Privacy Policy

Your email address, used to sign you in and, if you opt in, to send your digest. If you choose Sign in with Google, Google gives us your email address and the name on your Google account. Google may also share basic profile details such as a photo link. Our sign-in provider, Supabase, keeps those with your account; Vilokana does not show or use them.

Your name: the one you type when you sign up, or the one on your Google account if you have not set one. You can change it in Settings. We use it to greet you.

Your preferences: the beats you follow and the digest settings you choose.

Your Library: the stories you save are stored against your account, so they are there when you sign in on another device.

Your sign-up agreement: when you sign up, we record that you confirmed you are 18 or older and agreed to the Terms and this Privacy Policy, which version of them you agreed to, and when. It is kept in the sign-in security record below.

Sign-in security records: when you request a sign-in code or sign in (with an email code or with Google), we record the email address, IP address and time, so we can limit abuse.

Basic server logs: requests, timestamps, IP addresses and errors, so we can keep the service running.

Links you paste into Decode, and the article text we fetch from them. We use these to produce the analysis you asked for.

Decode results: we save the link (without tracking parameters) and the analysis it produced, so a repeat request is quick. This saved copy is not linked to your account. We also record that you ran an analysis, and when, so we can apply a daily limit to each account.

Deep analysis (Pro): each time you ask for a new AI read, we record which story it was for, and when, so we can apply a daily limit to each account. Opening the page, or viewing a read that is already saved, is not recorded. The AI read itself is saved once per story, is the same for every reader, and is not stored against your account.

To run Vilokana: sign you in, personalise your For You feed, send the digest if you opted in, keep the service secure, and fix problems.

We do not sell your data, and we do not run advertising on Vilokana.

To score bias and produce summaries, we send article text to Anthropic's Claude API. That includes articles we collect from news outlets, the article behind any link you paste into Decode, and, for a deep analysis read, the outlet names, headlines and short summaries of the articles in one story.

Anthropic handles that text under its own terms and privacy policy.

Vilokana relies on service providers: Supabase (database and sign-in), Render (hosting), and Resend (sign-in and digest emails). Google handles the sign-in if you choose Sign in with Google. Anthropic (above) receives article text.

The place name in the header: the first time you open the site in a tab, your browser asks whether Vilokana may use your location. If you allow it, your browser sends your coordinates to BigDataCloud to get a place name, and to our own server, which passes them on to OpenWeather for a temperature only if weather is switched on (at the time of writing it is not). If you refuse, or your browser cannot share a location, BigDataCloud estimates a place from your IP address. Vilokana does not save your coordinates or place in its database.

These providers may process data in other countries.

Vilokana sets httpOnly cookies to keep you signed in. They are needed for sign-in to work. Your browser's local storage remembers your light or dark theme choice, and its session storage keeps the place name shown in the header for up to 30 minutes.

On the sign-in and sign-up pages, when the Google button is shown, Google's own script loads and Google may set its own cookies. Vilokana does not control those.

At the time of writing we do not set advertising or analytics cookies.

We keep your account, name, preferences and saved stories while your account exists. Deleting your account also removes them, and the record of how many Decode analyses and deep analysis reads you ran.

We do not yet delete sign-in security records (which include your sign-up agreement), server logs, saved Decode results and saved deep analysis reads on a fixed schedule. Deleting your account detaches the sign-in records from it, but they still hold the email address and IP address they were made with. We will state a period here once we set one.

To have your account, name, preferences and saved stories deleted, or to ask what we hold about you, email contact@vilokana.com.

You can change your preferences in Settings, and turn the digest off there or with the unsubscribe link in any digest email.

Vilokana is not intended for anyone under 18, and we do not knowingly collect their data.

We take reasonable steps to protect your data. No online service is perfectly secure, so we cannot promise absolute safety.

We may update this policy. The date at the top shows the latest version. If a change is significant, we will say so on the site or by email.

Questions about privacy: contact@vilokana.com.