Last updated · May 9, 2026

Privacy.

The whole policy in one sentence: we don't run an inference server, and we never see your prompts. The longer version is below.

TL;DR

Vehla is a local-first macOS app. The text you process never touches a Vehla server. When you use a cloud provider (OpenAI, Anthropic, Google, DeepSeek, OpenRouter, Ollama), your Mac talks to that provider directly using the API key you stored in macOS Keychain. When you use a local model (Gemma 4, MLX), nothing leaves your device. We collect the absolute minimum needed to license the software and check for updates.

What we collect

Only what we strictly need:

  • Your email address — to issue and revoke licenses, to send your license key, and to honor refund requests.
  • A hashed hardware ID — derived from a system identifier to count your two-Mac license slots. We can't reverse it to identify your Mac.
  • License events — activation, deactivation, and trial-start timestamps. Stored in Supabase on encrypted-at-rest Postgres.
  • Purchase information — handled by our payment processor (Stripe). We see masked card details and a transaction ID; nothing else.

What we don't collect

  • Your prompts, selections, clipboard contents, or AI outputs.
  • What apps you use Vehla in.
  • What snippets, personas, or memory notes you've configured.
  • Crash reports, telemetry, or "anonymous usage analytics". We removed all of it in 1.3.0.
  • Your prompts or outputs in update, license, or trial requests.

Cloud providers

When you pick a cloud provider, your Mac sends prompts directly to that provider's API. We are not in the loop and have no way to see what you sent. Each provider has its own privacy policy and data-retention behavior:

If you turn on Local AI, none of these are contacted.

Local mode

Local mode runs Gemma 4 models through MLX on your Mac. Vehla makes no cloud-provider request for inference when Local AI is enabled.

API keys

API keys are stored in macOS Keychain, encrypted by the system, scoped to the Vehla app. We don't see them. They never touch our infrastructure. If you uninstall Vehla, the keys remain in Keychain until you remove them from Keychain Access.

Update checks

Vehla periodically fetches https://vehla.s3.us-east-2.amazonaws.com/update.json to check for a newer build. The request does not include prompts, outputs, snippets, personas, clipboard contents, or selected text.

Analytics

Vehla itself has no product analytics. This static website does not currently include an analytics script.

Cookies on this site

None. Not a single cookie is set when you browse vehla.app. Theme preference (dark/light) is stored in your browser's localStorage, which is local to your browser and never sent to us.

Your rights (GDPR, CCPA, etc.)

You can:

  • Access what we have on you (an email address, a hashed hardware ID, license events).
  • Delete all of it. Your license is revoked when you do.
  • Export it as JSON.
  • Object to any processing. We process only what's needed to deliver the license and the software you paid for.

Email kailaconsulting@outlook.com from the address tied to your license. We respond within 7 days.

Contact

Kaila Consulting Inc. · Ottawa, Canada · kailaconsulting@outlook.com