Vuel Privacy Policy

Effective date: August 1, 2026

Introduction & scope

Vuel. is a personal AI agent for everyday life. This policy explains what information we collect when you use the Vuel iOS app, our website (vuel.ai), and our backend service (api.vuel.ai), how we use and disclose it, and the choices you have.

The data controller responsible for your information is Vuel LLC. We use service providers — including Supabase for managed database infrastructure and Fly.io for application hosting — that process information on our behalf. When you use a connected service, visit a provider-hosted payment page, or direct Vuel to communicate with another person or business, that recipient may also process information under its own privacy policy.

This policy is a notice about our data practices; it does not make consent the legal basis for every use of information. Where applicable law gives you privacy rights, this policy explains how to exercise them.

Information we collect

We collect the following information so the agent can do real work on your behalf.

Account and phone

• Your name, email address, phone number, and date of birth.
• For email-and-password accounts, a securely hashed password (we never store your password in plain text).
• OAuth provider IDs and avatar, if you sign in through a connected provider.
• Invite-code and verification records used during signup.

Payment and subscription information

• Web subscriptions. Stripe collects the billing address, payment-method details, and other transaction information you enter in Stripe Checkout. Vuel receives records needed to provide and administer your plan, such as a Stripe customer and subscription identifier, plan and billing interval, subscription and trial status, renewal or period-end date, billing country, cancellation and payment-failure information, and the result of refunds Vuel initiates. Vuel does not receive or store your full payment-card number.
• App Store subscriptions. Apple processes your App Store payment and Apple account information. Vuel receives verified transaction and subscription information needed to grant and maintain access, such as a pseudonymous app-account token, original transaction and product identifiers, purchase environment, subscription status, signed-event timestamps, and renewal or expiration date. Vuel does not receive your full payment-card number or Apple ID credentials.
• We also keep entitlement, credit-limit, one-time trial-eligibility, and provider-event records used to prevent duplicate grants, reconcile subscription status, and apply the correct plan.

Support and feedback

If you contact us for support or provide feedback, we collect your contact and account information and the messages, attachments, and other information you choose to provide. We use and retain these communications as reasonably necessary to investigate and respond, improve support and service reliability, document the request, address safety or abuse, and resolve disputes.

Chat content

• Your full chat history and transcripts with each agent, including instructions for tasks and actions.
• Attachments you add to chat (photos, camera captures, and files).
• Rich content the agent produces in chat (for example briefings, receipts, and media).

Information about other people

If you invite someone or ask Vuel to call, email, text, or otherwise interact with another person or business, we process the contact details and task content you provide, such as the person's name, phone number, email address, and the requested message or call instructions. A connected inbox, calendar, or contact list can also contain information about senders, recipients, event participants, family members, professionals, and other people who do not use Vuel. You are responsible for having permission and a lawful basis to provide and use information about other people.

Sensitive and health-related information

Chats, connected messages, calendar events, notes, files, receipts, voice calls, and support communications may reveal sensitive information, including health, prescription, financial, legal, racial or ethnic, religious, sexual-orientation or gender-identity, and precise-location information. Please provide sensitive information only when it is needed for the feature you request and you have the right to share it.

When you ask Vuel to handle a pharmacy refill or status check, schedule a medical appointment, or perform another health-related task, we may process information such as your name, date of birth, phone number, pharmacy or provider, medication or prescription details, appointment reason, optional insurance information, call instructions, and the call audio, transcript, summary, and result. We send the information needed for the task to the call and AI providers described below and to the pharmacy, medical office, or other recipient you direct us to contact. Health-related call records are subject to the voice-call retention period below. See our Consumer Health Data Privacy Notice for additional disclosures and rights.

Vuel is not a health-care provider and does not provide medical advice. Do not use Vuel for a medical emergency; contact emergency services or a qualified professional.

Permission-derived data

We only access the following after you grant the matching iOS permission, and you can revoke any of these in iOS Settings at any time:

• Contacts — used to look up recipients when drafting an email or text.
• Calendar — Vuel keeps your reminders and events together in its own calendar and can add Vuel-created events to your iPhone's Calendar app (EventKit). On a connected Google Calendar (via OAuth) it can view and create events (RSVP supported) but cannot yet edit or delete Google events. To update or remove an event or reminder it previously added to your iPhone, Vuel looks through your calendar and reminder lists to find its own entry; other events and reminders it passes over are never shown in Vuel, saved, or sent anywhere.
• Location — your approximate location (latitude/longitude, time zone, and city), collected only while you are using the app, used for things like your weather forecast. The coordinates and time zone are sent to our weather provider (Open-Meteo) to retrieve that forecast; no name, account, or device identifier goes with them.
• Photos and Camera — images you attach or capture for the agent to use.
• Microphone — used for voice dictation input and live note-taking sessions.

Connected mailbox

If you connect a mailbox (Gmail in the current iOS app), we access your messages (sender, subject, and body), your contacts for recipient lookup, and drafts, so the agent can read, classify, summarize, and draft replies — a connected mailbox grants both read and send access once you authorize it. Messages from doctors, pharmacies, banks, lawyers, employers, family members, and other senders may contain their information and sensitive information about you. In the app, connected-mailbox replies stay as drafts until you tap Send.

