Legal

Privacy

Last updated 11 November 2026

Vynthen is built in Addis Ababa. This page explains, in plain language, what we collect when you use vynthen.com, Vynthen App, Vynthen Build and VYN, why we collect it, and what you can do about it.

What we store

• Account data. Your name, email address and a scrypt hash of your password. We never store your password in plain text.
• Conversations and builds. Messages, attachments, generated files and build logs that you create while signed in, so the products can show them back to you.
• Usage records. Token and image counts, timestamps and the model used. These records enforce plan limits and power the usage view in settings.
• Billing records. Plan, amount, provider reference and payment status. Vynthen does not receive or store your Telebirr PIN or wallet credentials.
• Device records. The name and last-seen time of machines authorized for VYN. Device tokens are stored only as hashes.
• BYOK keys. If you are on the BYOK plan, your provider key is encrypted with AES-256-GCM before storage and is never sent back to the browser.

Where it goes

Prompts and relevant conversation context are sent to the model provider you selected through OpenRouter so that a response can be generated. Payment initiation is handled by Telebirr. We do not sell personal data, and we do not use your conversations to train models.

When a deployment runs without provider credentials, Vynthen says so and returns a configuration error instead of inventing an answer. We do not fabricate model responses.

Cookies

Vynthen uses one essential session cookie, vynthen_session, to keep you signed in. It is HTTP-only and expires after 30 days. We do not run advertising or cross-site tracking cookies.

Retention

Conversations, builds, usage records and billing records stay in the deployment's database until you delete them or ask us to remove your account. Revoking a device removes its token immediately. Deleting a conversation removes its messages.

Your choices

• Rename your account in Settings.
• Delete individual conversations, messages and build projects.
• Revoke connected VYN devices at any time.
• Remove a stored BYOK key at any time.
• Request a copy or deletion of your account data by emailing privacy@vynthen.com.

Security

Sessions are signed, passwords are hashed with scrypt, secrets are encrypted with AES-256-GCM, and plan limits are enforced on the server. No system is perfect; if you find a problem, tell us at security@vynthen.com.

Contact

Questions about this policy: privacy@vynthen.com. Vynthen, Addis Ababa, Ethiopia.