This notice covers the Vandelay website and mobile app. The app details below describe iOS 1.1.
For support or questions about your data, email contact@vandelayapp.com.
Browsing the website
The website is hosted through Cloudflare. Your browser sends network information, including your IP address and requested page, to deliver the site. Building photographs are also delivered from Contentful’s image service.
We use Simple Analytics and Ahrefs Web Analytics to understand visits and referral sources. Website measurements include page views and device/browser information. We also measure clicks on download links and store links, and whether the download section is viewed. A store-link click is not confirmation that the app was installed. The catalogue search runs in your browser; our custom website events do not include the text you type into that search.
Simple Analytics and Ahrefs describe their web analytics services as cookieless. This does not mean that no network data is processed. Links to the App Store, maps and other external websites take you to services with their own privacy notices.
Location, camera and AR in iOS 1.1
With your permission, the app uses your device’s location and compass heading to show nearby catalogue buildings and calculate their direction and distance. The camera and motion tracking support the AR view. AR displays buildings from the catalogue; it does not identify an arbitrary building from a photograph.
The AR view uses camera frames on the device and does not upload them for building recognition. Map tiles are requested from Stadia Maps for the area you view; these requests disclose the requested map area and network information to the map service. Opening a building address in Google Maps sends that building’s coordinates to Google.
You can change location and camera permissions in iOS Settings. Without location access, you can choose a city and browse the catalogue. AR and nearby distances require the relevant permissions.
App usage and diagnostics
We use PostHog’s EU endpoint to understand app usage and diagnose problems. Data includes screen views, search queries, app lifecycle events, error reports, device/app information and identifiers generated by the analytics service.
Messages and contact forms
If you email us, we receive your email address and the information you include. The app’s contact form sends your email address, optional name and message to Mailchimp to handle your request, and requests that your address be added to a mailing list. We do not send newsletters. You can contact us directly by email and request removal of your contact details.
Catalogue delivery and local storage
Contentful supplies building information, photographs and content pages. The app caches public catalogue responses and images, and stores preferences on your device. Some previously loaded content may remain available without a connection; this is not a guarantee that maps, photographs or the full catalogue are available offline.
How long we keep data
Our retention policy is to delete ordinary support messages and associated contact details within 90 days after a request is resolved. If particular records are necessary to meet a legal obligation or handle a dispute, we retain only the relevant information for as long as that purpose requires.
For usage and diagnostic data, retention depends on the purpose of the measurement, whether an issue remains under investigation and the retention settings of the service holding the data. We retain identifiable information only for as long as it is needed for those purposes. These records are held separately from support messages; the 90-day support period does not describe the analytics services’ retention settings.
Your data and your choices
Depending on the applicable law and the processing involved, you may have rights to access, correct or erase your data, restrict or object to processing, receive a portable copy, and withdraw consent where processing relies on consent. You may also complain to a data protection supervisory authority. Contact us to make a request.
Using the website or app is not, by itself, consent to every use of personal data. Device permissions can be changed in iOS Settings; changing those permissions does not automatically delete information already sent to a service.
Children
If you believe a child has sent us personal information that should be removed, contact us so that we can investigate and respond.