/ IDENTITY
Who we are
vayl is made by Seif, an individual developer in Egypt, who is responsible for your personal data under this policy (the data controller). Contact for anything about privacy: privacy@vaylapp.com.
PRIVACY ARCHITECTURE • SECTION 4.0
Privacy Policy
STORED: ON YOUR PHONE
STATUS: ALPHA
EFFECTIVE: 7 OCT 2026
SYNTHESIS / IN SHORT
In short: the notes you write in vayl stay on your phone, encrypted, and are never uploaded to our servers. vayl has no account, no ads and no analytics.
We only receive personal data if you email us. The Drug Library is built into the app, so searching it happens on your phone.
TAXONOMY 0.1
UPDATED: 7 OCT 2026
Data Retention & Transmission Ledger
| Category | Stored Where | Retention Period | Third-Party Access |
|---|---|---|---|
| Cases & notes | Your phone (encrypted) | Until you delete them | None |
| Study choices & settings | Your phone | Until you delete them | None |
| Library searches | Your phone | Not sent to us | None |
| Analytics / tracking | None collected | N/A | None |
| Emails you send us | Apple iCloud+ mail | Up to 12 months after | Apple |
| Website requests | Cloudflare | Per Cloudflare's policy | Cloudflare |
/ STATUS
The app today
vayl is in alpha. This policy describes what the current versions of the app and this website do. If we add features that collect or send data, we will update this policy and ask for your permission in the app before they start.
/ STORAGE
What stays on your phone
vayl is a study notebook for medical students. The app stores the following only on your phone:
- Your cases and notes, including updates you add and any unsaved draft. Because they describe clinical cases, notes can contain health information.
- Your study choices, such as which facts you confirmed or dismissed on a case.
- App settings, such as the app language.
Your notes are never uploaded to our servers, and you do not need an internet connection or an account to write or read them.
/ VAULT
How your notes are protected
- Android: notes are kept in an encrypted database (SQLCipher). App data is excluded from Android cloud backup and device-to-device transfer.
- iPhone: notes are saved with iOS complete file protection, so they are encrypted while your iPhone is locked, and they are excluded from iCloud and computer backups.
On Android the database key is protected by the Android Keystore on your phone. We never receive your notes or their keys.
SYSTEM FILE ATTRIBUTE:STATUS: ENFORCED
iPhone: isExcludedFromBackup = trueAndroid: android:allowBackup="false"Because your notes are only on your phone, we cannot see, recover or restore them. Losing your phone, resetting it or deleting the app deletes your notes. Protect your phone with a passcode.
/ LIBRARY
Drug Library
The Drug Library is a reference database built into the app, and searching it happens on your phone. Your searches are not sent to us.
/ STORES
Crash reports and app stores
Google Play and the Apple App Store handle downloads and updates under their own privacy policies. If you have chosen in your phone's settings to share diagnostics with app developers, Google or Apple may give us crash reports about the app. Those reports describe the app and your device; they do not contain your notes.
/ CORRESPONDENCE
If you email us
If you write to an @vaylapp.com address, we receive your email address, your message and anything you attach. We use them only to reply and to help you. Our email is hosted by Apple (iCloud+). We keep messages for as long as needed to deal with your request and for up to 12 months after, unless you ask us to delete them sooner. Please do not send us patient details.
/ WEBSITE
This website
vaylapp.com sets no cookies, uses no analytics or tracking, and loads nothing from other websites. It is served by Cloudflare, which processes technical data such as your IP address, browser type and the pages requested in order to deliver the site and protect it from attacks. See Cloudflare's privacy policy.
/ VENDORS
Who else handles data
We do not sell or rent personal data, and we do not use it for advertising. The outside services involved are:
- Google: Google Play.
- Apple: the App Store, and iCloud+ for our email.
- Cloudflare: this website.
These services may process data on servers outside Egypt. We use them only for the purposes in this policy and follow the conditions of Law No. 151 of 2020 for transfers abroad. We would disclose data to an authority only if Egyptian law required it.
/ LEGAL BASIS
Legal basis
We handle personal data in line with Egypt's Personal Data Protection Law No. 151 of 2020 and its Executive Regulations.
- Emails: you contacted us, and we use your message to reply.
- Your notes: we do not receive the health information in your notes. If a future feature ever needed to process it, we would ask for your explicit consent first, as the law requires for sensitive data.
- This website: to deliver it and keep it secure.
/ RETENTION
How long data is kept, and how to delete it
| Data | Kept | How to delete it |
|---|---|---|
| Notes and settings in the app | On your phone until you delete them | iPhone: delete cases in the app, or delete the app. Android: delete the app, or go to Settings, Apps, vayl, Storage, Clear storage. This removes everything and cannot be undone. |
| Emails you send us | Up to 12 months after your request is dealt with | Ask at privacy@vaylapp.com |
| Website request data | As set by Cloudflare's policy | Handled by Cloudflare |
/ RIGHTS
Your rights
Under Law No. 151 of 2020 you have the right to know what personal data we hold about you, to get a copy of it, to have it corrected or deleted, to withdraw consent, to object to its use, and to be told if it is involved in a data breach. Email privacy@vaylapp.com and we will answer within the time the law requires. We hold no copy of your notes; you control them on your phone. You can also complain to Egypt's Personal Data Protection Center.
/ SECURITY
Security and breaches
Notes are encrypted on your phone, and this website is served only over encrypted connections (HTTPS). If a breach affects your personal data, we will notify Egypt's Personal Data Protection Center and you, as Law No. 151 of 2020 requires.
/ AGE
Age
vayl is made for university medical students and doctors in training. It is not intended for anyone under 18, and we do not knowingly collect data from children.
/ CHANGES
Changes to vayl or this policy
When we change this policy we will update the date at the top of this page. If we add features that collect or send data, we will update this policy and ask for your permission in the app before they start.
/ INQUIRY
Contact
Seif, the developer of vayl, Egypt.
DIRECT PRIVACY INQUIRY DISPATCH
Dispatch Emailprivacy@vaylapp.com
Notice on patient confidentiality
Write teaching cases without anything that identifies a patient. Students and doctors remain responsible for following their faculty's and hospital's confidentiality rules and Egypt's Law No. 151 of 2020.