect the rights, property, or safety of users, Vynkify, or others; or

• establish, exercise, or defend legal claims.

3.4 Business Reorganisation

If Vynkify or Fluition Sphere LLP is involved in a merger, acquisition, financing, reorganisation, or sale of business assets, relevant information may be transferred as part of that transaction subject to applicable law and appropriate confidentiality protections.

This paragraph does not override stricter rules that apply to connected-service data. In particular, Google user data will be transferred in a merger, acquisition, or sale of assets only where permitted by the Google API Services User Data Policy, including obtaining explicit prior user consent where required.

4. Automated Processing

Vynkify may use rules, machine learning, artificial intelligence, or other automated systems to provide features such as:

• transaction extraction and detection;

• subscription detection;

• categorisation;

• suggestions and summaries;

• duplicate or relevance checks; and

• reminders or other user-facing assistance.

Automated outputs may be incomplete or inaccurate. You remain responsible for reviewing important financial, subscription, travel, or other information before relying on it.

We use connected-service data only for purposes permitted by the applicable integration terms and this Privacy Policy.

5. Data Storage and Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration, loss, or misuse.

Depending on the feature, these measures may include:

• authentication and authorisation controls;

• access restrictions;

• encryption in transit and encryption or protected storage where appropriate;

• security logging and monitoring; and

• encryption or protected handling of sensitive credentials such as OAuth tokens.

Gmail API access is performed server-side. The Vynkify mobile application obtains your Google authorisation but does not directly read Gmail messages through the Gmail API.

Documents, secrets, and other sensitive information are protected using the security controls implemented for the relevant feature. No system can guarantee absolute security.

You are responsible for protecting your device, account credentials, and any information you intentionally share with other users.

6. Google Gmail Integration — Optional Inbox Sync

This section applies only if you choose to connect a Gmail account through Vynkify's Inbox sync feature.

6.1 Gmail Permission We Request

With your explicit authorisation, Vynkify requests the Google OAuth scope:

https://www.googleapis.com/auth/gmail.readonly

This is read-only access used to read Gmail messages and message-related metadata needed for the authorised feature. It does not give Vynkify permission to send, edit, delete, label, or otherwise change messages in your Gmail mailbox.

Inbox sync does not request access to Google Drive, Google Calendar, or Google Contacts.

6.2 Gmail Information We May Process

To identify relevant financial activity, we may process:

• message metadata, such as message/thread identifiers, sender, recipients, subject, date, snippet, and message labels; and

• message content where needed to identify transactions, receipts, payment confirmations, bank alerts, refunds, subscription notices, renewal notices, and similar financial information.

We do not request Gmail permission to send, modify, delete, label, or compose messages.

6.3 How We Use Gmail Information

Gmail information is used only to provide or improve prominent user-facing features that you request, including:

• detecting financial activity in connected mailboxes;

• generating suggested transactions;

• detecting relevant subscription information; and

• allowing you to review, modify, accept, or reject derived suggestions.

We do not use Gmail information to:

• serve advertisements;

• sell or rent data;

• build unrelated marketing profiles;

• automatically expose mailbox content to other Vynk members; or

• train general-purpose models for unrelated purposes.

6.4 Google Limited Use

Vynkify's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including applicable Limited Use requirements.

We do not allow humans to read Gmail content except where permitted under those requirements, such as:

• with your explicit consent for a support or troubleshooting purpose;

• where necessary for security or abuse investigation; or

• where required by applicable law.

Where a service provider processes Google user data on our behalf, it may process only the information needed to perform the relevant user-facing service and is subject to appropriate confidentiality, security, and data-protection obligations.

6.5 Where Gmail Processing Occurs

Gmail access and processing occur on backend and email-processing infrastructure operated by or on behalf of Fluition Sphere LLP.

The mobile app manages the user-facing authorisation flow but does not directly perform Gmail API reads.

To provide Inbox sync, Vynkify may store copies of fetched message metadata and message content, together with derived classification or transaction information, in our email-processing systems while the Gmail connection is active and as needed to provide the feature. These copies are used for the user-facing Inbox sync processing described in this Policy and do not allow Vynkify to alter the original messages in Gmail.

6.6 Disconnecting Gmail and Gmail Data Deletion

You may disconnect a Gmail account using Vynkify's Inbox sync controls.

You may also revoke Vynkify's access through Google Account permissions.

