Privacy policy

Last updated: 2026-10-19 · Controller: Abdellatif El harouch (Armasync Technology) · contact@vykode.com

What we collect

• Device: an app-specific identifier of your phone (we store only its SHA-256 hash), app version, SIM country code (e.g. MA) and your IP address, against abuse and to limit the number of accounts per device. We never request your precise location.
• Account: name, email and a hashed password.
• Usage: how many projects you built or published (a hash of the project name, never its content), to run the free plan.
• Payments: handled by Creem (merchant of record). We receive the order id, amount and status. We never see card numbers.
• VyKode AI: your messages to the agent and the files it reads are sent to the AI model through OpenRouter (openrouter.ai), with a key that belongs to your account, under their terms. We do not store your conversations.
• Building and publishing: to build your app, the project's code is uploaded to VyKode's cloud build service (run by the hosting providers we work with); websites you publish are public. They are deleted when you delete your account.
• Reports: the text of an AI answer you report.
• Sign in with Google or GitHub: if you choose it, we receive from Google or GitHub only your name, your verified email and your account id there, to link it to your VyKode account. We never receive your password or any other data you have with them.
• VyKode Web (the website): your projects and chats are stored in your browser (IndexedDB), not on our server, with a browser identifier that limits the number of accounts; AI requests go from your browser directly to OpenRouter.

What stays on your phone

Hosting and FTP passwords and your project files are stored encrypted on your device and sent only to the service they belong to.

How we use it

To run your account, the free plan and the subscription, to prevent abuse and to handle reports. We do not sell data. We do not show ads or track you across apps.

On the Free plan, the code of the apps you build is public (anyone can see it); your chats, attachments and account data are never published. On Pro and Max the code stays private.

Retention and deletion

Until you delete your account in the app (Settings → Account & subscription → Delete account) or on the account deletion page. We delete your name, email, password, subscriptions and reports, your VyKode AI key and your projects' files in the build service. What remains has no name or email: an anonymous device hash with the count of its free projects and of the accounts made on it (so the free plan does not restart) and payment amounts for our accounts. Payment providers keep their own records as required by law.

Security

Connections use HTTPS, passwords are hashed, and payment secret keys stay on the server only.

Children

VyKode is not directed to children under 13.

Contact

Abdellatif El harouch (Armasync Technology) · contact@vykode.com