Privacy Policy

Effective 22 September 2026

This policy explains how Yeka Studio Ltd (“we”, “us”) uses personal data when you use the Vect app or vect.design. It is written for UK GDPR and EU GDPR.

Who we are

Vect is a product of Yeka Studio Ltd. Contact us at hi@vect.design. To erase an account, use vect.design/delete-account or email delete-account@vect.design.

What we collect

• Account. Email address, display name, and how you signed in (Apple, Google, or email). Authentication is handled by Firebase. If you use Vect+, we also share your account email with RevenueCat so we can manage and support your subscription or hardware promotional membership.
• Your collection. Products you set up (for example OnAir), serial or hardware identifiers, settings you choose, firmware version, and whether they are ready on the network.
• Google Calendar, if you connect it. Vect requests read-only access to your primary Google Calendar. It retrieves the next event and uses its status, start time, and end time so a product can follow your meetings. Vect does not use event titles, guests, locations, or descriptions.
• Wi-Fi on your phone. Network names and passwords you save for setup stay on that phone. We do not upload them to our servers.
• This website. If you visit vect.design we may use Google Analytics to understand traffic (pages viewed, approximate location, device type).

Google Calendar data

Connecting Google Calendar is optional. Vect uses the Google Calendar API permission calendar.readonly to read events from your primary calendar. This permission does not allow Vect to create, change, or delete calendar events.

• Data accessed. Your primary-calendar account email, the permission granted, connection metadata, and the status, start time, and end time of your next calendar event.
• How it is used. Event timing is used only to let a connected Vect product automatically follow your meetings. The start and end time may be sent to that product through the Vect service.
• Storage and protection. We store the account email, granted permission, connection metadata, and encrypted Google OAuth tokens while Calendar remains connected. OAuth tokens are encrypted at rest and access is restricted to the systems and service providers needed to operate this feature. We do not store event titles, guests, locations, or descriptions.
• Sharing. We do not sell Google user data or share it for advertising, credit, data-broker, or unrelated purposes. We disclose it only to the service providers needed to operate Vect, to the connected product at your request, for security, or where the law requires it.
• Retention and deletion. We keep Calendar connection data only while the integration is connected. Disconnecting Google Calendar in the Vect app stops further access and deletes the connection record and stored OAuth tokens from Vect. You can also revoke Vect from your Google Account permissions.

Vect does not use information received from Google Workspace APIs to develop, improve, or train generalized or non-personalized AI or machine-learning models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Why we use it

• Contract. To create your account, set up products, send firmware, and show your collection.
• Consent. Google Calendar, and analytics cookies on this site where they apply.
• Legitimate interests. Keeping accounts and products secure, and diagnosing faults.

Who we share it with

We use processors who only handle data on our instructions: Google Firebase (sign-in), our hosting and database for the Vect service, RevenueCat (subscription and promotional entitlement management for Vect+, including your account email so we can support your membership), Apple and Google for App Store / Play billing when you subscribe, and Google if you connect Calendar or visit this site. We do not sell personal data.

Where it is stored

Some processors are outside the UK and EEA (including the United States). Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

Account and collection data stay while you use Vect. We delete them when you ask us to close the account, or sooner if we no longer need them. Google Calendar connection data and OAuth tokens stay only while Calendar is connected and are deleted when you disconnect it. Saved Wi-Fi can be forgotten on the phone.

Your rights

You can ask for a copy of your data, corrections, erasure, restriction, portability, or to object to certain processing. You can withdraw Calendar consent by disconnecting it. To delete your account, follow vect.design/delete-account or email delete-account@vect.design from the address on the account. You can complain to the ICO in the UK or your local supervisory authority.

Children

Vect is not directed at children under 16.

Changes

If we change this policy we will update this page and the effective date.