Privacy policy

Vinegard is run by Indepth Solutions EOOD, a company registered in Bulgaria. We are the data controller for the personal data described on this page. You can reach us at asen.angelov@indepthwebsolutions.com, or through the support page.

Vinegard is a private app for the members of one teaching group. Nothing in it is visible to the public: every page but this one, the terms, the support page and the sign-in screens needs an account, and accounts exist by invitation or by registering with the group.

Your account. Your email address, a display name of your choosing, an optional profile picture, and your password, which we hold only as a hash that cannot be turned back into the password. We use these to sign you in, to show who wrote a public note, and to send you the emails described below. Your role (member, contributor or admin), the date you joined, and whether an admin has deactivated your account are kept with them.

Your notes. A note you write on a recording, the moment in the recording it is anchored to, whether you marked it public or private, your replies to other members’ public notes, and the reaction you leave on a public note. Public notes are shown to every member under the recording with your display name. Private notes are shown to you alone: no admin screen shows them, and no other member can see them.

Your listening. Where you are in each recording, so playback resumes there on any device; your preferred playback speed; how much of each recording you have actually listened to, so a teaching you have heard most of is marked as completed; and whether you have been through the new-member tour.

Notifications. The in-app notifications addressed to you (a new recording, a reply or reaction to your note, an announcement from an admin) and whether you have read each one.

Messages you send us. When you report a bug or send feedback from the app, the title and description you wrote, your display name and your email address are sent to us by email so we can reply. Nothing is stored in the app itself: the message is the record.

Technical records. Our server keeps logs of requests, each stamped with a correlation id, and a refused request is logged with the account that made it and what it asked for. We count sign-in and password-reset attempts per network address to slow down guessing; those counts live in memory and are not written anywhere.

We collect nothing else. There is no location, no contacts, no microphone or camera access, no advertising identifier, and no tracking across other apps or sites.

We use PostHog, hosted in the European Union, to understand how the app is used: whether a teaching is listened to and finished, which tabs are opened, how often notes are written, when playback speed is changed, and which pages are visited. Each event names you only by the opaque id of your account, with your role as the one property about you. Your email address, your display name, the text of your notes and your network address are never sent. The app version and whether you use it in a browser, as an installed web app or from an app store are sent with every event.

Autocapture and session recording are switched off in the code and in the project settings, so PostHog never sees what you click or type, and nothing is loaded from PostHog at runtime. PostHog keeps events for one year.

You can turn analytics off for your account under Profile → Settings. Nothing in the app depends on it being on.

We do not sell your data, and we do not share it with anyone for their own purposes. The services below process data on our behalf, under our instructions, to make the product work:

• Cloudflare (R2 object storage) holds the audio recordings the group uploads, the playback version made from each, series artwork, and profile pictures.
• Deepgram transcribes the recordings. It receives the audio of each teaching. It does not receive anything about you.
• MiniMax drafts the summary and description of each teaching from its transcript, which is sent to it in full. MiniMax is outside the European Union. It does not receive anything about you.
• OpenAI turns text into search vectors: transcript passages, chapter text, published summaries, and the text of notes, private notes included. The words alone are sent: no name, no account id, no recording title. The vectors are stored with us and are what future search and cross-referencing will read.
• Resend delivers our email: invitations, password-reset links, and your bug reports and feedback to us. It receives the addresses and the message contents.
• PostHog (EU) receives the analytics events described above.
• Contabo provides the server the app, its worker and its database run on. Grafana Labs, UptimeRobot and Healthchecks.io monitor that server; they see whether it is up and how hard it is working, never anything about a member.

The Bible text quoted beside a teaching comes from the Free Use Bible API. A verse is fetched by reference and kept with us; nothing about you is sent.

• Your account, notes, listening records and notifications are kept for as long as your account exists.
• A sign-in session lasts 30 days from its last use, and ends at once when you sign out or an admin deactivates your account.
• An invitation or password-reset link expires after seven days, or when it is used or replaced.
• Server logs are rotated and kept for a short time on the server. Database backups are taken nightly, and an erased record is gone from them within a few days.
• Analytics events are kept by PostHog for one year.
• The group’s recordings and their transcripts are the group’s library and are kept indefinitely. They are not your personal data unless you are the speaker.

You can delete your account yourself under Profile → Settings, or ask us to by writing to asen.angelov@indepthwebsolutions.com from the address on the account. Deletion is permanent.

When an account is deleted:

• Your email address, display name, password hash, profile picture, role, playback positions, listening records, reactions, notifications, sessions and settings are erased.
• Your private notes are erased. Your public notes and replies are erased too; where another member replied to one of your notes, a placeholder stays in its place so their reply keeps its context, and the placeholder names nobody.
• Search vectors made from your notes are erased with the notes. OpenAI, which produced them, may hold the text it was sent for up to 30 days to check for abuse and does not use it to train its models.
• A removed profile picture’s file is unlinked from every account and can no longer be reached, but the storage bucket keeps the file itself: the store is built never to delete, because the recordings in it must survive every re-processing.
• Emails you sent us stay in our mailbox unless you ask us to remove them.

An admin can also deactivate an account without deleting it. A deactivated account cannot sign in, and what it wrote stays until the account is deleted.

Under the General Data Protection Regulation you may ask us for a copy of your personal data, to correct it, to erase it, to restrict or object to how we use it, and to receive it in a portable form. Your name and picture you can change yourself in your profile; everything else, write to asen.angelov@indepthwebsolutions.com and we will answer within a month.

If you believe we have handled your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection, or to the supervisory authority where you live.

Vinegard is for members aged 16 and over. We do not knowingly hold an account for anyone younger; if you believe we do, write to asen.angelov@indepthwebsolutions.com and we will delete it.

When this page changes, the date at the top changes with it. A change that affects what we collect or who receives it is announced in the app before it takes effect. The terms of use describe the rules for using the product.