Vezvezak Privacy Policy
Vezvezak LLC · San Jose, California, United States
The short version
Vezvezak is a shopping assistant. To answer your questions it needs to know what you are looking for and roughly where you are.
- Your precise location never leaves your phone. It is rounded to about 110 metres before anything is sent.
- Most of what you do stays on your device — your basket, favourites, price watches, recent searches, and chat history.
- We show no ads and sell no data.
The rest of this page is the detail.
1. What stays on your phone
The following is stored on your device and is not sent to us:
- Your profile: display name, first and last name, photo, bio, interests, links, birthday (month and day only — never the year), city, country, phone, and email. Every field is optional, and the whole profile is skippable.
- Your basket, favourites, and saved comparisons
- Your recent searches and recently viewed items
- Your price watches and price history
- Your chat history with the assistant
- Cached search results
- Your app settings
- A local error log, which never leaves the device
Deleting the app deletes all of it.
2. What we store on our servers
| What | Why |
|---|---|
| Your email address or phone number | To sign you in. Stored in readable form because it is your login identifier. |
| Your name, if you provide one | To address you |
| A cryptographic hash of your password | So we can verify your password without storing it. PBKDF2-SHA256 with a 600,000-iteration work factor — six chained rounds of 100,000, the platform's per-call maximum — and a unique random salt per account. We never store your actual password and cannot see it. |
| Short-lived codes for sign-in and password reset | Stored hashed. Both expire after 10 minutes. |
| A device identifier | To credit referrals and to prevent abuse |
| Your subscription tier and search counts | To apply your weekly cap. We store a count of searches, never a monetary balance. |
If you write a review, we store the review text, the star rating, the language, the title of the product the review is about (the product's own name — not anything you typed into search), and a hashed form of your IP address. The IP hash is used only to limit abuse and is never shown to anyone.
If you list a business or products as a merchant, we store what you entered: business name, address, coordinates, and product titles and descriptions.
Your email or phone number is never shown to other users, to merchants, or in any public part of Vezvezak.
Your search text is not stored on our servers. It passes through them on its way to the services that find results for you — see section 4.
3. Location
We ask your device for an approximate location, not GPS-grade precision.
Before anything is sent, your phone rounds the coordinates to roughly 110 metres. Your exact position never leaves your device.
That approximate location is sent to Google Places to find nearby shops. It is also sent, on its own and with no search text, to work out which country you are in — that decides which country’s online market we search. It happens once each time you open the app, on any search and not only a nearby one. If we can’t tell which country you are in, we don’t search online stores for the rest of that session, and we don’t send your location again to try. See section 4. We do not store the location used for a search.
If you open the map screen, map tiles are loaded from the map provider on your device, centred on the same approximate location.
You can refuse location access. The app still works; it will not show nearby shops.
4. Who receives your data
These companies receive data when you use Vezvezak. Each has its own privacy policy.
| Company | What they receive | When |
|---|---|---|
| Cloudflare | All traffic to our servers — they are our infrastructure provider. They also run the language model used by the content check described in section 5, so if that check ever runs for your account, the text you submitted is processed on their infrastructure. | Always |
| Your search text and your approximate location — rounded to about 110 metres before it leaves your phone — to find shops near you. Map tiles when you open the map. No account identifier is sent. | When you search for shops near you, or open the map | |
| Your approximate location on its own, with no search text, so we can tell which country you are in. That decides which country's online market we search; if we can't tell, we don't search online stores. | Once each time you open the app — on your first search, including an online-only one, or when you price a basket or open a compatibility card. The answer — including “we couldn't tell” — is reused for the rest of that session. | |
| SerpApi | Your search text, plus the country we resolved for you and your app's language, so results come from your own market rather than a default one. No account identifier is sent. | Online search |
| Resend | Your email address and a six-digit code, to send you a sign-in or password-reset email. Nothing else. | Sign-in, password reset |
| Apple | The sound of what you say while voice search is listening, so Apple’s speech recognition can turn it into search text. Depending on your device and language, Apple may process it on your iPhone or on its servers. Vezvezak adds no account identifier to it. | Only after you tap the microphone to search by voice |
- Cloudflare — cloudflare.com/privacypolicy
- Google — policies.google.com/privacy
- SerpApi — serpapi.com/privacy-policy
- Resend — resend.com/legal/privacy-policy
- Apple — apple.com/legal/privacy
5. Artificial intelligence
We have built a content check that can use an open-source language model, running on Cloudflare's own infrastructure, to look at a review for spam, or a merchant's listing title and description for prohibited goods. It is disabled by an explicit setting, so it does not run for any user today — no review or listing text is sent to any model. That setting, not your plan, is what holds this true: switching it on is a deliberate, recorded change, and no account becoming a paid one can turn it on by itself. Were it switched on, no name, email, phone number, or account identifier would be sent with the text, and Cloudflare states it does not use such content to train any AI model or to improve its services. We will update this page before it is ever switched on.
