Privacy policy

• Your saves, notes and chats are private to your account. There is no public feed.
• We do not sell your data, show ads, or track you across other apps and websites.
• AI (OpenAI's GPT-6 Luna) reads what you save and ask, so it can write notes and answers. AI can be wrong.
• Our servers are outside India. Service providers process data only to run ReelVault for you.
• You can export everything, and delete a save or your whole account, from the app at any time.
• ReelVault is for people aged 18 and over.

ReelVault is built and run by Kaushik Maddula, an independent developer in India (“we”, “us”). We decide how your data is used, so under India's Digital Personal Data Protection Act, 2023 (DPDP) we are the data fiduciary, and under the EU and UK GDPR we are the controller. Contact us at kaushikmaddula04@gmail.com.

Your account

• Your email address, a display name and, if you add one, a phone number.
• Your password, which our sign-in provider stores only as a secure hash. We never see it.
• If you sign in with Google or Apple, the name and email address they share with us. Apple may give us a private relay address instead of your real one.
• Your app language, your plan and your monthly usage limits.

What you save from Instagram

• The Instagram link you share or paste.
• Public details we fetch for that link: caption, creator name and handle, transcript when Instagram provides one, and the images of photo and carousel posts.
• A copy of the cover image, kept in our private storage so your library still shows it after Instagram's own image links expire. We do not download or keep the original videos.
• What ReelVault works out from it: AI notes, key facts, the kind of save (recipe, place, workout and so on), and any corrections you make.

What you create or add

• Your notes, collections, goals and study reviews.
• Your chats with ReelVault: your questions, the answers and any thumbs up or down and comments you leave on an answer.
• Voice questions. The recording is kept in your account as an audio file so it can be turned into text.
• Files you upload: PDFs, screenshots and photos, documents, audio files and your CV. Plus any text or web links you paste for ReelVault to read.
• Things you plan and track: workouts and routines, trips, places and stops, meal plans, recipes and cooking sessions, grocery lists, shopping and price watches, saved jobs and applications, events, and tasks and reminders.
• Your time zone, so reminders arrive at the right time.

People you share with

• If you create or join a household (for shared meal plans and grocery lists) or invite people to a trip, we store who is a member and what role they have. Members can see what is shared in that space.

Your phone and how you use ReelVault

• A push notification token, if you allow notifications.
• Counts of what you use, such as saves processed and AI requests, so we can apply monthly limits and keep costs under control. These are counts, not the content.
• Processing status and error records, so we can show progress and fix problems.
• Short-lived technical logs kept by our hosting and sign-in providers: IP address, time, request and device type. We use them only for security and fixing faults.
• Home-screen widget data (recent saves, today's tasks, groceries) and your app settings, stored on your phone only.

What we don't collect

• Your Instagram password. We never ask for it and never log in to Instagram as you.
• Your precise location, contacts, calendar, advertising ID or payment details.
• Anything for advertising. ReelVault has no ads and no third-party analytics or tracking tools.

The app asks for the camera, photos, microphone and notifications only when you use a feature that needs them, and you can say no.

• To run ReelVault for you: save and process your links, write notes, search and answer questions from your library, run your plans, lists and reminders, and keep your account signed in.
• To keep it safe and working: prevent abuse, apply fair-use limits, find and fix bugs, and protect your account.
• To support you: answer the messages you send us.
• To meet legal duties, when the law requires it.

We process your data because you asked us to provide the service, on the basis of your consent when you create an account and turn features on. For people covered by the GDPR, our legal bases are: performing our contract with you; your consent for optional features such as Discovery and notifications; our legitimate interest in keeping the service secure and working; and legal obligations.

We do not sell your data, rent it, use it for advertising, or build profiles of you for anyone else.

• ReelVault uses OpenAI's GPT-6 Luna model to write notes about what you save, read screenshots, Instagram post images and PDFs, and answer your chat questions. OpenAI's transcription model turns audio and voice questions into text. Exa reads public web pages you save and runs web searches you ask for.
• To do that, the AI receives the content involved, for example a caption and transcript, or your question with the saved items it draws on. It does not receive your password or payment details.
• AI notes summarise what creators said. They are not checked facts. AI can misread, leave things out or be confidently wrong, so check anything important.
• Nothing ReelVault writes is medical, fitness, nutrition, financial or legal advice. Talk to a qualified professional before acting on it.
• Ask AI and Plan use your question and conversation, and their answers are labelled as AI rather than answers from your Reels. Explicit Discovery comparisons use eligible shared Reel content.
• We do not use your content to train AI models, and OpenAI does not use API data to train its models. OpenAI may keep requests for up to 30 days to detect abuse, under its own API terms.

These companies process data for us, only to provide ReelVault, under their own security and privacy terms. We don't let them use it for their own advertising.

• Supabase

  Database, sign-in and file storage

  Everything in your account: profile, saves, notes, chats, files and cover copies.

• Vercel

  Hosts the ReelVault server and website

  Every request from the app passes through it, with your IP address and device type in short-lived logs.

