Privacy Policy
Last updated: August 2026
This policy explains what Vuable collects, why, and what you can do about it. It is written to be read rather than skimmed past.
The short version. We store your name and email so you can have an account, and the analytics from the social accounts you choose to connect. We use that data to show you your own numbers and to generate the insights you ask for. We record when you open the app and roughly where from, so we know the service is working. We do not sell your data, we do not advertise, and there are no tracking or advertising cookies anywhere in this product.
Who we are
Vuable is operated from the United Kingdom and is the data controller for the information described here. For anything in this policy, including requests about your data, contact hello@vuable.app.
What we collect
Information you give us
- Account details — your first name, email address and a password. Passwords are hashed by our authentication provider and are never visible to us.
- Content you create in the app — pipeline items, notes, boards, images you upload, category names, and messages you send to the AI assistant.
Information from platforms you connect
If you connect a social account, we receive data about your own account through our integration partner. Depending on the platform this includes:
- Your profile details and follower counts
- Your posts, including captions, links and publication dates
- Performance metrics such as views, likes, comments and shares, plus reach, saves and average watch time on Instagram
- Aggregated audience information — age and gender bands, countries, and cities on Instagram
- On Instagram only, the text of comments left on your posts. TikTok does not make comment text available to us at all.
We never receive your social account password, and we cannot post on your behalf. You can disconnect an account at any time.
Information collected automatically
We store a small amount of data in your browser to keep you signed in and to remember preferences such as light or dark mode.
Each time you open Vuable we record one entry containing the date and time, the country and region our host resolved your connection to, and whether you were on a phone or a computer. We use this to see whether the product is working and being used.
We do not store your IP address, we do not use cookies for this, and there is no third-party analytics script anywhere in Vuable. The location is worked out by our hosting provider before the request reaches us, and only the country and region are kept.
Comments and other people's data
On Instagram, we receive comments other people have left on your posts. Those commenters are not our users, and we handle their data carefully: it is used only to produce insights for you, it is never sold or shared, and it is deleted when you delete your account or disconnect the platform.
Why we use it, and our lawful basis
| What for | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Showing your analytics and generating insights | Performance of a contract |
| Sending service emails, such as confirming your address or resetting a password | Performance of a contract |
| Keeping the service secure and diagnosing faults | Legitimate interests |
| Recording app opens and approximate location to understand usage | Legitimate interests |
| Connecting a social account | Your consent, given at the point you connect it |
Artificial intelligence
Some features — the weekly review, the assistant, and comment analysis — send a summary of your data to a third-party AI provider to generate a response. This includes your metrics and samples of your comments. It does not include your password or payment details.
Your data is not used to train anyone's AI models. If you would rather it were not processed this way, do not use those features; the rest of the product works without them.
Who we share it with
We do not sell your data. We share it only with the service providers needed to run Vuable, each of which is bound to protect it:
| Provider | What they do |
|---|---|
| Supabase | Database, sign-in and file storage |
| Cloudflare | Hosting and content delivery |
| InsightIQ | Connecting your social accounts and retrieving their data |
| Anthropic | Generating AI reviews and assistant replies |
| Resend | Sending service emails |
We may also disclose information if the law requires it.
Where your data is stored
Your account data and analytics are stored in our database provider's European infrastructure. Some of our providers, including our AI provider, are based in the United States, so some data is transferred outside the UK. Those transfers are covered by the safeguards required under UK data protection law, including standard contractual clauses.
How long we keep it
- While your account is open — we keep your data so the product works. Historical analytics are the point of it.
- If you disconnect a platform — the data already imported stays until you delete it, so your history isn't lost by accident. Tell us if you would rather it went immediately.
- If you delete your account — everything is deleted within 30 days, including uploaded images and imported comments.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data
- correct anything inaccurate
- delete your data
- restrict or object to how we use it
- send your data to another service in a portable format
- withdraw consent for a connected account, at any time
Email hello@vuable.app and we will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Data is encrypted in transit. Each account's data is isolated at the database level, so one user cannot read another's. Uploaded images are held in private storage and served through expiring links. API keys are held server-side and are never sent to your browser.
No system is perfectly secure, and we won't pretend otherwise. If we ever suffer a breach affecting your data, we will tell you and the ICO as required.
Children
Vuable is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Beta
Vuable is in beta. Features change, and occasionally break. We may contact you about problems or ask for feedback — you can opt out of that at any time by replying and saying so.
Changes to this policy
If we change this policy we will update the date at the top, and for anything significant we will email you rather than hoping you notice.