Controller: Vonland Country: Spain Contact and privacy requests: hello@vonlandapp.com Last updated: October 3, 2026 Vonland acts as data controller under the GDPR and other applicable laws where it operates.
Account data: reference name, email address, credentials managed by the authentication service, and language or theme preferences. Content: reflections, private notes, optional messages attached to resonances, favorites, suggestions and reports. Journey data: selected mode, stage, chapter, advancement dates, progress and unlocked achievements. Community data: resonances given and received, related entry identifiers and counters. Notification data: permission, user identifier and, for web notifications, the subscription endpoint and technical keys. Technical and usage data: device, operating system, version, usage events and security logs. Advertising data: advertising identifiers where permitted, ad interactions, ad unit and reward-verification data such as transaction identifier, associated user and virtual amount granted.
On compatible native apps, Google AdMob may process data to serve and measure ads according to your permissions and its policy. When you voluntarily complete a rewarded ad, Google sends Vonland a signed confirmation. We use the transaction identifier, associated user identifier, ad unit and reward amount to validate the operation, prevent duplicates or fraud and add 10 resonances to the daily limit. We do not receive payment data through this feature and the reward has no monetary value.
To create and manage your account; provide the Journey and store progress; publish and moderate reflections; manage resonances and limits; store private notes; prevent abuse and fraud; send notifications if authorized; display and measure advertising; analyze use to improve and protect the service; handle rights requests; and comply with legal obligations.
Contract performance: account, Journey, content, resonances and requested features. Legitimate interests: security, fraud prevention, moderation, basic measurement and service improvement, balanced against your rights. Consent: notifications, personalized advertising and non-essential technologies where legally required. You may withdraw it without retroactive effect. Legal obligation: where processing is required by law.
We share only necessary data with hosting, authentication, storage, email, notification, analytics, security and advertising providers. These may include Google AdSense and Google AdMob. We may also disclose data for legal requirements, safety or a reorganization with equivalent safeguards. Vonland does not sell personal data for money, provide it to data brokers or share it for cross-context behavioral advertising without required consent or opt-out choices.
Some providers may process data outside Spain or the European Economic Area. Where required, we use adequacy decisions, Standard Contractual Clauses, transfer assessments or other recognized safeguards. You may request information about applicable safeguards through the contact provided.
Account, content, progress and preference data is retained while the account is active. After you confirm deletion through Settings, we delete the account and associated personal records normally without delay and in all cases within 30 days, except temporary backups or legally required retention. Advertising transaction identifiers and security records may be kept as reasonably necessary to prevent duplicates, investigate fraud or comply with obligations. Aggregated or anonymized data may be retained for statistics.
Depending on where you live, you may request access, correction, deletion, portability, objection or restriction, and withdraw consent. Email hello@vonlandapp.com; we respond within the legal period, normally 30 days. In the EU/EEA you may complain to the AEPD or your local authority. California and other U.S. state residents may exercise applicable rights, including opting out of sale or sharing; we do not sell data or discriminate for exercising rights. LGPD rights apply in Brazil.
The web version may use local storage, cookies, pixels or equivalent technologies to maintain sessions, remember language and theme, secure the service, measure use and manage advertising. Native apps may use advertising identifiers and system permissions. Necessary technologies enable the service; non-essential technologies are used with consent where required. You can control them through your browser, device and app choices.
We send notifications only when you grant permission. To decide whether a reminder is appropriate, we may check whether your Journey is active and whether you already advanced that day. You can revoke permission through your device. Delivery providers receive the minimum technical data needed to send the notification.
We use reasonable technical and organizational measures, including HTTPS transmission, restricted access and signed verification of advertising rewards. No system is completely secure. We do not make solely automated decisions producing legal or similarly significant effects; we may use automated filters against spam, abuse or fraud with review where appropriate.
Vonland is not directed to children under 13 and we do not knowingly collect their data. Anyone aged 13 or older who has not reached their country's digital-consent age requires parental authorization. If we discover data obtained without valid consent, we will delete it. A guardian may request deletion through the contact provided.
We may update this policy when the service or legal obligations change. We will notify you of significant changes through the app or email. For privacy questions or requests: hello@vonlandapp.com.