• Scrape Creators

  Reads public Instagram details

  Only the Instagram link you saved. Never your name, email or account.

• OpenAI (API)

  The AI that writes notes and answers chat

  Captions, transcripts, pasted text, screenshots, Instagram post images, PDFs, CVs, audio and voice recordings of what you save; your chat questions and the saved items they draw on.

• Exa (Exa Labs)

  Reads public web pages you save and runs web searches you ask for

  The public web link you save, or the search words of a web question. Never your account details.

• Expo, Apple and Google push services

  Deliver notifications and app updates

  Your phone's push token and short, generic alerts such as “You have a task due.” Never your notes or saves.

• Wikimedia (Wikidata, Wikipedia, Commons)

  Looks up movie and show details and posters

  Only the title being looked up. No account or user id is sent. Posters may load straight from Wikimedia, which then sees your IP address like any website.

• Google Maps Platform or Mapbox

  Place search in Trips and Events, when that feature is switched on

  Only the place name you type.

ReelVault has code for an Instagram direct-message connection through Meta. It is not switched on. If we turn it on, we will add Meta to this list and ask for your permission in the app first.

If we add or change a provider, we will update this page before it receives your data.

• People you invite: household and trip members see what is shared in that space.
• Discovery, only if you allow it: we never sell or rent your vault contents. Public Reels you save and the notes ReelVault writes from them may appear in Discovery only after you choose Allow. Not now keeps contribution off. Discovery never identifies who saved a Reel. Your name, number, account, personal notes, chats, goals, and saving history are not shared. Turn Discovery off in mobile Settings to remove your contribution links.
• The law: if a valid legal order requires it, we may have to disclose data. We will tell you unless the law forbids it.
• A change of owner: if ReelVault is ever transferred to someone else, your data would go with it under this policy, and we would tell you first.

ReelVault's servers and providers are outside India, for example in the United States, Europe or Singapore, and OpenAI processes AI requests on its own servers, for example in the United States. Your data is therefore transferred out of India and out of your own country. India's DPDP Act allows this except to countries the Government restricts. For people in the EU and UK, our providers rely on safeguards such as the European Commission's standard contractual clauses.

• We keep your data while your account exists, so your library is there when you come back.
• When you delete a save, its notes, transcript, facts and cover copy are removed right away. Deleting a file, CV, note, chat or list removes it right away too.
• When you delete your account (Settings, then Delete account), we immediately delete your profile, every save, note, chat, file, cover copy, CV, list, plan, reminder, push token and household or trip membership. See Delete your account.
• Discovery: account deletion removes your contribution links. A shared Discovery entry stays only if another person who allowed sharing also saved it, and it never points back to you.
• Routine backups made by our database provider expire on their own within 30 days. Technical logs expire within 30 days.
• Deleting removes the records in your account, not copies another user has already saved from Discovery.

Data travels over encrypted connections (HTTPS). Every row of your data is tied to your account and the database refuses requests for anyone else's. Files and cover copies sit in private storage and are shown through links that expire after minutes. Secret keys stay on the server, never in the app. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Wherever you live, you can:

• Access and take your data: export a full copy from Backup & restore in the app, or ask us for a summary of what we hold and who we shared it with.
• Correct it: edit your name, notes and saves in the app, or ask us to fix anything else.
• Delete it: one save at a time, or your whole account.
• Withdraw consent: turn off Discovery, notifications, the microphone or photo access at any time, or delete your account. Withdrawing doesn't undo processing already done.
• Raise a grievance: email us. We will reply within 30 days at most.

In India (DPDP Act): you also have the right to nominate someone to use these rights for you if you die or become unable to. If you are not satisfied with our answer to a grievance, you can complain to the Data Protection Board of India.

In the EU, UK and similar places (GDPR): you can also object to processing based on our legitimate interests, ask us to restrict processing, and receive your data in a portable format (the app's JSON export). You can complain to your local data protection authority.

To use any right, email kaushikmaddula04@gmail.com from the address on your account. We may ask you to confirm it's you before acting.

ReelVault is for people aged 18 and over. India's data protection law treats anyone under 18 as a child and requires verified parental consent, which we don't collect, so we don't offer accounts to children anywhere. If you think a child has an account, email us and we will delete it.

ReelVault is an independent app. It is not affiliated with, endorsed by or sponsored by Instagram or Meta Platforms. Instagram is a trademark of Meta Platforms, Inc. Reels and posts belong to their creators.

The content-diet check-in is an observation about when you save, shown rarely and dismissible forever. It is not medical or mental-health advice. If you want to talk to someone, Tele-MANAS 14416 is a free, confidential, 24/7 helpline in India.

If we change this policy, we will update the effective date above. If a change is significant, for example a new kind of data or a new provider, we will tell you in the app before it applies.

For privacy questions, requests and complaints, contact Kaushik Maddula, who also acts as grievance officer: kaushikmaddula04@gmail.com. You can also see Support.