Privacy Policy
Developer: VNCNT Labs · Last updated: October 18, 2026 · Contact: [email protected]
This policy covers our Android apps Expiry Vault: Document Alerts (com.vncntlabs.expiryvault), HouseTimer: Home Maintenance (com.vncntlabs.homeupkeep) and Orchestrator Companion (com.vncntlabs.orchestratorcompanion). All three apps are built so your information stays on your device. We run no servers that receive your data, require no account, and use no analytics or crash-reporting tools. No app data is ever sent to or stored on our servers.
This policy also covers our data tools on Apify Store (section 4). Those tools run on the Apify platform under your own Apify account, and some send the keywords you enter to a keyword-data provider. Section 4 explains exactly what each tool does with your data.
Our browser extensions have their own privacy policies, summarised in section 5.
1. Expiry Vault: Document Alerts
Information you enter
Item names, expiry or due dates, reference numbers, notes, categories, reminder settings and optional photos are stored only on your device, in the app's private storage. We never receive them. Photos are copied from your camera or gallery into the app's private folder only when you choose to add one.
Notifications
Reminders are scheduled locally on your device. Nothing is sent to us or to any push service.
Android system backup
The app allows Android's built-in backup. If backup is turned on in your device settings, Android may back up the app's items, settings and photos, encrypted, to your own Google account, and restore them when you set up a new phone. This backup is operated by Google under your account and Google's privacy policy. We cannot access it. You can turn it off in Android Settings > System > Backup (wording varies by device).
Back up to file and exports
When you choose "Back up to file" (free) or "Export PDF/CSV" (Pro), the app creates a file on your device and opens the Android share sheet. You decide where it goes, for example your own cloud drive or email. We never receive these files. "Restore from file" reads a file you pick, on your device.
Advertising (free version)
The free version shows ads served by Google AdMob. AdMob may collect and process your device's advertising ID, IP address (which can show your approximate location), and information about your device and how you interact with ads. Google uses this to show, measure and limit ads and to prevent fraud, under Google's policies: policies.google.com/technologies/ads. If you are in the European Economic Area (EEA), the UK or Switzerland, the app asks for your consent through Google's consent prompt before showing ads, and you can change your choice at any time in the app under Settings > Privacy options. You can reset or delete your advertising ID, or opt out of ad personalisation, in Android Settings > Privacy > Ads. Ads are removed when you buy Pro. The contents of your vault are never shared with AdMob.
Purchases
The one-time "Pro" unlock is processed by Google Play Billing. We do not receive your payment details. The app only learns whether Pro has been purchased so it can unlock features. See Google's privacy policy.
App lock
The biometric app lock (Pro) uses Android's system prompt. Your fingerprint or face data never leaves the device's secure hardware, and the app cannot access it.
2. HouseTimer: Home Maintenance
Information you enter
Task names, rooms, repeat intervals, done dates, notes, costs, part or filter sizes and optional photos are stored only on your device, in the app's private storage. We never receive them. Photos (Pro) are taken with your camera and saved into the app's private folder only when you choose to add one.
Notifications
The daily summary, due-day alerts and overdue nudges are scheduled locally on your device. The "Mark done" and "Snooze" buttons on a notification update the data on your device only. Nothing is sent to us or to any push service.
Android system backup
The app allows Android's built-in backup. If backup is turned on in your device settings, Android may back up the app's tasks, history, settings and photos, encrypted, to your own Google account, and restore them when you set up a new phone. This backup is operated by Google under your account and Google's privacy policy. We cannot access it. You can turn it off in Android Settings > System > Backup (wording varies by device).
Back up to file and exports
When you choose "Back up to file" (free) or "Export PDF/CSV" (Pro), the app creates a file on your device and opens the Android share sheet. You decide where it goes. We never receive these files. "Restore from file" reads a file you pick, on your device.
Advertising (free version)
The free version shows ads served by Google AdMob, with the same data practices described for Expiry Vault above: AdMob may process your advertising ID, IP address (approximate location) and device and ad-interaction information under Google's policies. In the EEA, the UK and Switzerland the app asks for consent through Google's consent prompt before any ad loads, and you can change your choice in Settings > Privacy options. Ads are removed when you buy Pro. Your tasks and history are never shared with AdMob.
Purchases and app lock
The one-time "Pro" unlock is processed by Google Play Billing; we do not receive your payment details. The app lock (Pro) uses Android's system fingerprint, face or PIN prompt. Biometric data never leaves the device's secure hardware.
