Vendi

Privacy Policy

Last updated October 3, 2026

Vendi helps college students find vending machines on campus. This policy explains what information Vendi collects, why, who it's shared with, and the choices you have. Vendi is operated by [business or owner name] ("we", "us"). If you have questions, email support@thevendi.app.

The short version

• Vendi never collects your location, contacts, photos, or advertising ID.
• There are no ads, no analytics or tracking tools, and we never sell or rent your information.
• You can use Vendi without giving us your name or email. An email is only needed if you choose to verify that you're a student.
• You can delete your account and its data at any time from the app.

Information we collect

Information stored on your phone. To work, Vendi saves some things in the app's storage on your phone: the campus you picked, machines you saved or opened, your recent searches, your points and achievements, reports you filed, and leaderboard names you chose to hide. Your recent searches (beyond the 5 described below) and hidden names never leave your phone. This copy is removed when you use "Reset my data" or "Delete my account", or uninstall the app.

Your account. When Vendi is connected to its server, the app creates an account for you automatically, identified only by a random ID. We use it to keep your activity and points safe and to stop abuse. It has no name or email attached unless you add them.

Your student email (optional). If you choose to verify, we collect your university email address and send it a 6-digit code. We use your email to confirm you're a student at your campus, to let you sign in on a new phone, and to send you sign-in codes. We don't send marketing emails.

Your display name (optional). If you choose a display name and verify your student email, your display name and point total appear on your campus leaderboard, where other students can see them. Leave the name empty to stay off the leaderboard.

Your activity. To award points that can't be faked, we store which machines you saved and opened, the achievements you unlocked, your points history, and up to 5 search terms (only as many as the search challenge needs). Other searches stay on your phone.

Reports. When you report whether a machine is working, an item is in stock, or a payment method works, we store the report and when it was made. Other students see reports for 24 hours, without any information about who filed them. Your account is attached to a report for one day so we can limit spam, and reports are deleted after 30 days.

Name reports. If you report another student's display name, we store your report so a person can review the name.

Technical information. Like most online services, our hosting and email providers record technical information such as IP addresses and the time of each request, to run and secure the service.

What we don't collect

Vendi doesn't use GPS or any location services, and doesn't collect your contacts, photos, real name, phone number, payment information, or advertising identifiers. The map centers on your campus, not on you.

Cookies and tracking

The Vendi app doesn't use cookies, advertising identifiers, or tracking technologies, and doesn't track you across other apps or websites. It only stores the information described above in its own storage on your phone. Our website pages for this policy and our terms don't use cookies either.

How we use information

We use the information above only to:

• run Vendi: show machines, keep your saved machines and points, and run challenges, achievements, and the leaderboard;
• verify that you're a student and let you sign in on another phone;
• prevent spam, cheating, and abuse, and review reported display names;
• keep the service secure and fix problems; and
• meet legal obligations.

Who we share information with

We don't sell your information or share it for advertising. We share it only:

• With other students, as described above: your display name and points on your campus leaderboard (if you verified and chose a name), and reports without your identity.
• With service providers that run Vendi for us and may only use the information to provide their service: our database and sign-in provider (Supabase), our email provider (to send sign-in codes), and app distribution through Apple's App Store and Google Play.
• With map providers. The map is provided by Apple Maps on iPhone and Google Maps on Android. When the map loads, your phone requests map images from them, which shares technical information such as your IP address. On Android, Google's map software also collects device information, crash reports, a random identifier for counting app users, and how you move the map, which Google uses to run and improve its services. These providers handle this information under their own privacy policies. Vendi doesn't send them your account information.
• When required by law, or to protect the safety of students or Vendi, or as part of a sale or reorganization of Vendi, in which case this policy continues to apply.

Vendi is not affiliated with or endorsed by any university or vending company unless we say so in the app. We don't share your information with your university.

How long we keep information

• Your account and activity: until you delete your account.
• Reports: the link to your account is removed after one day, and reports are deleted after 30 days.
• Name reports: until they've been reviewed, or until the account they're about is deleted.
• Information on your phone: until you reset, delete your account, or uninstall the app.

We may delete accounts that haven't been used for a long time.

Your choices and rights

• Delete your account in the app: Profile, then Account, then "Delete my account". This deletes your account, email, display name, activity, and points. Reports you filed stay until they expire, with nothing linking them to you. You can also ask us to delete it by email; see how to delete your account.
• Change or remove your display name at any time in Profile, then Account.
• Get a copy of your information, or correct it, by emailing support@thevendi.app.

Depending on where you live, you may have more rights over your information, such as the right to know what we collect, to correct or delete it, or to appeal a decision we make about your request. We won't treat you differently for using them. Email us and we'll respond within the time the law requires.

Children

Vendi is meant for college students and is not directed at children. You must be at least 13 to use Vendi. We don't knowingly collect information from children under 13. If you believe a child under 13 has given us information, email support@thevendi.app and we'll delete it.

Security

Information sent between the app and our servers is encrypted in transit. Sign-in information on your phone is kept in the phone's secure storage, and our database only lets each account read its own information. No system is perfectly secure, but we work to protect your information and will notify you if the law requires it after a breach.

Where information is stored

Vendi is run from the United States, and your information is stored and processed in the United States.

Changes to this policy

If we change this policy, we'll update the date above. If a change is significant, we'll tell you in the app before it takes effect.

Contact us

[business or owner name]
[mailing address]
support@thevendi.app