Privacy policy
VajraOS is a private set of apps for a household. This page says what we keep, why, where it goes, and how you take it with you or delete it. We wrote it to be read, not skimmed past.
Who we are
VajraOS is run from Singapore. For anything about your data, write to privacy@vajra.sg; that address reaches the person responsible for data protection.
What we keep
- Your account: your name, email and the Google account you sign in with.
- Your household: its name, who's in it, their roles (owner, member, helper), family roles and nicknames the owner sets, and invites.
- What you put in the apps: jots (text, voice notes, photos and PDFs), what was read from them (text, receipt details with only the card type and last 4 digits), to-dos, events, notes and reminders; Commute places, routes, scheduled rides, trips and trip history; your workspace layout and settings.
- Connections you choose to make: if you connect Google Calendar, a token that lets VajraOS read your calendar (encrypted, never readable by the app in your browser), and a log of when each app used it.
- Notifications: the push address of each device you turn notifications on for.
- Usage counts: how many jots were read, minutes of voice transcribed, day plans built and storage used, per household per month, to keep costs fair. Counts only, not content.
- Last active day: the date anyone in your household last opened VajraOS, once a day. Not what you did or when during the day.
We don't use tracking cookies, advertising, or third-party analytics.
Why we use it
- To run the apps you use: show your jots, plan your day, send your reminders, follow your bus.
- To share what you choose to share, with the people in your household you choose.
- To keep VajraOS secure and working, and to understand its costs.
We use your data only for these purposes, and only with your agreement when you join.
Who can see it
- Your household: only what each person's role allows, and only what's shared with them. Your personal apps are yours; even the owner doesn't see your jots unless you share them.
- Other households: never. Each household is walled off in the database itself.
- Us: the people running VajraOS see households, their size, status and usage counts, not their content. We look at content only if you ask us to help with a problem, or if the law requires it.
Services that process it for us
| Service | What for | Where |
|---|---|---|
| Supabase | Database and file storage | Singapore |
| Vercel | Runs the app | Singapore |
| Clerk | Sign-in with Google, invitation emails | United States |
| Anthropic (Claude) | Reads photos and PDFs you attach; plans your day from your agenda; reads bus-stop signs | United States |
| OpenAI | Turns voice notes into text; makes search find jots by meaning | United States |
| Only if you connect it: reads your calendar | Global | |
| Land Transport Authority, OneMap, data.gov.sg | Bus times, routes, places, air quality (we send stop codes and places, not who you are) | Singapore |
Some of these are outside Singapore. We use providers that protect data to a standard comparable to Singapore's Personal Data Protection Act, and under their business terms Anthropic and OpenAI don't use what we send to train their models.
How long we keep it
- Your data stays while your household uses VajraOS.
- An app you uninstall is kept for 30 days so you can restore it, then deleted.
- A household deleted by its owner is kept for 30 days so it can be undone, then deleted with all its files.
- Commute trip history: 60 days. Connection use log: 30 days.
Your choices
- Download: Household → Privacy and data → Download my data (owners can also download the household).
- Correct: edit or delete anything you wrote; ask the owner to fix your name or role.
- Disconnect: Household → Your connections; it stops straight away.
- Leave or delete your account: Household → Privacy and data. Owners hand the household over or delete it first.
- Ask us: for a copy, a correction, or to withdraw your agreement, write to privacy@vajra.sg. We reply within 30 days.
Children
A household's owner may add their children. The owner is responsible for doing so with a parent's or guardian's agreement, and decides which apps a child can use.
Security
Sign-in is through Google. Data is encrypted in transit and at rest; connection tokens are encrypted again by our server. Every household's data is separated by the database itself, and every change to those rules is tested before it ships. If a breach affected you, we would tell you and the Personal Data Protection Commission as the law requires.
Changes
If we change this policy in a way that matters, we'll tell household owners in the app before it applies. The version and date are at the top.