3. Orchestrator Companion
Orchestrator Companion is an unofficial app and is not affiliated with, endorsed or sponsored by UiPath. It opens your organisation's Orchestrator web address (tenant URL) in an in-app browser (Android System WebView).
- Stored on your device only: the tenant addresses and names you save, app settings, and (if you set one) a salted hash of your app PIN.
- Sign-in: you sign in on your organisation's own login page. The app never sees or stores your password. The WebView keeps session cookies on your device and sends them only to your Orchestrator and its identity provider.
- Network traffic: pages load directly between your device and your organisation's servers over HTTPS. We do not proxy, log or receive any of it.
- Backup: this app's data is not included in Android backup (cloud backup or device-to-device transfer). Saved tenants and settings stay only on this device and must be added again on a new phone.
- No ads, no in-app purchases, no analytics.
4. Data tools on Apify Store
We publish fifteen data tools (Apify "Actors") on Apify Store: POD & KDP Trademark Checker, Print-Ready Image Upscaler, Keyword Search Volume, Keyword Ideas & Reverse ASIN, PNG to SVG Vectorizer for Cricut & POD, Google Ads Transparency Scraper, Domain SEO Data, Google Jobs Scraper, Google Trends Search Volume, Google Hotels Scraper, Google Shopping Scraper, AI Search Visibility Tracker, Local Business Leads, Google Maps Rank Tracker and Google News Scraper. They run on the Apify platform, not on servers of ours.
Apify account, billing and storage
- Apify runs the platform. You sign up, run the tools and pay through your own Apify account. Apify handles your account, payments, hosting and run storage under the Apify Privacy Policy. We never receive your payment details. Apify gives us usage and earnings statistics for our tools.
- Runs happen in your account, with limited permissions. Every run executes under your Apify account. All fifteen tools use Apify's "limited permissions" level: a tool can access only its own run storage, storages it creates in your account (such as the Google Ads Transparency and Google Jobs monitors' state stores) and anything you explicitly select in its input (for example a key-value store of images, which the Upscaler and Vectorizer can only read). They cannot see the rest of your Apify account.
- Your inputs and results stay in your account. The input you enter (keywords, listing text, image links or uploads, settings) and the results are saved in that run's storage (dataset and key-value store) in your Apify account. Apify keeps them according to your Apify plan's data-retention rules, and you can delete runs and storages yourself in Apify Console.
- We keep no copy. Our tools do not send your inputs or results to VNCNT Labs or to any server of ours. We can only see a run's input, results and log if you share it with us, for example by turning on Apify's "Share run data with developers" setting or by linking a run when you report an issue on a tool's Issues tab.
What each tool does with your data
- POD & KDP Trademark Checker: your titles, tags, descriptions and phrases are compared, inside the run, against a copy of the USPTO's public trademark data that the tool loads. Your text is not sent to the USPTO or anyone else. If you turn on the optional beta "Confirm with USPTO TSDR" setting, only the USPTO serial numbers of flagged trademarks (not your text) are sent to the USPTO's TSDR API, using the TSDR API key you provide. That key is a secret input, stored encrypted by Apify.
- Print-Ready Image Upscaler and PNG to SVG Vectorizer: images come from the links you give (the tool downloads them directly from that website), from a file you upload, or from a key-value store you pick. All processing, including AI upscaling (and the Vectorizer's optional AI step), runs inside the run with open-source Real-ESRGAN models bundled in the tool. Your images are not sent to any AI service or other third party. Output files are saved to the run's key-value store in your account.
- Keyword Search Volume: the keywords you enter, with your chosen country and language, are sent over HTTPS to DataForSEO, a paid third-party keyword-data provider, through our DataForSEO account. It returns Google and Amazon search-volume data. DataForSEO handles these requests under its privacy policy. The optional trademark-risk flag runs inside the run against the same USPTO data as the Trademark Checker and sends nothing out.
- Keyword Ideas & Reverse ASIN: your seed keywords, or the ASINs/ISBN-10s you enter (Amazon product links are reduced to the ASIN first), are sent over HTTPS to DataForSEO through our DataForSEO account. This includes Google autocomplete lookups, and search-volume lookups for the ideas found. The tool does not contact Google or Amazon directly. The optional trademark-risk flag runs inside the run and sends nothing out.
