Privacy Policy

Summary

Vale is built local-first. Usage history stays on your device. Email sign-in is required, and the provider accounts you connect — including the sign-ins Vale needs to read them — sync to your account on Vale's servers so each of your devices can check them. Your usage history is never synced. The browser extension talks only to the Vale app on your machine. The Android app sends crash and error reports so we can fix bugs. Paid plans are processed by Stripe or Paymob; Power trials are owned by Vale and do not require a card.

Who we are

This policy covers the Vale desktop app, the Vale for Android companion app, the Vale Credential Connector browser extension, and the website at valeapp.app (together, “Vale”).

Data on your device

The desktop app stores usage history and related monitoring data locally (SQLite on your machine). The Android app keeps its own usage history, activity, and alert state in a local database on the phone. Neither history is uploaded as part of an account profile.

On Android, background monitoring runs as a foreground service on the refresh period you choose and posts system notifications for low quotas, limit resets, and connection problems. Notification content stays on the device; it is not sent to Vale's servers.

Provider credentials and session material needed to refresh usage are also kept by each app on the device so it can update balances and quotas. Protect access to your device the same way you would any tool that holds signed-in sessions.

Account

Email sign-in is required to use Vale (there is no guest mode). We process account identifiers needed for authentication (for example email) through our auth provider so Vale can sync provider connections across your devices and associate Free / Power entitlement.

Provider connections and sign-ins

When you connect a provider (for example Claude, Cursor, or OpenRouter) in Vale for desktop, the connection is saved to your account in our database, hosted by Supabase. A connection holds the provider, the name you gave it, and the sign-in Vale needs to read that account: an API key, a session token or cookie, or an OAuth token pair, depending on the provider. This lets the Android app and your other computers check the same accounts without connecting them again.

• Connections travel over TLS, are encrypted at rest, and are locked to your account by row-level security, so only you, signed in, can read or change them.
• Vale uses a sign-in only to read that account's usage, limits, credits, and plan from the provider. It does not post, buy, or change anything in your provider accounts.
• Some providers issue short-lived tokens. When one expires, the desktop or Android app renews it with the provider and saves the new one back to your connection, so the account keeps working on your other devices.
• Removing a connection in Vale for desktop deletes it from your account. Signing out of the provider, or revoking the key there, also stops Vale from reading it.

Connection sync is separate from usage history. History remains in local storage on each device unless a future product change says otherwise — and we will update this policy if that changes.

If you opt in to the weekly email digest (Power), we email a usage summary derived from on-device history to your signed-in address. Raw history is not uploaded with that digest beyond what is needed to build and send the summary.

Billing and payments

If you subscribe to Power, payment and subscription data are processed by Stripe and/or Paymob (our payment processors), depending on your Payment Provider preference and region. A processor may receive identifiers such as your email, customer ID, payment method details, and invoice history according to that processor’s privacy policy.

Power trials are granted by Vale without sending card details to a payment processor. We store entitlement status (for example Free, Power, trialing) needed to unlock features. You can update payment methods, view invoices, and cancel from Settings → Billing in Vale for desktop (when a paid subscription exists). The Android app shows your plan and past invoices but does not take payments.

We do not store full card numbers on Vale servers. Lifetime complimentary grants, if issued, may appear as Power without a payment-processor subscription.

Browser extension

Vale Credential Connector reads a signed-in session on supported provider sites (when you choose Connect) and sends it to the Vale desktop app on localhost. The extension itself does not send those credentials to Vale servers; the desktop app then saves the connection to your account as described under Provider connections and sign-ins.

The extension only runs the connect flow when you trigger it, and only for sites it is designed to support.

Crash and error reports (Android)

The Android app uses Sentry to report crashes and errors, with the app version, device model, and Android version, plus timing data for a sample of app activity. When an error happens, Sentry may also keep a short replay of the screens leading up to it, with all text and images masked. Reports do not include your email address, provider sign-ins, or usage history. Reports are processed in Sentry's EU region and kept according to Sentry's retention period. Vale for desktop does not send crash reports.

Website, waitlist, and feedback

If you joined the waitlist during early access, we keep the email address you submitted so we can send launch and product updates. You can unsubscribe from those emails using the link in a message, or by contacting us.

If you submit the feedback form, we collect the email and details you provide (and optional diagnostics such as Vale version, OS, and provider) so we can investigate and reply. Do not include passwords, session cookies, or API keys. Feedback may be retained as long as needed to handle your request and improve the product.

Account email (when you sign in) and waitlist email may both be processed so we can operate access and support. This site does not rely on advertising trackers. It loads its typeface from Google Fonts, so your browser requests font files from Google’s servers. Standard server or host logs (for example IP, user agent, and request path) may be processed by our hosting provider to operate and secure the site.

Deleting your account

You can delete your account from Settings → Account → Delete account in Vale for desktop or the Android app, or by emailing us. This deletes your account and every synced connection with its sign-ins, and cancels any Power subscription. See Delete your Vale account for exactly what is removed and what is kept.

What we do not sell

We do not sell your personal information.

Retention

• Local app data — on desktop, usage history is kept according to your retention setting (Free up to 30 days; Power up to 365 days in Settings). On Android, you choose 30 days, 90 days, 1 year, or unlimited in Settings → History. Older entries are pruned automatically, or when you prune or clear history. Remaining local data is removed when you delete it or uninstall Vale.
• Account and connections — kept while your account is active; remove a connection to delete it, or delete your account to remove them all.
• Crash reports (Android) — kept by Sentry for its standard retention period, then deleted.
• Billing records — Stripe or Paymob retains payment records per its policies; we retain entitlement needed to operate your plan.
• Waitlist email — kept until you unsubscribe or we close the waitlist list, whichever comes first.
• Feedback submissions — retained as needed to handle your request and improve the product.

Security

We use reasonable technical and organizational measures appropriate to a local-first desktop product and a small marketing site. No method of transmission or storage is perfectly secure. Keep your device and accounts protected.

Children

Vale is not directed at children under 16, and we do not knowingly collect their personal data.

Changes

We may update this policy as the product evolves. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy: support@valeapp.app · Contact Us.

This page describes how Vale is intended to work. It is a product-accurate draft, not formal legal advice.