Privacy
Privacy Policy
The short version: the VectorShop app has no accounts, telemetry, crash reporting, or ad SDKs. Your documents, fonts, and API keys stay on your device. We save information only when you choose to send feedback on our website.
What we process
The app collects no personal information in the background. It integrates no analytics, tracking, advertising, or crash reporting services. Nothing about your usage, device, or documents is sent to us in the background, and you have no account with us.
When you choose to use the website's feedback form, we process the feedback type, message, language, source page, submission time, and any contact email you voluntarily provide. We use this only to understand feedback, investigate problems, and reply when requested—not for advertising or profiling. Do not include API keys, passwords, or other sensitive information in your message.
Where your files live
The .vsp documents you create, the assets you import, and the images you export are all saved
wherever you choose — your local disk or your own iCloud Drive. We can neither see nor reach them.
Delete the app and everything goes with you.
When the app uses the network
Nearly everything in VectorShop — drawing, layout, symbols, import and export — works entirely offline. Network requests happen only in the following cases, and every one of them is something you initiate:
1. AI features (bring your own API key)
When you generate a design, generate an image, or edit through chat, the app sends your prompt — plus the canvas content required to carry out that request — directly to the model provider you configured in Settings (for example OpenAI, OpenRouter, Google Gemini, Doubao, Qwen, Zhipu, or an Ollama instance running on your own machine).
- Requests go straight from your device to that provider and never pass through any server of ours;
- Your API key is stored locally and is used only to authenticate those requests — it is not sent anywhere else;
- So the model can see what you see, what is sent may include a screenshot of the canvas. You can turn this off under Settings › General › Allow AI Screenshots;
- How that provider handles the content, including whether it is used for training, is governed by your agreement with that provider; please review their privacy policy;
- With no API key configured, no AI-related network request is ever made.
2. Voice input
When you dictate into the AI chat, the app uses Apple's speech recognition to turn speech into text. On devices that support on-device recognition it never leaves your Mac; otherwise the system sends the audio to Apple's servers for processing, governed by Apple's Privacy Policy. We neither receive nor store any audio. If you don't use voice input, the microphone is never activated.
3. Font downloads
When you choose to download a Google Fonts family from the font panel, the app fetches the font file from its public distribution URL and caches it locally. The request carries the font file only — no identity information and no document content.
4. Purchases and subscriptions
In-app purchases are handled by Apple's StoreKit. We never receive your payment details — the app can only read one result: whether a Pro entitlement is currently active. Purchases are governed by Apple's Privacy Policy.
5. Feedback you send yourself
Help → Report a Problem pre-fills an email or a GitHub issue containing the description you wrote plus basic diagnostics such as app and OS version. Nothing leaves your device until you press send, and you can read and edit all of it first.
When you use the website's feedback form, pressing Send transmits the form to our Cloudflare Pages Function and stores it in Cloudflare D1. Cloudflare Turnstile temporarily processes the verification token and network address to prevent spam; we do not write the network address to the feedback database. Contact email is optional, and messages are not public. When later feedback arrives, the system removes records older than 12 months; necessary information may be kept longer for security, dispute handling, or legal obligations.
Third-party sharing
We do not sell, rent, or trade information about you. Cloudflare provides the website's network, anti-abuse, and database infrastructure. Apart from the user-initiated cases above and processing necessary to provide the service, we do not disclose feedback content to third parties.
Children's privacy
The app and website are not directed at children under 13 and do not knowingly collect their information. Minors should not include contact details or other personal information in feedback.
Your rights
Your local app files remain under your control; deleting them removes them. For website feedback, you can use the email address you submitted and the feedback reference to request access, correction, or deletion at the address below. We may be unable to verify ownership of anonymous feedback submitted without contact details.
Changes to this policy
Any update will be published on this page with a revised "Last updated" date. For material changes we will also notify you inside the app.
Contact us
- Email: [email protected]
- Website: https://vectorshop.app
See also: Third-Party Licenses — the open-source components VectorShop uses.