Vent — Privacy Policy
Last updated: 2026-05-31
This is the privacy policy for Vent ("the App"), a private AI journaling app from Telosum Studios. It explains what data we collect, how we use it, who we share it with (spoiler: almost nobody), and the controls you have over your own data.
We're a small team. We wrote this in plain English on purpose. If anything here is unclear, email privacy@telosumstudios.com and we'll either explain it better or change it.
What we collect
When you use Vent we store the following on our servers:
- Account basics. Email address, the encrypted password you chose, the timestamp you signed up, and a randomly generated user ID. Stored by our authentication provider (Supabase Auth).
- Display name (optional). What you'd like Vent to call you in the diary and in the app. Editable in Settings; safe to leave blank — Vent works fine without it.
- Your vents. The audio you record and the text we transcribe from it. Audio files live in a private bucket; only signed URLs we mint for your authenticated session can reach them.
- Derived diary content. The daily diaries, weekly recaps, and monthly chapters our AI generates from your vents.
- Per-entry metadata. A small structured summary the AI extracts from each vent (moods, the people you mentioned, topics, a single "key memory" line). This metadata is what powers the diary's structured hints — it never becomes a label on you.
- Embeddings. A numeric fingerprint of each vent that powers search. Embeddings can't be reversed to reveal the original text, but we treat them with the same care as the vent itself.
- Settings. Your timezone, voice language, diary style (you/I), tone preset, mood-tracking toggle, and notification preferences.
- Session metadata. A device identifier, user-agent string, and IP address attached to each sign-in. Stored by Supabase Auth for security auditing (detecting credential stuffing, suspicious sign-ins, session hijacking). Not used for advertising, behavioural profiling, or cross-app tracking.
- Usage records. Each AI call we make for you (model used, token counts, estimated cost). Used to enforce free-tier limits and for internal cost auditing. No content from your vents is stored in these records.
We do not collect: location, contacts, photos, videos, calendar, SMS, screen-time analytics, behavioural profiles, advertising identifiers, or anything else not listed above.
Who we share it with
Three external services receive parts of your data so the app can work:
- Supabase hosts the database, authentication, and audio file storage. Everything in "what we collect" above lives on Supabase's infrastructure. Their privacy policy: https://supabase.com/privacy.
- OpenAI receives your audio recordings (for transcription) and your vent text (to generate diary entries, recaps, chapters, structured metadata, and embeddings). OpenAI has agreed in their API terms not to train models on data we send through the API. Their policy: https://openai.com/policies/api-data-usage-policies/.
- Apple / Google see whatever the underlying mobile operating system receives — push notification routing if enabled, App Store / Play Store purchase records once subscriptions exist.
We do not sell your data, share it with advertisers, license it to third parties, or use it to train AI models. There are no ads in Vent.
Security
Every connection between the app and our servers, and between our servers and OpenAI / Supabase, uses TLS encryption. Stored data is encrypted at rest by Supabase using standard cloud-provider disk encryption.
How we use it
Your data is used for one thing: to power Vent for you. Specifically:
- Stored vents are turned into diaries, recaps, and chapters by the AI.
- Embeddings power search across your own journal.
- Metadata powers the daily-diary prompt.
- Usage records enforce free-tier limits and let us see whether the app is sustainable at scale.
We may look at aggregate, non-identifying statistics (e.g. "how many total entries were created this week", "what's the average diary length") to improve the product. We will never read individual vents unless you give us explicit permission (e.g. as part of a bug report).
Payments (when subscriptions exist)
Vent does not currently charge anything. When paid subscriptions are introduced, payment processing will go through Apple's App Store and Google Play Store. We don't receive your card number or billing details from them — only an opaque transaction ID, the plan you subscribed to, and the renewal status.
If you ever subscribed to a paid plan, the underlying transaction records (date, amount, plan name) may be retained for as long as tax and accounting laws require (typically seven years in the jurisdictions where we operate). These records do not contain your journal content, only the existence and amount of the payment.
Your controls
- Export your data. Settings → "Export your data" downloads a JSON archive of every row of yours, including signed download links for your audio.
- Delete your account. Settings → "Delete account & data" permanently removes everything keyed to you: vents, diaries, recaps, chapters, audio files, settings, the authentication row, and the display name. This is irreversible. Encrypted database backups may retain a copy of your data for up to 30 days as part of Supabase's standard backup rotation; backups overwrite themselves and we don't restore deleted accounts from them.
- Change what you've written. Edit or delete any vent, edit any generated diary. Edits propagate to the next regeneration.
- Request deletion without the app. If you no longer have the app installed, email support@telosumstudios.com from the address on the account, or use the web form at https://telosumstudios.com/vent/delete-account. We process such requests within 30 days (almost always sooner).
Children
Vent is not designed for users under 18 and we do not knowingly collect data from anyone under 18. If you believe a minor has signed up, email privacy@telosumstudios.com and we'll delete the account.
Not a therapy or crisis service
Vent is a journaling app. We organize your recordings into narratives — that's the entire product. We do not diagnose, monitor, treat, or assess any condition. We do not provide therapy, counseling, or crisis support.
If something in your writing concerns you, please reach out to a real human — a friend, a clinician, or a crisis helpline. Public resources exist worldwide at https://findahelpline.com; in the US you can call or text 988; in the UK / Ireland you can call Samaritans on 116 123.
Changes to this policy
If we change anything material here (what we collect, who it goes to, how it's used), we'll update the "Last updated" date at the top and surface a notice the next time you open the app.