Privacy Policy

Who is responsible

Appaya Ltd, company number 16078943, operates vyke.ai and is responsible for the personal data described here. Its registered office is Flat 15 Alina Court, 58 Lomond Grove, London, England, SE5 7LE. For privacy questions or rights requests, contact privacy@vyke.ai.

What we collect

• Email address — required to sign in via magic link.
• Name and username — chosen by you during sign-up.
• Posts, comments, and reactions — content you create in the community.
• Account, session, security, and consent records needed to run and protect the service.

Why we use it

• Contractual necessity: to provide the account and community service you ask us to provide.
• Legitimate interests: to prevent abuse and secure accounts.
• Legal obligation: to meet applicable legal requirements.
• Consent: to send optional digest or newsletter email and measure site use with analytics.

We do not sell personal data or use advertising networks. Service providers may process data for email delivery, hosting and database operations, media delivery, and optional consented analytics. Current providers include Railway for app hosting and database operations, Resend for email, and Cloudflare for media services; provider details can change as the service changes.

Your rights

You can exercise the following rights from your account settings:

• Access and correction — ask us for a copy or correction of personal data.
• Data export and portability — download a JSON file of everything we hold about you.
• Account deletion — request permanent deletion of your account and all associated data. Deletion is scheduled 30 days after the request and can be cancelled within that window.
• Session management — view and revoke all active login sessions.
• Restriction or objection — ask us to limit or stop a particular use of your data.
• Consent withdrawal — withdraw analytics consent by rejecting cookies or clearing the consent choice.

You may also complain to the UK Information Commissioner's Office (ICO). We may need to verify your identity before acting on a request.

Retention and cookies

We keep account and community data while your account is active. A deletion request is scheduled for 30 days, during which you can cancel it; after deletion we remove account data except where a legal or security retention need applies. Newsletter information stays until you unsubscribe, and authentication codes expire quickly.

Essential access and refresh cookies keep you signed in. We also store your analytics consent choice in a cookie and local storage; theme and onboarding preferences use local storage. If analytics is configured, Plausible loads only after you accept. A currency preference cookie is used only when pricing is enabled.

International transfers

Some providers may process data outside the UK or EEA. The operator must confirm the applicable transfer mechanism and safeguards with qualified counsel before launch. Contact us for current provider and transfer information.