Privacy Policy

Last updated: June 7, 2026

Vanta is a lightweight iOS app for browsing your Obsidian vault and capturing notes, stored in your own private GitHub repository. This policy explains what data the app handles.

The short version

Your data moves directly between your device and GitHub. We do not collect, store, see, sell, or share any of your data. We run no analytics and no tracking. The only server involved is a stateless sign‑in helper used once during login (described below) that stores nothing.

What the app accesses

• Your GitHub account. You sign in with GitHub's official OAuth. Vanta requests the repo scope so it can read the vault repository you choose and write your captures and edits back to it. Completing GitHub login requires exchanging a one‑time login code for an access token using a secret that can't safely live in the app, so Vanta uses a minimal, stateless sign‑in helper (a Cloudflare Worker) that performs only that exchange and immediately hands the token back to your device. It stores nothing, logs no personal data, and never has access to your notes. The resulting access token is then stored securely on your device (iOS Keychain, and an app‑group container so the widget and share extension can capture on your behalf), and is used only in requests sent directly to GitHub's API.
• Your notes. Note content is fetched from, and written to, your GitHub repository over an encrypted connection. A copy is cached on your device for offline reading. Note content is never sent anywhere other than GitHub.
• Microphone & speech (optional). If you use voice capture, audio is transcribed on your device using Apple's Speech framework. Audio and transcripts are not sent to us or any third party.

What we collect

Nothing. Vanta has no accounts, analytics, advertising, or third‑party SDKs, and the sign‑in helper stores nothing. There is no data for us to collect.

Data deletion

Sign out in Settings to remove the stored GitHub token and local cache from your device. To revoke Vanta's access entirely, remove the authorization in your GitHub account settings (Settings → Applications).

Contact

Questions? Email support@shanev.ai.