Vectorly Privacy Policy

Last updated: 2026-08-17

This document was drafted from Vectorly's actual code and data-handling behavior as implemented.

Summary

Vectorly converts an image you choose into a vector graphic (SVG, and for Pro users optionally PDF/EPS/DXF). To do this:

The image you select is transmitted, over an encrypted connection, to the Vectorly backend.
The Vectorly backend transmits the image to a third-party vectorization provider to perform the actual conversion.
The converted result is returned to your device. You choose whether to save it (via your device's own file picker) or share it.

No account, email address, or password is required or collected.

The image you choose or photograph is sent to our backend solely to perform the conversion you requested.
Our backend does not intentionally store your original image in its database. The image exists only transiently in memory/temporary storage for the duration of processing and is removed immediately afterwards.
We do not claim that our third-party vectorization provider instantly or guaranteed-permanently deletes every copy of an image on their side beyond what is stated in their own current privacy/data-retention documentation. As of the last time we checked, Vectorizer.AI's published policy (vectorizer.ai/policies/privacy) states that image processing records not associated with a Vectorizer.AI account of ours are deleted or anonymized within a year of creation, and that they may use submitted images "to improve the image processing algorithms that underlie the services we offer." Review their current policy directly before relying on this summary, as it may change.
The generated vector result is temporarily retained by our backend only long enough for your device to retrieve it.

On first use, the app generates a random installation identifier and combines it with Settings.Secure.ANDROID_ID (a supporting signal only, never used by itself as an authentication secret) to establish an anonymous backend identity. No name, email, or other personal profile information is ever attached to this identity.
This raw identifier is transmitted only over HTTPS and is never logged. The backend immediately transforms it with a one-way cryptographic HMAC before storing anything — the original value is never stored.
This anonymous identifier is used only for:
- fraud/abuse prevention (e.g. limiting free introductory conversions to one grant per device),
- enforcing your free/paid conversion quota,
- restoring your purchase/credit continuity on the same device.
Because there is no account system, we cannot guarantee that credits or history follow you to a different device. Google Play can restore the permanent Pro purchase on any device signed into the same Play account, since that is handled by Google Play itself.

All purchases (Pro unlock, credit packs) are handled by Google Play Billing. We do not receive or store your payment card details — Google processes payment entirely.
We verify each purchase with Google's Play Developer API before granting any credits or Pro access, and store only the purchase token, product ID, and grant outcome needed to prevent the same purchase being redeemed twice.

Our backend (operated by Tim Losurdo) — processes images to perform conversion, enforces quotas, and verifies purchases.
Vectorization provider — currently Vectorizer.AI, receives the image to perform the conversion on our backend's behalf. Per their own published policy, they may also use submitted images to improve their own image processing algorithms (see above) — this is their stated practice, not something we control or that our backend requests separately. The Android application itself never communicates with this provider directly, and the provider can be replaced by our backend without any app update, in which case this policy will be updated to name the current provider.
Google Play — handles Play Billing (purchases) and Play Integrity (device/app authenticity verification for anti-abuse purposes).

Original images: not intentionally retained after conversion completes.
Generated vector results: retained only transiently by the backend.
Anonymous account records (HMAC'd device identifier, credit ledger, purchase records): retained to maintain your credit/Pro state for as long as the anonymous account remains in use, and as required for fraud prevention and legal/accounting purposes.

You can stop using Vectorly and uninstall the app at any time.
Because there is no account/login, there is no in-app "delete my account" flow tied to an identity you can prove ownership of beyond the device itself; contact idevem@gmail.com to request deletion of data associated with a specific anonymous account identifier if you have retained it.

We may update this policy as the product evolves. Material changes will be reflected here with an updated "Last updated" date.