VINTAPrivacy Policy
Last updated 29 October 2026
In short: Your photos and videos stay on your iPhone; the Vinta app never uploads them. The app sends usage statistics and crash reports so we can fix bugs and see which features are used. They are tied to a random ID for your installation, never to your name, email or Apple ID, contain no photos or contact details, and are never used for advertising or to track you across other apps. This website counts visits with Vercel Web Analytics, which uses no cookies and can't identify you. If you buy Vinta Pro on this website, we hold your email address and a record of your subscription so we can unlock Pro and support you. Stripe handles your payment details; we never see your full card number. We don't sell data.
1. Who is responsible for your data
The data controller is Roman Degtyarev, a sole trader based in the United Kingdom. Contact: ro.degtiarev@gmail.com.
2. The Vinta app
The App works entirely on your device. Photos and videos you take, import or develop are processed on your iPhone and saved to your camera roll. They are not uploaded to us. The App asks for camera, microphone and photo-library permissions only so that it can take, record and save pictures; you can change these in iOS Settings at any time.
The App does not contain advertising and does not track you across other companies' apps or websites. It does send three kinds of usage and diagnostic data:
- Usage statistics via TelemetryDeck: which features are used (for example that a photo was taken or a camera was selected), app version, iOS version and device model. TelemetryDeck receives only a one-way hashed identifier, so this data cannot be traced back to you, and it is only ever reported in aggregate.
- Usage analytics via Google Analytics for Firebase: the same feature events (for example which camera, mode and format were used), when the App is opened and for how long, app version, iOS version, device model, language, and an approximate location (country, region and city) that Google works out from your IP address. This is linked to a random app-instance ID created when you install the App, not to your name, email or Apple ID; deleting the App resets it. The App does not collect your device's advertising identifier, and Google's advertising features are switched off.
- Crash reports via Firebase Crashlytics: when the App crashes, a technical report (stack trace, device model, iOS version, app version, a random installation ID and the last few App events before the crash) is sent so we can find and fix the fault.
None of these contains your photos, videos, name, email address or precise location, and none is used for advertising or to track you across other apps or websites. We process this data on the basis of legitimate interests: understanding how the App is used and keeping it working. The App doesn't yet have a switch to turn analytics off; if you object to it, email us.
If you sign in to the App to use Vinta Pro, the App sends your email address to our server to check whether you have an active subscription. That's the only data it sends.
3. This website and Vinta Pro
When you subscribe to Vinta Pro, we collect and hold the following:
| Data | Why we use it | Legal basis |
|---|---|---|
| Email address | To link your subscription to the App, send receipts and renewal notices, and answer support requests | Performance of a contract |
| Subscription status, plan and billing dates | To unlock Pro in the App and manage renewals and cancellations | Performance of a contract |
| Country and, where required, VAT status | To charge the correct tax | Legal obligation |
| Payment details (card number, expiry, billing address) | Collected and stored by Stripe, our payment processor. We see only the last four digits, the card brand and whether the payment succeeded | Performance of a contract |
| Support emails you send us | To help you and to keep a record of what was agreed | Legitimate interests |
| Anonymous visit statistics (page viewed, referring site, country, browser, operating system, device type) | To see how people find this website and which pages they read. Collected by Vercel Web Analytics without cookies; visitors are told apart only by a hash of the request, which is discarded after 24 hours, and we see only aggregate numbers | Legitimate interests |
| Basic server logs (IP address, browser, pages requested) | Security and keeping the site running. Kept for no more than 30 days | Legitimate interests |
This website doesn't use cookies for advertising or analytics.
4. Who we share data with
- Stripe (Stripe Payments Europe, Ltd / Stripe Payments UK Ltd) processes payments and holds your card details. See Stripe's privacy policy.
- Vercel hosts this website, handles server logs and provides the cookie-free visit statistics described above. See Vercel Web Analytics privacy information.
- TelemetryDeck (TelemetryDeck GmbH, Germany) receives anonymous, aggregated usage statistics from the App. See TelemetryDeck's privacy policy.
- Google (Google LLC) receives crash reports from the App through Firebase Crashlytics and usage analytics through Google Analytics for Firebase, as our processor. We have not enabled Google signals or linked Google Ads. See Firebase's privacy information and how Google uses information from apps that use its services.
- Apple distributes the App through the App Store under its own privacy policy.
- Our email provider, for receipts and support replies.
We don't sell your data and we don't share it with advertisers. We'll disclose data only if the law requires it.
5. International transfers
Some of the providers above process data outside the UK, including in the United States. Where they do, transfers are covered by the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or an adequacy decision.
6. How long we keep data
We keep your email and subscription record while your subscription is active and for 6 years afterwards, because UK tax law requires us to keep records of sales. Support emails are kept for 2 years. Server logs are deleted within 30 days. App crash reports are kept for 90 days. Google Analytics keeps the individual App events for 2 months and after that only aggregated reports. TelemetryDeck usage statistics and website visit statistics are anonymous and kept only in aggregate.
7. Your rights
Under UK GDPR you have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these, email ro.degtiarev@gmail.com. We'll respond within one month. If you think we've handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk, but we'd appreciate the chance to fix it first.
8. Children
The App is rated 4+ and can be used by anyone. Vinta Pro can only be bought by people aged 18 or over. We don't knowingly collect data from children; if you think we have, contact us and we'll delete it.
9. Changes
We'll update this policy if what we do with data changes. The date at the top shows when it last changed, and we'll email Pro subscribers about any significant change.