Accept turns on our own product analytics and lets the daily.dev ad pixel report to daily.dev; Decline keeps both off. The Reddit ad pixel runs either way, on our public pages and when you sign up or buy, to measure our ads. The daily.dev pixel loads on our public pages and at sign-up too, but reports nothing unless you accept. Ad pixels may set their own cookies and never see your chats. See our Privacy Policy.

Legal

Privacy Policy

This policy explains what AhuraSense Ltd collects when you use the Vani API and console, why, and what you can do about it. We collect only what is needed to run the service.

Last updated 25 October 2026

What we collect

We collect the following categories of data.

  • Account details — email address, username, hashed password, and session tokens.
  • Operational telemetry — endpoints called, timestamps, token counts, and error codes.
  • Billing metadata — payment method references and invoices, held by our payment provider.
  • First-party product analytics — only after you opt in: coarse page categories, page-view/engagement/heartbeat and explicit signup/upgrade intent events, bounded visible duration and (where explicitly supplied) known free-model usage. After you opt in, it also records the campaign tags of the link you arrived from (utm source, medium, campaign and campaign ID), if it has any. Prompt text, completions, email, IP address, account IDs, request IDs and raw events are excluded.
  • Support correspondence — messages and files you choose to send us.

How we use it

To operate and secure authentication, API keys, and billing. To show usage and cost in your workspace. To understand how the console is used and improve reliability. To send transactional notices and answer support requests.

We do not sell your data. First-party rollups are retained for up to 35 days, then pruned. Anonymous daily HMAC session hashes rotate each UTC day, so the aggregate cannot follow a person across days. Conversion, retention, revenue and unique-user attribution are not available from these rollups.

Cookies and tracking

Essential cookies keep you signed in and secure your session. They are required for the chat app to work and are not subject to consent.

Your choice covers our own product analytics and whether the daily.dev pixel described below may report to daily.dev; both are off until you accept. We ask once, on your first visit, and both answers are remembered — declining does not mean being asked again every time. You can change your answer at any time here or in Privacy settings. First-party product analytics sends only bounded aggregate event data after opt-in. Prompt or completion content is never included.

Your answer is kept in your browser and in one first-party cookie, vani_consent_v1, that vani.ai and its subdomains share, so one answer covers both the website and the app. It holds only your choice.

The Reddit pixel described below is not part of that choice: it runs for every visitor, whether you accept, decline or do not answer, and declining does not turn it off. You can block both ad pixels with your browser's tracking protection or a content blocker.

  • First-party product analytics — an opt-in, self-hosted aggregate of coarse page categories, engagement signals and bounded visible duration. Daily HMAC rollups are retained for up to 35 days; there are no raw events or cross-day user profiles.
  • Reddit pixel — so we can tell which of our ads work. It loads on our public website (vani.ai: the home page, product tour, pricing, models, docs, news and our other site pages). When a new account is created, a separate, invisible frame from vani.ai loads it once to record the sign-up; when you buy a subscription or extra usage, the same frame sends Reddit the purchase and the amount paid.
  • daily.dev pixel — its script loads on the same public pages and in the same sign-up frame for every visitor, so daily.dev's server sees the request for it: your IP address, your browser's details, our site's address and any cookie daily.dev already keeps in your browser. The pixel itself reports to daily.dev only if you accept: then it may record your visits to those pages and a new sign-up. If you decline or do not answer, it reports nothing.
  • Where the ad pixels never run — the pages of the chat app (guest and shared chats included), settings, Studio, documents, the admin area, the API console and our sign-in pages. The sign-up frame cannot read the page around it.
  • What the ad pixels can receive — the address of the page they run on, your browser's details and IP address, and their own cookies or identifiers, which they may set on vani.ai. They never receive your email, your prompts or your completions. Reddit and daily.dev handle this data under their own privacy policies.
  • Where an X pixel is used, it loads only after you accept, and declining or withdrawing removes its cookie on this site.

Your cookie choice

You have not chosen yet, so our own product analytics is off and the daily.dev ad pixel reports nothing.

This choice covers our own product analytics and whether the daily.dev ad pixel may report to daily.dev. The Reddit ad pixel runs on our public pages and when you sign up or buy, whatever you choose. Ad pixels never see your chats.

Retention and security

Customer content is processed in memory and discarded when the request completes. Prompts and system instructions, model outputs, image inputs, and conversation history are never written to storage — we keep no server-side chat logs. Payloads are never used for model training.

Operational telemetry — token counts, timestamps, model IDs, and HTTP status codes — is retained for your account's lifetime plus any legally required period, for billing, fraud prevention, and reliability.

API keys and session tokens are encrypted at rest. Passwords are hashed using an industry-standard algorithm.

Your choices

You can request access to, or export of, your account data. You can request deletion of your account and keys, though billing records may be retained where the law requires it. You can unsubscribe from non-essential email at any time.

To make a request, contact [email protected].

Third parties

We use a PCI-DSS compliant payment processor, an OAuth identity provider for optional single sign-on, and cloud hosting providers engaged under data processing terms. A current list of sub-processors is available on request.

Our advertising platforms receive the measurement data described under Cookies and tracking: Reddit for every visitor; daily.dev only from visitors who accept.

Changes to this policy

We may update this policy as the service changes. Where a change materially affects how we handle your data, we will give notice before it takes effect.

Contact

Privacy questions can go to [email protected].

AhuraSense Ltd, registered in England and Wales, company number 16915427.