Veno stores only what it needs to send you reminders and to keep your Vault safe. This page explains what we hold, where, for how long, and how you can delete it.
1. What we store
- Your name, email, and (optionally) phone / WhatsApp numbers.
- Your reminders (title, description, time, channels, category, receipts), notes, and Vault items.
- Your timezone, language, chosen AI model, and default channels.
- Push subscription tokens (device-level, no personal info).
- Household membership records, if you create or join one.
- A hashed password (bcrypt) if you sign up with email; a Google profile picture URL if you sign in with Google.
2. What we don't store
- We never store your Google password.
- We do not store or scan your email inbox / phone SMS / WhatsApp chats.
- No analytics beacons, no third-party trackers, no ad networks.
3. Where it lives
Everything is stored in a managed MongoDB Atlas cluster hosted by Emergent. Traffic is TLS-encrypted end-to-end.
4. Third parties who receive your data
- Resend — receives your email address + the subject / body of the reminder we send you.
- Twilio — receives your phone / WhatsApp number + the SMS / WhatsApp body.
- Your browser's Push service (Google, Apple, Mozilla) — receives the reminder title + body when a push fires.
- Emergent LLM gateway — receives the text you type or dictate for AI parsing; no persistent chat history is retained by us beyond what's shown in the app. Vault content is not sent to any LLM.
- Emergent Auth — if you sign in with Google, they issue a session token for us to verify.
5. Vault privacy
Vault items are visible only to the account that created them. They are never shared to a household, never sent to any AI, and never emailed as part of a reminder.
6. Cookies
We set one or two httpOnly cookies for authentication (access_token for email/password, session_token for Google). No tracking cookies, no third-party cookies.
7. How long we keep it
Reminders, notes and Vault items stay until you delete them or your account. Notification delivery logs are kept for 90 days for debugging. Push subscriptions are removed when the browser reports them invalid.
8. Delete your account
Go to Settings → Delete account. This immediately wipes all your reminders, notes, Vault items, push subscriptions, household memberships, and the user record itself.
9. Contact
For any privacy request, email nitinvyas2@gmail.com. We aim to reply to privacy requests within 24 hours.