Voice recordings and transcripts

• Voice dictation audio and transcripts.
• AI voice-call records, including the number called, status, a summary, the full transcript, the structured result, and a recording URL.

Notes and files

• Note-taking sessions and foldered notes.
• Files and photos you upload to your agent's workspace.
• Receipts you log via chat (photo OCR or a form).

Push tokens and device info

• Apple push notification (APNS) device tokens, used to send you notifications.
• Request and technical information such as method, path, status, latency, client IP address, browser or user-agent, and security and rate-limit events.
• Our website uses browser session storage for short-lived sign-in tokens and page state. If a waitlist request fails, it uses local storage to keep the submitted email address, source, and time so it can retry on a later visit. We do not use third-party advertising cookies. Website fonts are served by Google, which receives the IP address and browser information needed to deliver them.
• If you join our marketing waitlist, we receive your email address along with the user-agent and IP address of the request.

Usage and derived data

• Durable remembered facts and inferences about your preferences, routines, relationships, priorities, and context that the agent learns or derives from your interactions.
• Communication-style observations, such as preferences about length, directness, formality, humor, and emoji use.
• Conversation and session summaries, semantic memory chunks, and vector embeddings used for recall.
• Inbox classifications, digest observations, reply drafts, and feedback signals used to triage similar messages and maintain continuity.
• A credit and usage ledger reflecting service and token usage.

How we use information

We use your information to:

• Provide the agent's features — placing calls, drafting emails and texts, triaging your connected inbox, managing reminders, todos, calendar, notes, and files, searching for information, and generating media.
• Build your morning briefing (weather, calendar conflicts, emails that need you, and reminders worth keeping).
• Remember your context and preferences across days so the agent can act consistently in your chosen tone.
• Create and administer your account, authenticate you, verify your identity at signup, and protect against abuse and cross-account access.
• Process purchases, verify and reconcile subscription status, provide paid features and trials, prevent duplicate subscriptions and fraud, administer cancellations and refunds, and keep required financial records.
• Measure service usage, enforce plan, agent, and credit limits, troubleshoot errors, and improve the safety, reliability, and features of the Service.
• Send you notifications and transactional messages, respond to support requests, comply with law, resolve disputes, and enforce our terms.

Some processing happens automatically after you enable a feature or set up an action. For example, Vuel may triage a connected inbox before chat, prepare unsent reply drafts for messages classified as needing a response, summarize a note session when it ends, run a scheduled watch you created, and compact a long conversation into a summary used for recall. Automated outputs and classifications can be inaccurate. Vuel is not designed to make eligibility or other decisions about you that produce legal or similarly significant effects.

AI processing, connected services, and service providers

Vuel sends information to providers when needed to operate the Service or complete a task you request. We engage these companies as service providers acting on our behalf — they receive your information to run the Service or carry out a task you asked for, not to pursue their own purposes. The provider and information involved depend on the feature you use. Key categories and providers include:

The underlying AI provider may vary by task, availability, model selection, and routing. Vuel does not use your content to train its own general-purpose AI models. Downstream AI and voice providers have different retention and training policies. Depending on the provider, endpoint, and account or request settings, a provider may retain content for abuse monitoring or other permitted purposes and may use content to improve models. Unless we expressly state otherwise for a feature, Vuel does not promise zero data retention by every downstream provider.

Protection standard for the providers we use. We make personal data available to these providers only to operate the Service or to complete a task you request, and we engage them under terms that require them to safeguard it to a standard consistent with this policy, to use it only for those purposes, and not to sell it or disclose it for third-party targeted advertising. By way of example, Vapi’s terms confirm that content transmitted through its platform remains yours, that Vapi claims no ownership of it, and that it is not shared with third-party services for their independent model-training purposes. Retention is a separate question from misuse: as described above, some providers do retain content for a period under their own policies — Vapi, for instance, stores call recordings and transcripts under its own retention policy — and where a provider’s practice differs from this standard we either do not use it for that purpose or tell you here.

When the agent drafts an email or text for you to send, it goes through your own Mail or Messages app or your connected mailbox — not through Resend or Twilio. When you direct Vuel to send a message, make a call, connect a service, or take another external action, the recipient or connected service receives the information needed to complete that action and applies its own privacy practices.

How we share information

We do not sell your personal data or share it for third-party targeted advertising. We disclose information:

• To service providers that host, secure, support, bill for, or otherwise operate the Service.
• To connected services and recipients when you enable an integration or direct Vuel to take an external action.
• To authorized Vuel personnel and professional advisers as reasonably necessary to operate and support the Service, investigate security or abuse, resolve disputes, and meet legal obligations.
• To courts, regulators, law enforcement, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, property, users, or the Service.
• In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality and notice requirements.
• With your consent or at your direction.