- Google Ads Transparency Scraper: the target domains, company names or Google advertiser IDs you enter (Ads Transparency Center links are reduced to the domain or ID first), with your chosen countries and filters, are sent over HTTPS to DataForSEO through our DataForSEO account. It returns public ad data from Google's Ads Transparency Center. The tool does not contact Google directly. In monitor mode, the IDs of ads already seen and the time of the last run are saved in a named key-value store in your Apify account (default name "google-ads-transparency-monitor"), so the next run can return only new ads. You can delete that store in Apify Console at any time.
- Domain SEO Data: the domains you enter (website links are reduced to the domain first), with your chosen countries, language and filters (such as keyword position, minimum search volume and sorting), are sent over HTTPS to DataForSEO through our DataForSEO account. It returns SEO data from DataForSEO's own databases: search traffic estimates, ranked keywords, competing domains and backlink statistics. The tool does not visit or scrape the websites you enter, and it does not contact Google directly.
- Google Jobs Scraper: the job titles or keywords, locations and filters you enter (remote, date posted, employment type and language) are sent over HTTPS to DataForSEO through our DataForSEO account. It returns public Google Jobs search results. The tool does not contact Google or the job boards directly. In monitor mode, the IDs of jobs already seen and the time of the last run are saved in a named key-value store in your Apify account (default name "google-jobs-monitor"), so the next run can return only new jobs. You can delete that store in Apify Console at any time.
- Google Trends Search Volume: the keywords, locations, timeframes, categories and search type you enter are sent over HTTPS to DataForSEO through our DataForSEO account. It returns public Google Trends data and Google Ads search volumes, which the tool combines into estimated searches inside the run. The tool does not contact Google directly and does not store anything in your Apify account beyond the run's own storage.
- Google Hotels Scraper: the destinations, hotel names or links, check-in dates, guests, currency and filters you enter are sent over HTTPS to DataForSEO through our DataForSEO account. It returns public Google Hotels data (hotels, prices and booking-site rates). The tool does not contact Google or the booking sites directly and does not store anything in your Apify account beyond the run's own storage.
- Google Shopping Scraper: the product searches, product links or IDs, country, language, filters, MAP price and store name you enter are sent over HTTPS to DataForSEO through our DataForSEO account. It returns public Google Shopping data (products, prices and store offers). The tool does not contact Google or the stores directly and does not store anything in your Apify account beyond the run's own storage.
- AI Search Visibility Tracker: the prompts, country and language you enter are sent over HTTPS to DataForSEO through our DataForSEO account, which asks the AI engines you choose (ChatGPT, Gemini, Google AI Mode, Google AI Overviews, Perplexity) and returns their public answers and cited sources. Your brand name, domains, aliases and competitors are never sent anywhere: the matching happens inside the run. The tool does not store anything in your Apify account beyond the run's own storage.
- Local Business Leads: the locations, categories and filters you enter are sent over HTTPS to DataForSEO through our DataForSEO account, which returns public business listing data (Google Business Profile information). The tool does not contact Google or the businesses directly and stores nothing outside your Apify run storage. For businesses listed: we process publicly available business contact information under our legitimate interest in providing business directory data to our users (GDPR Art. 6(1)(f)). We do not return personal emails, owner names or reviewer data. You can ask us to exclude your business from all future results by emailing [email protected] with your Google Maps link or website; we keep only the identifiers needed to honor that request. You can also contact us with any other data-protection question or complaint, and you have the right to complain to your local data-protection authority.
- Google Maps Rank Tracker: the keywords, the business (name, Google Maps link or place ID) and the grid center and size you enter are sent over HTTPS to DataForSEO through our DataForSEO account, which returns the public Google Maps results (business listings) for each grid point. The tool does not contact Google or the businesses directly and stores nothing outside your Apify run storage.
- Google News Scraper: the keywords, country, language and filters you enter are sent over HTTPS to DataForSEO through our DataForSEO account, which returns the public Google News results (headline, publisher, link, snippet and publish time). In only-new mode, hashes of the article links already delivered are kept in a key-value store in your own Apify account so later runs can skip them; you can delete it at any time. The tool does not contact Google or the publishers directly.
Please do not enter personal or confidential information as keywords, listing text or images. The tools are built for product and keyword research, not for personal data.
