How Vayu handles your data

Vayu is an AI

Vayu is an AI. She can be wrong, and she is not an emergency or monitoring service. She notices patterns and asks how you are; she doesn't diagnose or treat anything.

Your choices decide what leaves the app

Each use below is a separate choice. Nothing is chosen for you, and you can change any choice at any time in You → Your choices.

• Talk with Vayu

  Your messages, what Vayu remembers about you and the name Vayu calls you are sent to write each reply. That name is the first name in your sign-in profile if it has one (for example when you sign in with Google), otherwise the first part of your e-mail address. Without this choice there are no replies; everything else still works.

  Who else is involved: Anthropic, the AI provider

• Let Vayu read your journal

  Journal entries are sent so Vayu can remember what you wrote. Without it, your journal still works and stays out of her memory.

  Who else is involved: Anthropic, the AI provider

• Let Vayu remember between conversations

  After a conversation ends, it is sent to update what Vayu remembers. Turning this off doesn't erase what she already remembers.

  Who else is involved: Anthropic, the AI provider

• Let Vayu write first

  Check-ins and messages Vayu starts are written with the AI provider. A reminder you asked for still arrives without it, as a fixed message.

  Who else is involved: Anthropic, the AI provider

• Store what your watch sends

  If you connect a watch account, a data bridge sends Vayu the records your watch service provides, and Vayu keeps only part of them: sleep durations and stages, resting heart rate, heart-rate and heart-rate variability readings through the day and night, the watch's stress-level readings, activity levels and activity types, all with their times, and the watch model. When you connect, Vayu also asks the bridge for your recent history.

  Who else is involved: Terra, the data bridge that sends the data to Vayu, and, in the iPhone app, Apple Health on your iPhone

• Use what is stored

  Vayu reads your stored watch data to show your patterns in the app. Without it, the data stays stored but is not read.

  Who else is involved: No one outside the app's own hosting

• Bring watch data into conversations

  Vayu includes measured values from your stored watch data in what is sent to write her messages: for example last night's sleep duration, your overnight heart-rate variability in milliseconds, your usual levels for both, and today's stress-level average and peak, together with short notes such as that last night was short.

  Who else is involved: Anthropic, the AI provider

• Voice input

  If voice input is available and you turn it on, a recording you make with the microphone is sent to be turned into text. Vayu doesn't keep the audio.

  Who else is involved: OpenAI, which turns the recording into text

Where the app runs

Your account and everything Vayu stores are kept in a database run by Supabase, which also handles sign-in. The app itself runs on Cloudflare. If you choose to sign in with Google, Google confirms who you are.

Stopping is not deleting

Turning a choice off stops that use from then on. It can't call back what was already sent to a provider, and it doesn't delete what is stored — deleting is a separate step, below.

Apple Health and your phone's health store

In a browser, Vayu doesn't read your phone's health store. In the iPhone app, if you connect Apple Health and allow it in iOS, Vayu reads your sleep, resting heart rate and heart rate variability (SDNN) from it, recorded by Apple's own devices, only while you use the app, and only if you choose to store watch data. It never writes to Health.

What deleting in the app can't reach

What was already sent to Anthropic or OpenAI, and what Terra holds from your watch, are not deleted by Vayu. Your watch and its own app keep their own data. Backups kept by the hosting provider may hold a copy for a limited time after deletion.

Technical logs

Vayu's technical logs are built to record codes, counts and timings rather than your messages or your journal. A few error lines can still record an error message from the database or the app, which can sometimes quote stored text.

When an administrator can look

Administrators using the app's admin screens normally see only counts and identifiers. In exceptional cases — an incident review, a legal hold or a support request — such an administrator can open one specific stored item for up to 24 hours, and each opening is recorded, without its content. People who run the database with the hosting provider's credentials can technically read everything stored; those reads are not recorded by Vayu.

For adults

Vayu is for adults. You confirm you're 18 or older when you start; Vayu doesn't check documents.

What you can do in the app

• Change any choice: You → Your choices.
• Download everything Vayu has stored for your account: You → Account & privacy → Your data. You'll be asked to confirm it's you.
• Correct what Vayu remembers about you in You, or tell her in a conversation that something is wrong.
• Stop using the current profile, dated events and facts shown in You. This empties the profile and dated events and retracts the facts; it does not erase history, revisions, summaries, conversation notes, topics or goals. These can still provide context, and future memory updates are not turned off. Account deletion is a separate request for data in Vayu's database, with the limits below.
• Delete active or past goal records in You → Your goals. Active goals are sent to Anthropic as context for replies when conversation AI is enabled. Deleting a goal record does not remove mentions in chat or memory, provider-held copies or a reply already being prepared.
• Delete a journal entry: the entry, its undo copies and the notes Vayu can trace to it are removed.
• Clear the chat, with or without letting Vayu keep a memory of it.
• Stop storing watch data, stop using what is stored, or delete Vayu's copies of it.
• Delete your account: You → Account & privacy. You get a receipt code to check the result later, even when you can no longer sign in.

The two actions that follow — deleting the account and checking a deletion's status — are taken inside the app.