A separate feature that would translate a non-Latin search query using the same on-Cloudflare model is built but switched off. It is disabled by an explicit setting, so no search text reaches any language model today. We will update this page before it is ever turned on.
6. Analytics
We collect a small amount of anonymous usage data. There are six kinds of event:
- A search — which language and script it was in, how many results came back, and how many were uncertain
- A shown answer — which engine produced it and how confident it was
- An opened evidence chain — which engine produced the answer behind it
- An added price watch — which engine produced the answer it was set from
- A tapped link to a shop — which shop, and the price shown for that offer
- A referral to buy a product — a short code derived from the product's identity number (its model or SKU), never its name or your query
None of this is tied to you: no account, device, session, or IP is recorded with any event, and it is sent without signing in — there is no field that could link a row back to you. It never includes your search text or your coordinates.
We use no third-party analytics, advertising, attribution, or crash reporting services. No Google Analytics, no Facebook SDK, no ad networks. No crash reporting SDK is installed in the app.
7. Server logs
Our servers do not log the content of your requests. Request logging on our proxy is disabled, and we have automated tests that fail our build if anyone re-enables it.
Requests pass through Cloudflare, which may retain limited technical metadata for a short period as part of operating their network.
8. Payments
Vezvezak processes no payments. There is no checkout, no wallet, and no card handling anywhere in the app. If you buy something you found through Vezvezak, you buy it from that shop, on their site, under their terms.
Vezvezak has no paid subscriptions today. Were paid plans offered, they would be billed by the app store — the Apple App Store or Google Play — not by Vezvezak, and we would never see your card details.
9. What we never do
- We never sell your personal data.
- We use no third-party ad network, and we never show advertising from one.
- We never personalise anything shown to you based on your behaviour. We do not build a profile of you.
- We never sell placement in search results. What ranks first ranks first because our system judged it best, not because anyone paid.
- We never share your data with advertisers or data brokers.
10. Your rights
You can, at any time:
- See your data — request an export in Settings
- Correct it — edit your profile in Settings
- Delete it — delete your account in Settings (this needs a connection; see section 11)
- Refuse location — the app works without it
If you are in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, and the CCPA — including the right to object, to restrict processing, and to complain to your data protection authority. We honour these rights for everyone, wherever you live.
To exercise any of these, email privacy@vezvezak.com. We respond within 30 days.
11. What deletion actually does
When you delete your account, we remove from our servers:
- Your account, email or phone number, and password hash
- Every review you wrote
- Your business listing and every product you listed, if you are a merchant
- Anything you submitted for verification
- Any feedback you sent
- Your referral code and the invitations you sent
- Your subscription tier and search counts
On your device, everything is cleared.
Deleting your account needs a connection. If we can’t confirm the deletion with our servers, nothing is removed — not from our servers and not from your device — and the app tells you, so you can try again.
Two things are not removed, because neither is connected to you:
- If someone invited you, the record of that invitation, which identifies a device by a hash and not your account.
- Anonymous usage statistics, which never contained any identifier.
Affiliate links are switched off. No affiliate account is configured, so a shop link you tap is passed through unchanged and the app sends us nothing about it. Our server will not accept a purchase referral or a commission record either: the setting that would allow it is off, and those requests are refused before anything in them is read. That setting, not our app’s behaviour, is what holds this true. Turning it on is a deliberate, recorded change, and we will update this page before it happens.
One thing about timing: once our servers confirm the deletion, it takes effect immediately. But our infrastructure provider keeps automatic backups, so copies may remain in their recovery system for up to 30 days before they are gone for good.
12. How long we keep things
| What | How long |
|---|---|
| Account details | Until you delete your account |
| Reviews and listings you wrote | Until you delete your account |
| Sign-in and password reset codes | 10 minutes |
| The internal token issued after a reset code is confirmed | 15 minutes |
| Rate-limiting records | Up to about a day |
| Anything on your device | Until you delete it or remove the app |
| The location used for a search | We do not keep it |
13. Children
Vezvezak is not for children under 13, and we do not knowingly collect anything from them. If you believe a child has given us information, email privacy@vezvezak.com and we will delete it.
14. Security
- Passwords are hashed with PBKDF2-SHA256 at a 600,000-iteration work factor (six chained 100,000-iteration rounds), unique salt per account
- All traffic is encrypted in transit
- API keys are held server-side and never shipped in the app
- Our build fails automatically if a secret would be included
No system is perfectly secure.
15. International transfers
Vezvezak is operated from the United States. If you use it from elsewhere, the data described above is processed in the US and by our providers' global infrastructure.
16. Changes
If we change this policy we will update the date at the top. For anything material we will tell you in the app before the change takes effect.
17. Contact
Vezvezak LLC
San Jose, California, United States
privacy@vezvezak.com