5. Browser extensions
Our browser extension VNCNT Niche Lens: BSR & Sales Estimator (Chrome and Edge) runs only on www.amazon.com pages you open. It uses one browser permission (storage), needs no account and uses no analytics, ads or tracking. It reads public product information on the open page, and fetches Amazon product pages from www.amazon.com only when you click to look them up. Settings, a daily lookup counter and a 12-hour cache of looked-up products are stored only in your browser. Nothing is sent to VNCNT Labs. Full details are in the Niche Lens privacy policy.
Our browser extension VNCNT Vertical Studio: Product Graphics & Bulk CSV (Chrome and Edge) has no access to any website until you click its icon, and reads only that tab, only when you click Capture. It uses four browser permissions (sidePanel, storage, activeTab and scripting) and no host permissions, needs no account and uses no analytics, ads or tracking. It downloads the product photos from the page you captured, draws your graphics on your device and saves the export through your browser's normal download. Settings, an optional brand kit, a daily counter and compact duplicate fingerprints are stored only in your browser. Nothing is sent to VNCNT Labs. Full details are in the Vertical Studio privacy policy.
Our browser extension VNCNT Voice Type: Dictation & On-Device AI Polish (Chrome and Edge) has no access to any website until you start it on a tab, and listens only while its dictation bar is on screen. It uses four browser permissions (activeTab, scripting, offscreen and storage), plus optional access to all sites only if you turn on its mic-button setting. It needs no account, uses no analytics, ads or tracking, and makes no network requests of its own. Speech is turned into text by your browser's own speech service (Google's in Chrome, Microsoft's in Edge, under their privacy policies), or on your device where the browser offers on-device speech. Text polish runs on your device. Settings, a daily minutes counter and optional history of recent dictations are stored only in your browser. Nothing is sent to VNCNT Labs. Full details are in the Voice Type privacy policy.
Our browser extension VNCNT Access Audit: WCAG 2.2 Accessibility Checker (Chrome and Edge) runs only on the tab where you click its icon. It uses three browser permissions (activeTab, scripting and storage), needs no account, uses no analytics, ads or tracking, and makes no network requests. It checks the page inside your browser; free scans are not saved, and settings stay in your browser. Nothing is sent to VNCNT Labs. Full details are in the Access Audit privacy policy.
Our browser extension VNCNT Casefile: Bug Reports with Replay, Console & Network Logs (Chrome and Edge) captures a tab only after you press Capture, and only until you finish. It uses six browser permissions (activeTab, scripting, tabCapture, offscreen, storage and unlimitedStorage), plus optional access to all sites only if you turn on its “Catch errors from page load” setting. Reports (video or screenshot, console messages, network request details, steps and device information) are redacted for secrets and stored only in your browser until you delete them. It needs no account, uses no analytics, ads or tracking, and makes no network requests. Nothing is sent to VNCNT Labs. Full details are in the Casefile privacy policy.
Our browser extension VNCNT Showreel: Tab Recorder with Auto-Zoom & Privacy Blur (Chrome and Edge) records a tab only after you press Record, and only that tab. It uses six browser permissions (activeTab, scripting, tabCapture, offscreen, storage and unlimitedStorage), plus the microphone only if you turn on narration and optional access to all sites only if you turn on its “Keep effects when I change sites” setting. Recordings, pointer and click positions used for auto-zoom, and per-site blur choices are stored only in your browser. It needs no account, uses no analytics, ads or tracking, and makes no network requests of its own. Optional live captions use your browser's own speech service (Google's in Chrome, Microsoft's in Edge, under their privacy policies). Nothing is sent to VNCNT Labs. Full details are in the Showreel privacy policy.
Our browser extension VNCNT Stepline: Step-by-Step Guide & SOP Recorder (Chrome and Edge) records a tab only after you press Record. It uses four browser permissions (activeTab, scripting, storage and unlimitedStorage), plus optional access to all sites only if you turn on its “Record across sites” setting. Guides (screenshots of the steps, with emails, keys and card numbers blurred before saving, and titles written from what you clicked) are stored only in your browser until you delete them. Passwords are never written down. It needs no account, uses no analytics, ads or tracking, and makes no network requests. Nothing is sent to VNCNT Labs. Full details are in the Stepline privacy policy.
