Privacy Policy

This policy explains what data the Vandal app and the vandalapp.com website collect, why they need it and how you can control it. By using the app, you agree to this policy.

1. Who is responsible for the data

The data controller is the Vandal app team (“we”, “us”). For any questions about your data, write to support@vandalapp.com.

2. What data we collect

Data you provide

• Your nickname and name.
• Your password. It is stored as a hash; we never see the password itself.
• Your email address, if you provided one. It is used only to reset your password.
• Your avatar photo, if you set one.

Content

• The background you chose for your wallpaper.
• Drawings: strokes, stickers and photos you added to them, as well as when and in what order they were made.
• The history of drawings on your wallpaper.

Connections

• Your friends list, requests, blocks and reports.

Data collected automatically

• Device model, system and app version, language and time zone.
• The address used to send notifications to your device.
• IP address, date and time of actions: signing in, sending a drawing, changing the wallpaper.
• App error reports.
• The app installation ID. It is shown in your profile and is needed for payments on the website and for support.

Purchases

• Subscription status and period reported by the app store. We do not receive your bank card details.
• When paying on the website (available in Russia): the ID from the app and the email for the receipt. The payment is processed by the payment service; card details never reach us.

3. What we do not collect

• Your location.
• Contacts from your address book.
• Advertising identifiers. There are no ads in the app.
• The contents of your photo library: we only receive the photos you choose yourself.
• The wallpaper currently on your device: the app sets wallpapers but does not read them.

4. Device permissions

• Notifications. To tell you about new drawings and, on iPhone, to start the wallpaper change.
• Photos and camera. Only when you choose a background, an avatar or a photo for a drawing.
• The Shortcuts app on iPhone. It sets the wallpaper. The shortcut receives only the finished wallpaper image from Vandal.
• Wallpaper on Android. The app sets the wallpaper itself.

You can revoke any permission in your device settings.

5. Why we use data and on what basis

• To run the service. Creating an account, delivering drawings, setting wallpapers, subscriptions. Basis: the terms of use you accepted.
• With your consent. Notifications, access to photos and the camera, email for password reset.
• For safety. Content checks, handling reports, protection against abuse, finding bugs. Basis: our legitimate interest.
• When required by law. Responding to lawful requests from public authorities.

6. Who we share data with

• Your friends. Your name, nickname, avatar, your background and the drawings on it.
• People you sent an invite to. Your name and avatar.
• Service providers. Cloud hosting and file storage, Apple and Google notification services, an automatic image moderation service, an email service for password reset emails, the App Store and Google Play for subscriptions, a payment service for payments on the website.
• Public authorities, if the law requires it.

Service providers process data on our behalf and only for the tasks listed. We do not sell data or share it with advertising networks.

7. International transfers

Servers and service providers may be located outside your country. In such cases we make sure the data is protected at least as well as this policy requires.

8. How long we keep data

• Account data and drawings are kept for as long as you have an account.
• After you delete your account, your profile, drawings and connections are deleted within 30 days.
• Backups and technical logs are erased within 90 days.
• Drawings removed from your wallpaper stay in your history until you delete them or your account.
• Photos that fail the automatic check are deleted immediately.

9. Your rights

• Find out what data about you is stored and get a copy of it.
• Correct your data in your profile settings.
• Delete your account and all data associated with it.
• Restrict processing or object to it.
• Withdraw consent: turn off notifications, revoke access to photos, remove your email from your profile.
• Lodge a complaint with the data protection authority in your country.

We accept requests at support@vandalapp.com and respond within 30 days.

10. Children

You must be at least 13 years old to use Vandal. Users under 18 need the consent of a parent or legal guardian to use the app.

• We do not collect more data about children than the app needs to work, and we do not show ads.
• A parent can request a copy or deletion of a child’s data at support@vandalapp.com.
• If we learn that an account was created by a child under 13, we will delete it.

11. Security

• Data is sent over an encrypted connection.
• Passwords are stored as hashes.
• Access to the servers is restricted.
• Only people you have added as friends can draw on your wallpaper.

No method of protection is completely secure. If a breach affects your data, we will let you know.

12. Deleting your account

You can delete your account in the app: go to “Profile”, then “Delete account”. If you cannot access the app, write to support@vandalapp.com from the email linked to your account.

Your profile, background, drawings, history and friends list are deleted together with the account. Your drawings also disappear from your friends’ wallpapers.

13. Changes to this policy

We may update this policy. We will tell you about significant changes in the app. The date at the top of the page shows when the current version took effect.

14. Contacts

If you have any questions, contact us in any way that suits you.

• By email: support@vandalapp.com
• On the website: https://vandalapp.com
• By mail: 0114, Georgia, Tbilisi, Krtsanisi district, Fonichala settlement 3, building 5

The rules for using the service are set out in the Terms of Use.