Privacy policy
Vindra is a logbook for behavior, sensory input and mood, for parents and caregivers of neurodivergent children. This policy explains which data the app and this website process, in plain language, because there is not much to tell.
What data Vindra processes
Vindra works locally. Everything you enter (your child’s name and date of birth, your settings and every event you log: behavior, sensory input, mood, medication, sleep, positive moments and the types you switch on yourself, such as self-harm, elopement, stimming, eating or toileting) is stored in a database on your own device. We have no access to it and never see it. The same goes for the extra fields you fill in afterwards, such as antecedent, location and what helped, or sensory threshold and response.
Vindra records only what you enter. It does not diagnose, gives no medical advice and does not detect patterns automatically.
Sharing with a partner or caregiver
Vindra can share a child’s timeline with one other device, for example the other parent or a caregiver. If you turn it on:
- An encryption key is created only on your own device and shared through a QR code that you show to the other person. That key never reaches our server.
- Your events are sent encrypted to a server (Supabase) so the other device can fetch them. The server only ever sees unreadable, encrypted data, never the content.
- No account, email address or password is needed.
If you don’t turn on sharing, no data leaves your device at all.
Subscription and payments
The subscription runs through Apple’s App Store and is managed with RevenueCat. We never receive card or payment details: Apple handles those. RevenueCat receives only what it needs to confirm your subscription (an anonymous app user ID and purchase details), never anything you enter in Vindra. RevenueCat also uses purchase data for aggregated statistics, such as how many trials turn into subscriptions.
Camera access
Vindra asks for camera access only to scan the sharing QR code of a partner or caregiver. No photos are taken, stored or sent.
What we do not do
- No analytics, tracking or advertising in the app, apart from RevenueCat’s standard purchase statistics
- No selling or sharing of data with third parties
- No account or sign-in
- No automatic analysis of sensitive events: they only leave your device encrypted, and only if you turn on sharing
This website
vindra.nl is hosted by Netlify, which keeps short-lived technical logs (such as IP addresses) to run and protect the site. The site sets no cookies and loads nothing from other companies.
Managing your data
In Settings you can always export your data (CSV or JSON) or delete a day, a child or everything. Deleting the app removes all local data from that device. Under the GDPR you may also complain to your data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).
Contact
Questions about this policy? Email wmtmbu@proton.me.