Draft for testing. This policy is still being checked and may change.
Vallo privacy policy (draft for testing)
Last updated: [date you approve it]
Who we are
Vallo is an early test version of a private career partner for employees in Australia: a personal, non-commercial project run by [your name]. Contact: hello@myvallo.com.
The short version
- Your records are yours. They're saved in your own Google Drive, in a folder Vallo made.
- Vallo's server keeps no record of anything you write.
- No ads, no tracking, no analytics, and your data is never sold.
- You can export everything, delete everything, or remove Vallo's access at any time.
What Vallo holds, and where
In your Google Drive, in your Vallo folder: your entries and their seals, corrections, records Vallo made that you kept, your "About me" profile and its versions, documents, notes and email threads you brought in, what you said you sent, and your 1:1 rhythm and notes on what to raise. Vallo can only see files it made, or files you pick in Vallo (Google's "drive.file" access). You can open, move or delete these files in Google Drive without Vallo. Google Drive may keep its own older copies for up to 30 days.
On your phone: your Google sign-in, anything not finished or saved yet (including notes or emails you pasted), a copy of your entries and records for searching, recent error codes for support (no content), and your settings. Signing out removes them.
In your calendar, if you add 1:1 reminders: only "Vallo: prepare for your 1:1" and a link.
On Vallo's server, in Sydney (Amazon Web Services, Australia):
- your email address, on the invite list;
- a scrambled version of your Google account ID (a one-way fingerprint), with how many AI requests you make each day (kept 35 days), how many questions a catch-up session asked (kept 1 day), and which days you use Vallo (kept 35 days, reported only as totals, such as the share of people who came back within 14 days).
Nothing you write is kept on the server. Server logs hold only technical details such as whether a request worked, never your words.
When you ask for AI help
When you ask Vallo to make a record, answer a question, draft an email, read a document you imported, find where your old notes start, suggest things from emails others sent you, or ask the next catch-up question, the words that task needs (and your profile, if you have one, for the tasks that use it) go through Vallo's server to Claude, an AI made by Anthropic, running on Amazon Bedrock in Australia. They're used for that answer only. Neither Vallo nor Amazon keeps them afterwards, and they aren't used to train AI. Your own emails are never sent: only emails others wrote, without signatures, email addresses or phone numbers.
Vallo's web addresses (myvallo.com and app.myvallo.com) reach Vallo's server through Amazon CloudFront, which passes requests straight on, encrypted, and keeps no copies or logs.
Seals
To show when each entry was written, Vallo sends only a scrambled fingerprint of it (never your words) to public timestamp services, which are outside Australia: the OpenTimestamps calendars run by OpenTimestamps, Eternity Wall and Catallaxy.
What other services can see
When your phone connects to Google (for sign-in and Drive) or to the timestamp services, they see your phone's internet (IP) address, as any website does. Signing in happens on Google's own page, under Google's own terms. Vallo's own pages set no cookies.
Why Vallo holds what it holds
- Your email: to let only invited testers in.
- The scrambled ID and counts: to apply a fair daily limit on AI requests, and to know, in totals only, whether people find Vallo useful enough to come back.
- Everything in your Drive and on your phone: to give you the service you asked for.
Health information
Vallo is a career tool, not a health service. It doesn't ask for health information, and its AI is told to leave health details out of anything it makes. If you write about your health in an entry, it stays in your own Drive, like anything else you write.
Your choices
- Export everything (More → Your data): one file, made on your phone.
- Delete everything (More → Your data): removes Vallo's files from your Drive and this phone, and asks the server to erase your counts.
- Remove Vallo's Google access: in your Google Account (myaccount.google.com, Security, Your connections to third-party apps).
- Correct something: add a correction to any entry. Your original is kept unchanged.
Overseas
Your Drive is held by Google, which may store data outside Australia under its own terms. Seals use services outside Australia (fingerprints only). Vallo's server and its AI run in Australia.
Questions and complaints
Email hello@myvallo.com. If you're not happy with the answer, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
If this policy changes, Vallo will tell you in the app before the change applies.
Need to talk to someone now? Lifeline: 13 11 14, any time, day or night.