Privacy Policy

1. Introduction

Exento AI ("we", "our", "us") operates the Vexilla AI mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app. By using Vexilla AI, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

• Email address and name (during account creation)
• Age and gender (during onboarding, for personalisation)
• Goals, habits, and execution data (entered during onboarding)
• Photos (when you submit photo proof of task completion)
• App usage data (tasks completed, streaks, scores)

3. How We Use Your Information

• To create and manage your account
• To generate your personalised AI roadmap and daily tasks
• To verify your proof of task completion
• To send you important app updates and notifications
• To improve our services and user experience

4. Third Party Services

We use the following third-party services that may collect information:

• Supabase — database and authentication. Privacy Policy
• OpenAI — AI task generation and proof verification. Privacy Policy
• RevenueCat — subscription management. Privacy Policy
• Apple App Store / Google Play — payment processing

5. Data Storage and Security

Your data is stored securely on Supabase servers (US East region) with Row Level Security enabled. We implement appropriate security measures to protect your personal information. We never sell your personal data to third parties.

6. Camera Access

We request camera access solely for photo proof submission. Photos are sent to OpenAI for task verification purposes. Photos are not stored permanently on our servers after verification is complete.

7. Children's Privacy

Vexilla AI is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately at ceo.vexilla.ai@gmail.com and we will take steps to delete that information.

8. Your Rights (GDPR)

If you are located in the European Union or United Kingdom, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to correct inaccurate data
• Right to request deletion of your data
• Right to restrict processing of your data
• Right to data portability

To exercise any of these rights, contact us at ceo.vexilla.ai@gmail.com.

9. Your Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal data we collect, the right to request deletion of your personal data, and the right to opt out of the sale of personal data. We do not sell personal data. To exercise your rights, contact us at ceo.vexilla.ai@gmail.com.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You can request deletion of your account and all associated data at any time by emailing ceo.vexilla.ai@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or in-app notification. Your continued use of Vexilla AI after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: ceo.vexilla.ai@gmail.com
• Website: getvexilla.com