Privacy Center

1. Introduction

Vony Lending ("Vony," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Vony platform, including our website (lend-with-vony.com), mobile applications (iOS and Android), and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Category	Data Collected	Purpose
Account Information	Full name, email address (via Google OAuth), username	Account creation, authentication, identification
Profile Information	Phone number, location (city/state), profile picture	Profile completion, friend discovery, communication
Loan Information	Loan amount, interest rate, repayment period, payment frequency, loan purpose	Loan agreement creation and management
Payment Information	Payment amounts, dates, method used (Venmo/Zelle/Cash App/PayPal/Cash), payment notes	Payment tracking and record-keeping
Agreement Documents	Digital signatures (screenshot captures), signed dates	Loan agreement execution and documentation
Third-Party Accounts	PayPal email address, Venmo username, verification status	Payment method integration
Social Connections	Friend requests, friend lists, starred/favourite contacts	Facilitating lending between connected users

2.2 Information Collected Automatically

Category	Data Collected	Purpose
Authentication Data	Session tokens, OAuth credentials, login timestamps	Secure access and session management
Activity Data	Loan creation events, payment records, status changes, timestamps	Activity history, audit trail
Device Information	Device type (iOS/Android/Web), operating system	Service optimisation, compatibility
Transaction References	Generated transaction IDs (VNY-[timestamp]-[random])	Payment record identification

2.3 Information from Third Parties

When you sign in with Google, we receive your name and email address from Google's OAuth service. We do not receive your Google password or access your Google account beyond the authentication scope.

3. How We Use Your Information

We use the information we collect to:

Provide the Service: create and manage your account, process loan agreements, record payments, and generate documents
Facilitate Connections: enable friend requests and allow users to find each other by username or name
Generate Documents: create promissory notes, amortization schedules, and loan agreement PDFs on your behalf
Send Notifications: payment reminders, loan status updates, and friend requests
Maintain Security: protect against unauthorised access, fraud, and abuse
Improve the Service: understand how users interact with the platform to make improvements
Comply with Law: respond to legal requests and prevent harm

4. How We Share Your Information

4.1 With Other Users

Certain information is shared with other Vony users as part of the Service's core functionality:

Public profile: your username, full name, and profile picture are visible to other users who search for you or receive a friend request
Loan counterparties: when you create or accept a loan, the other party can see your name, profile, loan terms, payment history, and agreement details for that specific loan
Friends: users on your friend list can see your name, username, and profile picture

4.2 With Third-Party Service Providers

Provider	Data Shared	Purpose
Supabase (database & auth)	All user data described above	Data storage, authentication, file hosting
Google (OAuth)	Authentication tokens	User authentication
PayPal	PayPal email, order amounts	Payment processing
UI Avatars	User's name (for avatar generation)	Default profile picture generation

4.3 We Do Not

Sell your personal information to third parties
Share your data with advertisers or data brokers
Report loan activity to credit bureaus or credit reporting agencies
Use third-party analytics or tracking tools
Share your financial data with any party not directly involved in your loans

5. Data Storage and Security

Your data is stored on Supabase infrastructure, which uses industry-standard security measures including:

Encryption in transit: all data transmitted between your device and our servers is encrypted using TLS
Encryption at rest: stored data is encrypted on Supabase's servers
Row Level Security (RLS): database policies ensure users can only access their own data and data from loans they are party to
OAuth authentication: we never store your Google password; authentication is handled securely through Google's OAuth protocol
Payment credential isolation: PayPal API credentials are stored as encrypted secrets in edge functions, never exposed to client applications

File uploads (profile pictures, agreement screenshots, generated PDFs) are stored in Supabase Storage with user-specific paths to prevent unauthorised access.

6. Data Retention

We retain your data for as long as your account is active. Specifically:

Account data: retained until you request account deletion
Loan agreements and payment records: retained for the duration of the loan and a reasonable period after completion for record-keeping purposes. Note: the other party to a loan retains access to shared loan data even after your account is deleted
Activity logs: retained for up to 3 years for audit and dispute resolution purposes
Cancelled loans: loan status is changed to "cancelled" rather than deleted, preserving the record for both parties

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

Access: request a copy of the personal data we hold about you
Correction: update or correct inaccurate information through your Profile settings
Deletion: request deletion of your account and personal data (subject to retention obligations for shared loan records)
Portability: request your data in a machine-readable format
Restriction: request that we limit processing of your data in certain circumstances
Objection: object to processing of your data for specific purposes
Opt-out of sale: see our Do Not Sell page (though we do not sell personal information)

To exercise any of these rights, contact us at privacy@vony.com or through your account settings.

8. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

The right to know what personal information we collect, use, and disclose
The right to request deletion of your personal information
The right to opt out of the sale or sharing of your personal information (we do not sell or share your data for advertising purposes)
The right to non-discrimination for exercising your privacy rights
The right to correct inaccurate personal information
The right to limit the use of sensitive personal information

To submit a request, email privacy@vony.com with the subject line "CCPA Request."

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal data includes:

Performance of a contract: processing necessary to provide the Service you requested
Legitimate interests: improving our Service, preventing fraud, ensuring security
Consent: where you have given explicit consent to specific processing activities

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

Vony Lending
Email: privacy@vony.com
Web: Contact Us