Our browser extension VNCNT Convofold: AI Chat Folders, Prompt Library & Export (Chrome and Edge) runs only on chatgpt.com, claude.ai, gemini.google.com and grok.com. It uses one browser permission (storage) plus access to those four sites. It reads the conversation open in the tab so it can file, search and export it, and checks prompts you send for emails, keys and card numbers on your computer. Your library, chat transcripts, prompts and settings are stored only in your browser. It needs no account, uses no analytics, ads or tracking, and makes no network requests. Nothing is sent to VNCNT Labs. Full details are in the Convofold privacy policy.
Our browser extension VNCNT Gridnab: One-Click Table and List Scraper (Chrome and Edge) runs only on the tab where you click its icon. It uses three browser permissions (activeTab, scripting and storage); optional alarms and per-site access are reserved for future Pro multi-page and scheduled runs and are not requested in the free version. The tables and lists you choose to collect, and your settings, are stored only in your browser. It needs no account, uses no analytics, ads or tracking, and makes no network requests. Nothing is sent to VNCNT Labs. Full details are in the Gridnab privacy policy.
Our browser extension VNCNT Clickreel: Record and Replay Browser Automation (Chrome and Edge) works only on the tab where you click its icon. It uses three browser permissions (activeTab, scripting and storage), plus optional access to one site at a time so a recording or run can continue after the page loads a new address, and optional alarms reserved for future Pro schedules. The steps you record (including text you type, but never passwords), your bots and their results are stored only in your browser. It needs no account, uses no analytics, ads or tracking, and makes no network requests. Nothing is sent to VNCNT Labs. Full details are in the Clickreel privacy policy.
Our browser extension VNCNT Sessionry: Crash-Proof Tab and Session Manager (Chrome and Edge) uses five browser permissions (tabs, tabGroups, storage, unlimitedStorage and alarms), plus optional downloads access reserved for its future Pro backup file. It stores the address and title of your open tabs, their windows, pins and tab groups, and collections you save, only in your browser, so it can restore them. It never reads page content, has no access to websites, does not save incognito windows by default, needs no account, uses no analytics, ads or tracking, and makes no network requests. Nothing is sent to VNCNT Labs. Full details are in the Sessionry privacy policy.
6. Data sharing and selling
We do not sell personal data. Apart from the Google services described above (AdMob, Play Billing and, for Expiry Vault and HouseTimer, Android system backup), none of our apps share data with third parties. For our Apify tools, the only third parties involved are Apify (the platform you run them on), DataForSEO (keywords and ASINs for Keyword Search Volume and Keyword Ideas; target domains, names, advertiser IDs and countries for Google Ads Transparency; domains, countries and filters for Domain SEO Data; job queries, locations and filters for Google Jobs Scraper; keywords, locations, timeframes and categories for Google Trends Search Volume; destinations, hotels, dates, guests and filters for Google Hotels Scraper; product searches, product links, countries and filters for Google Shopping Scraper; prompts, countries and languages for AI Search Visibility Tracker; locations, categories and filters for Local Business Leads; keywords, businesses and grid locations for Google Maps Rank Tracker; news searches, countries and filters for Google News Scraper) and, only if you turn on the optional TSDR check, the USPTO (trademark serial numbers), as described in section 4. Our browser extensions share nothing with third parties themselves. Voice Type, and Showreel's optional captions, rely on your browser's own speech service, as described in section 5.
7. Retention and deletion
All app data stays on your device until you delete it. You can delete individual items, tasks, history entries or tenants in the app, clear the app's storage in Android Settings, or uninstall the app to remove everything. Android backups in your Google account can be managed in your Google account and device settings. Because we hold no copy of your data, there is nothing for us to delete on our side. For our Apify tools, run inputs and results are kept in your Apify account under your Apify plan's retention rules, and you can delete them in Apify Console. We do not store them.
8. Children
The apps and tools are not directed to children under 13, and we do not knowingly collect information from children.
9. Security
Data is kept in each app's private storage, protected by Android's app sandbox. Network connections use HTTPS. Optional app locks add another layer. Our Apify tools run in Apify's isolated run environment with limited permissions, and their calls to DataForSEO and the USPTO use HTTPS.
10. This website
vncntlabs.com uses no cookies, analytics or trackers, and loads no third-party fonts or scripts. The site is hosted on Cloudflare, which processes standard connection data such as your IP address to deliver and protect the site, and adds a small script that hides our email address from spam bots. Links to Apify Store take you to apify.com, which has its own privacy policy and cookies.
11. Changes
If we change this policy, we will post the new version on this page and update the "Last updated" date at the top.
12. Contact
VNCNT Labs · [email protected] · vncntlabs.com