Privacy Policy

Last updated: September 30, 2026

VVAE is a third-party V2EX client for iOS developed by Vast Logic. Content requests go directly from your device to v2ex.com. The VVAE push relay is used only if you turn on push notifications; see Push notifications below.

Content and account

• Everything shown in the app comes directly from v2ex.com, requested by your device. V2EX's own terms govern how V2EX handles data.
• When you sign in with a password, your credentials are submitted directly to v2ex.com. VVAE does not store your password. The session cookie is kept in the device keychain and is removed when you sign out.
• When you sign in with Phantom, the signature is submitted directly to the v2ex.com sign-in endpoint. VVAE never touches or stores your account credentials.

AI assistant

• AI features require your own API key. The key is stored only in the device keychain and may sync between your own devices through iCloud Keychain.
• Conversation content (topic body, replies and your questions) is sent directly to the provider you choose, not through our servers. Each provider's own policy governs how it handles data.
• When you ask the AI to read an external link from a topic, that URL is sent to a third-party article-extraction service to obtain the page text. Only the link itself is sent, never your account or your question.

Push notifications

• Push notifications are optional and off by default. When you turn them on, you run a notifier on a machine you control, and it checks v2ex.com for your notifications directly.
• Notification content, your V2EX token and details about the machine running the notifier are encrypted with a key that exists only on your devices and in the notifier, then passed through the VVAE push relay to Apple's push service. The relay can't decrypt them and doesn't store notification content.
• To deliver pushes, the relay stores your device's push token, a hash of your push key, your encrypted settings, your subscription status (expiry date and App Store original transaction ID, used to confirm Premium), and the notifier's heartbeat details (version, status, time of the last successful check, instance ID and encrypted machine details).
• Turning off push or signing out removes this device's push token from the relay. Resetting your push key or removing an account in the app deletes all of that account's data from the relay.

For setup and encryption details, see the push notifications setup guide.

Image uploads

Images you upload when posting or replying are sent to the image hosting service you select in Settings; its name is shown there. VVAE keeps no copy.

iCloud sync

Settings such as theme, accent color and node order sync between your own devices through iCloud key-value storage. This data exists only in your iCloud account and we cannot access it. You can turn off iCloud for VVAE in system settings.

Diagnostics

The app sends data to a third-party crash reporting service and an anonymous analytics service. It contains only the device model, OS version, app version and a random device identifier, never your account, topic content or API keys. Data is deleted automatically after 90 days. These services are bound by contract to process data only for the purposes described here, with protection no weaker than this policy. You can turn this off in Settings › Diagnostics; nothing is collected afterwards. To request earlier deletion, email support@vastlogic.dev.

Contact

For any privacy question, write to support@vastlogic.dev.