SMS and mobile messaging

Vuel sends SMS and MMS text messages only to users who have created a Vuel account, verified their mobile number, and asked to receive them — for example by asking their in-app assistant to text them updates such as recipes, reminders, and alerts, or by enabling SMS notifications in the app. Message frequency depends on what you set up and may recur, and message and data rates may apply. You can opt out at any time by replying STOP to any message, and reply HELP for help. Opting out of these assistant texts does not stop the one-time verification codes we send when you sign in or verify your account. The full opt-in flow, including screenshots of the in-app consent screen, is documented at https://www.vuel.ai/sms-opt-in.html.

We do not share your mobile opt-in data. The mobile information and consent you provide when you opt in to text messages, including your phone number, are not shared, sold, or rented to any third parties or affiliates for their own marketing or promotional purposes. We share this information only with the messaging providers that deliver the texts you requested (for example, Twilio), and only as needed to send them. No mobile opt-in information is shared with any third party for marketing purposes.

Data retention

We retain personal data for as long as reasonably necessary to provide the Service, support your account, complete the purposes described above, and meet security, dispute-resolution, accounting, tax, reporting, and legal obligations. The period depends on the data's purpose, sensitivity, and applicable requirements.

When account deletion completes, Vuel deletes the account record and private content including raw chat transcripts, remembered facts and semantic memory, emails, calendar and task data, uploaded files, notes, and device tokens. We remove direct contact information and learned preferences from the limited operational and usage records that remain. We do not retain deleted chat transcripts or remembered facts as training data.

We retain limited records after deletion when needed to document the deletion, prevent account or entitlement resurrection, process later provider notices, preserve trial eligibility, prevent fraud, resolve disputes, or satisfy financial and legal obligations. These records may include a deletion audit entry with internal user and member identifiers; pseudonymized usage, credit, and session-count data; and subscription source, plan, status, period-end date, and Stripe or Apple provider identifiers with the active Vuel account link removed. Stripe and Apple independently retain payment and transaction information under their own policies and legal obligations.

The following automated retention windows apply today:

• Inbox emails from a connected mailbox: 30 days.
• Sent replies: 7 days. Unsent or failed replies: 30 days.
• AI voice-call records: 30 days by default (configurable).
• Stripe and Apple webhook event identifiers used to prevent duplicate processing: 60 days.
• Expired verification and rate-limit records: swept regularly.

Your choices and rights

• Access and revoke permissions. You can revoke Contacts, Calendar, Location, Photos, Camera, and Microphone access at any time in iOS Settings.
• Disconnect Gmail. You can disconnect a connected mailbox to stop new access. Data already copied into Vuel remains subject to this policy and the retention periods above.
• Manage subscriptions. Manage a web subscription through the Vuel billing portal hosted by Stripe and an iOS subscription through your App Store account. Cancelling a subscription does not delete your Vuel account. Deleting your Vuel account triggers cancellation attempts for active Stripe subscriptions, but you must separately manage an App Store subscription through Apple.
• Partial deletions. Within the app you can delete individual agents (the last remaining agent cannot be deleted), delete individual files, hard-delete a note (transcript and audio), and ask the agent to "forget" a remembered fact. A "forget" request does not remove verified account data such as your phone number, email, and date of birth; use account deletion or contact support for those records.
• Full account deletion. You can delete your account in the iOS app from the More screen by selecting Delete Account. You may also contact support@vuel.ai for help. The deletion process removes or pseudonymizes information as described in Data retention; limited audit, billing, and anti-fraud records may remain where necessary.

Depending on where you live, you may have rights to know about and access your personal data, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent where processing relies on consent, appeal a denied request, and complain to your local data-protection authority. You will not receive discriminatory treatment for exercising applicable privacy rights. To make a request, email support@vuel.ai. We may need to verify your identity before completing it.

Legal bases and international processing

Where data-protection law requires a legal basis, we process information as needed to perform our contract with you and provide the Service; with consent for optional device permissions and connected services where required; for our legitimate interests in securing, supporting, and improving the Service, preventing fraud, and enforcing our terms; and to comply with legal obligations and protect rights and safety.

Vuel and its providers process information in the United States and may process it in other countries where they operate. Those countries may have different data-protection laws from your country. Where required, we use legally recognized safeguards for international transfers. Contact us for more information about safeguards relevant to your information.

Security

We take steps to protect your information, including:

• Passwords are hashed with bcrypt and never stored or logged in plain text; we do not store raw one-time passcodes.
• Authentication tokens use a pinned algorithm, and a required secret is enforced at startup.
• Database queries are parameterized, and dynamic update paths use server-side allowlists.
• Media and recording URLs are signed, with signature parameters redacted from logs; voice recordings are proxied with a no-store marker.
• Agent-addressed requests enforce agent ownership at the proxy to prevent cross-account access.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Children's privacy

Vuel is not intended for children. You must be at least 13 years old to use Vuel, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. We will update the effective date above and, when required by law, provide additional notice of material changes through the Service, by email, or by another appropriate method.

Contact

If you have questions, complaints, or requests about this policy or your information, contact Vuel LLC at support@vuel.ai.

Less chat. More action.