When Gmail access is revoked or disconnected:

• we stop using that Gmail connection for new processing;

• OAuth access is revoked or invalidated as supported by the integration;

• stored Gmail message copies, associated Gmail-processing records, and Gmail-derived data are scheduled for deletion through our mailbox purge process, subject to limited operational backup, security, or legal-retention requirements; and

• financial entries that you previously reviewed and intentionally saved into Vynkify may remain as ordinary Vynkify financial records unless you delete them separately.

Gmail integration is optional. If you do not connect Gmail, Vynkify does not access your Gmail mailbox content.

7. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, security, backup, and operational requirements.

In general:

• account and User Content are retained while your account remains active and as needed to provide the Services;

• documents, secrets, trip information, and collaboration data are retained while needed for the feature or until deleted, subject to shared-record considerations;

• stored Gmail message copies and Gmail-derived processing data are retained while needed to provide Inbox sync and related user-facing features, and are purged when the Gmail connection or account is deleted according to our deletion procedures;

• diagnostic and security records may be retained for a limited period for reliability, security, fraud prevention, and legal compliance; and

• backup copies may persist temporarily until they are overwritten or expire under our backup procedures.

We may retain information longer where required by law, necessary to resolve disputes, enforce agreements, prevent fraud or abuse, or establish or defend legal claims.

8. Account Deletion

Vynkify provides an in-app account deletion feature.

When you initiate account deletion:

• your account is deactivated and you lose access to the Services;

• active Gmail connections are disconnected or revoked;

• personal data associated exclusively with your account is scheduled for permanent deletion within 30 days, subject to the limited exceptions described below; and

• information may remain temporarily in backups, security records, or legal records until the applicable retention period expires.

8.1 Shared Vynk Information

Some information is collaborative.

Content that you intentionally shared with other users may:

• remain visible where necessary to preserve a legitimate shared record;

• be de-identified or have account-identifying information removed where appropriate; or

• have already been copied or retained outside Vynkify by another user.

Account deletion cannot delete copies that another person independently saved, downloaded, photographed, or screenshotted outside the Services.

8.2 Third-Party Accounts

Deleting your Vynkify account does not delete your Google, Apple, Facebook, Gmail, or other third-party accounts.

Deleting the Vynkify app from your device also does not delete your Vynkify account.

9. Your Choices and Rights

Depending on your location and applicable law, you may have rights or choices relating to your personal information, which may include:

• accessing information about your personal data;

• correcting, completing, or updating inaccurate information;

• requesting deletion or erasure;

• withdrawing consent where processing depends on consent;

• disconnecting third-party integrations;

• revoking Gmail access;

• managing Vynk memberships and sharing permissions; and

• raising a privacy grievance or complaint.

Many actions can be performed directly in the app. For other requests, contact support@vynkify.com.

Withdrawing consent or deleting information does not affect processing that was lawful before the withdrawal or deletion request.

10. International Processing

Vynkify may use infrastructure and service providers located in countries other than the country where you live.

Where personal information is processed across borders, we take reasonable steps to use service providers and safeguards appropriate to the information and applicable legal requirements.

11. Third-Party Services

Vynkify may contain links to or integrations with third-party services, including Google, Apple, Facebook/Meta, cloud and storage providers, notification providers, analytics and crash-reporting services, and other providers used to operate supported features.

Third-party services are governed by their own privacy policies and terms.

Where you connect Gmail, Vynkify's use of Google user data is also subject to the Google API Services User Data Policy.

12. Data Sale and Advertising

Vynkify does not sell personal data.

Vynkify does not sell Gmail data.

Vynkify does not use Gmail data for advertising or transfer Gmail content to third parties for their independent advertising or marketing purposes.

If our advertising practices materially change in the future, we will update this Privacy Policy and provide notice or choices where required by law before applying the change.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect new features, changes in our data practices, legal or regulatory requirements, security requirements, or changes to third-party integrations.

We will update the version and "Last Updated" date when the policy changes.

Where required by applicable law, we will provide additional notice or obtain consent before a material change takes effect.

14. Contact and Grievance Redressal

If you have questions, requests, grievances, or concerns about this Privacy Policy or your information, you may contact:

Fluition Sphere LLP / Vynkify
Privacy and Grievance Contact: Grievance Officer, Vynkify
Grievance Officer Name: To be designated before publication of v2.0.0
Email: support@vynkify.com
Business Address: H. No. 3-404, P S Rao Nagar, Dammaiguda, Nagaram (K.V. Rangareddy), Hyderabad, Rangareddy, Telangana 500083, India
Website: https://vynkify.com

For privacy complaints, you may use the subject line "Privacy Grievance". We will handle grievances and data-rights requests in accordance with applicable law.

The named Grievance Officer must be designated in this section before this version is published to users.