Vellum
Privacy Policy
Effective June 27, 2026 · Last updated June 28, 2026
The short version. Vellum is built privacy-first. Your financial data (your transactions, budgets, goals, and account balances) is created and stored on your device and is never uploaded to us.
You can use Vellum entirely free with no account and nothing leaving your phone. If you subscribe to Vellum Plus, we collect your email and name to manage your subscription, and, only if you choose to connect a bank account, we sync and store your transactions and balances to power that feature. We never sell your data, we don't run ads, and we don't use third-party analytics or trackers. Anything we hold is yours to export or delete at any time.
This Privacy Policy explains how Naggi Technologies LLC ("Vellum," "we," "us") handles information in connection with the Vellum mobile app (the "App"). By using the App, you agree to this policy.
1. Information we collect
If you use Vellum for free
We collect nothing. The free tier requires no account and no sign-in. The financial information you enter (transactions, budgets, goals, accounts, and net worth) is stored only in the App's local storage on your device. It is not transmitted to us or anyone else.
If you subscribe to Vellum Plus
To subscribe, you sign in with Sign in with Apple or Google. From that sign-in we receive and store:
- Your email address (Apple may provide a private-relay address that forwards to you), and
- Your name, if your sign-in provides it.
We use this to identify your account and tie your subscription to it so you can restore it after reinstalling or on a new device. If you connect a bank (see below), we also store the transactions and balances you sync.
Bank connections (optional)
Vellum Plus lets you connect a bank or card account to sync transactions automatically. We use Plaid to securely link to your financial institution; Plaid provides us your transactions and balances. We never see or store your bank login credentials; those are handled by Plaid. To power sync across your devices, we store the synced transactions and balances in your account, protected so that only you can access them. This data is never sold, never used for advertising, and is yours to export or delete at any time; disconnecting an institution or deleting your account removes it and revokes our access. Connecting a bank is entirely optional; if you never connect one, none of your transaction data leaves your device.
Subscription & purchase data
Subscriptions are sold and processed by the app store you purchase through (Apple's App Store on iPhone, or Google Play on Android); the store handles your payment and we never see your payment details. We use RevenueCat to manage and verify subscription status. In doing so, RevenueCat processes purchase and receipt information and a subscriber identifier linked to your account.
What we do not collect
- We do not collect your manually entered transactions, budgets, or goals; those stay on your device. (Transactions you choose to sync from a connected bank are stored; see Bank connections above.)
- We do not use third-party analytics, advertising, or tracking SDKs.
- We never access your bank login credentials; bank linking is handled by Plaid.
- The App's "What-If" scenario modeling runs on your device; the financial details you enter for it are not sent to us.
Notifications
Bill reminders and other notifications are scheduled locally on your device. We do not operate a push-notification server and do not collect a push token.
2. How we use information
We use the limited information described above only to:
- Authenticate you and maintain your Vellum Plus account;
- Provide, restore, and verify your subscription;
- Respond to your support and privacy requests; and
- Comply with legal obligations and protect against fraud or abuse.
We do not use your information for advertising, profiling, or sale.
3. Service providers we share with
We do not sell your personal information and do not share it for advertising. We rely on a small number of service providers ("sub-processors") that process data on our behalf solely to provide the App:
| Provider | Purpose | Data involved |
|---|---|---|
| Apple | Sign in with Apple; App Store subscription billing (iPhone) | Authentication, email, purchase/receipt |
| Google sign-in; Google Play subscription billing (Android) | Authentication, email, name, purchase/receipt | |
| Supabase | Stores your account record | Email, name, account identifier |
| RevenueCat | Subscription management & verification | Purchase/receipt, subscriber identifier |
| Plaid | Bank/card linking & transaction sync (only if you connect a bank) | Transactions, balances, account metadata |
Each provider maintains its own privacy policy: Apple, Google, Supabase, RevenueCat, Plaid.
We may also disclose information if required by law, or to protect the rights, safety, or property of our users or us.
4. Where your data is stored
Your account record (email and name) and any bank data you sync are stored on infrastructure located in the United States. Your manually-entered financial data remains on your device and is governed by your device and operating-system protections. If you access the App from outside the United States, you understand that the data described above will be processed in the United States.
5. Data retention
We keep your account record (and any synced bank data) for as long as you maintain a Vellum account. If you delete your account, or disconnect a linked bank, we remove the associated data from our systems and revoke our access to that institution. Financial data stored locally on your device is removed when you delete it in the App or uninstall the App.
6. Your rights & choices
- Access & portability: Your financial data lives on your device, and the App lets you export it (CSV and a PDF statement). To get a copy of the account data we hold (email and name), contact us.
- Correction: You can update the name on your account by contacting us.
- Deletion: You can delete your account and all associated personal data at any time; see Section 7.
- Do not sell / share: We do not sell or share personal information, so there is nothing to opt out of. This satisfies rights under laws such as the California Consumer Privacy Act (CCPA) and, where applicable, the GDPR.
7. Deleting your account
To delete your Vellum Plus account and the personal data we hold (your email, name, and any synced bank transactions), email us at privacy@vellummoney.com and we will delete it promptly. Deleting the account removes your record from our systems and disconnects any linked banks; managing or cancelling the subscription itself is done through your Apple ID subscription settings. Your on-device financial data is removed by deleting it in the App or uninstalling the App.
8. Children
Vellum is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
9. Security
We use industry-standard safeguards to protect the limited account data we store, including encryption in transit and access controls that restrict each account record to its owner. No method of transmission or storage is perfectly secure, but we keep what we collect to a minimum precisely to reduce risk.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice in the App. Your continued use of the App after an update means you accept the revised policy.
11. Contact us
Questions or requests about this policy or your data? Email privacy@vellummoney.com.