Vilko by Ajna Inc
Privacy policy
Ajna Inc (“we”) makes Vilko. This policy explains what information Vilko collects, what we use it for, and what we can’t see. It covers the Vilko apps, vilko.io, and Ajna Identity, the account service you sign in to Vilko with.
In short
- Your messages, files, calls, calendar, tasks and documents are end-to-end encrypted. We can’t read them.
- To run your account we hold your email address, the name you sign up with, your devices, and the delivery details our servers need.
- We don’t show ads, we don’t use analytics or tracking tools, and we don’t sell your information.
What we can’t see
Vilko encrypts your content on your devices before it reaches our servers. Only the devices in a conversation or workspace hold its keys, so we store and pass on your content only in encrypted form. That includes:
- messages, threads and reactions;
- channel and workspace names, and the workspace’s own member list and roles;
- your profile name, status and picture;
- files, documents, sheets and books;
- calendar events and tasks;
- voice and video calls, including when they pass through our relay servers.
Search runs on your device, so we never see what you search for.
Encryption hides what you say, not who you say it to. To deliver content, our servers do see which devices are in each conversation, which account each device belongs to, their roles and status there, and when encrypted items are sent (see “Delivery details” below).
What we collect
| Information | What we use it for | How long we keep it |
|---|---|---|
| Email address | Creating your account, signing you in, one-time codes, security notices and workspace invitations. | Until you delete your account. |
| The name you enter at sign-up | Labelling your account and your passkeys. If you leave it blank, we use the part of your email address before the @. | Until you delete your account. |
| Passkey and recovery details | Your passkeys’ public keys, to check that it’s you signing in, and which recovery methods you’ve set up. We never receive a passkey’s private key. | Until you remove them or delete your account. |
| Devices and sessions | Each device’s name (such as “Chrome on Android”), its platform and when it signed in, so you can see and remove your devices. Signing out in Vilko ends both its session and your Ajna Identity session (if your device is offline, it finishes when you are back online and keeps you signed out meanwhile). Signing out only on Ajna Identity leaves Vilko’s current sign-in valid for up to 5 minutes. | Until you remove the device or delete your account. Sessions end after a period without use. |
| Notification registration | A token from Google Firebase Cloud Messaging, a random install ID and the app version, so we can tell the app that something new has arrived. Notifications carry no message content. | Until you sign out, or after 60 days without use. |
| Delivery details | Which conversations, channels and workspaces your devices belong to (by their identifiers, not their names), each device’s identifier and which account it belongs to, each member device’s role and status in a conversation (such as admin, active or removed), when encrypted items are sent and received, and how large they are. Together these show our servers who is in which conversation with whom. We need them to deliver content to the right devices and to enforce who may join. | While you are a member. |
| Encrypted content | The encrypted messages, files and documents your devices send, so that other members’ devices can receive and sync them. We can’t decrypt them. | Items queued for a device expire after 30 days. Encrypted history is kept for the members of each conversation. |
| Password vault (if you use it) | Your vault is stored on Ajna Identity (id.ajna.surf), encrypted on your device with keys from your passkey before it is sent, so we can’t read the passwords or notes in it. We hold the encrypted vault, its size and when it changed, so your devices can sync it. | Until you delete the vault or your account. |
| Abuse protection | IP addresses and email addresses, stored only as hashes, to limit repeated attempts. One-time codes expire within 10 minutes. | As long as each limit needs them. |
| What you send us | Answering you when you write to us. | As long as we need to answer you and keep a record of it. |
How we use it
We use this information only to run Vilko: to sign you in and keep your account secure, deliver your encrypted content and notifications, help you recover access, protect the service from abuse, and answer you when you write to us.
We don’t use it for advertising. We don’t use analytics or crash-reporting tools, and we don’t sell or rent your information.
Who else handles it
These service providers process information for us, only to run Vilko:
| Provider | What it does | What it handles |
|---|---|---|
| Fly.io | Runs our servers, in its Singapore region. | The information above, and your IP address when you connect. |
| Tigris Data | Stores files. | Encrypted files only. |
| Mailgun | Sends our emails. | Your email address and the emails we send you. |
| Google Firebase Cloud Messaging | Delivers notifications to the Android app. | Your notification token. Notifications carry no message content. |
| Google STUN servers | Help two devices find a network path for a call. | Your IP address during a call. |
Our own relay servers carry call media when two devices can’t connect directly; the media stays end-to-end encrypted. Your passkeys are kept by your device or password manager (for example Google Password Manager or iCloud Keychain), under its own terms.
We disclose information to anyone else only when the law requires it, and only what we hold. We can’t disclose content we can’t decrypt.
Your choices and rights
- See and remove your devices, passkeys and sessions in Vilko.
- Turn notifications off in your device’s settings.
- Ask for a copy of the information we hold about you, or for a correction, by writing to privacy@ajna.inc.
- Delete your account: see Delete your Vilko account.
Depending on where you live, you may have further rights over your information, such as objecting to how we use it, and you can complain to your data protection authority. We answer requests within 30 days.
Android app permissions
- Camera and microphone: only for calls you start or join.
- Notifications: to tell you when something new arrives.
- Network access: to connect to our servers.
Your device’s screen lock or biometrics may unlock your passkey. That check happens on your device, and we never receive it. The app doesn’t ask for your location or your contacts, and Android cloud backup is off for it.
Children
Vilko isn’t meant for children under 13, and we don’t knowingly collect information from them. If you think a child under 13 has an account, write to privacy@ajna.inc and we’ll delete it.
Security
Connections to Vilko are encrypted, the information we hold is encrypted at rest, and your content is end-to-end encrypted. Accounts use passkeys instead of passwords. No system is perfectly secure; to report a security problem, write to security@ajna.inc.
Where it’s processed
Our servers are in Singapore. Your connection first reaches Fly.io’s network at the location nearest you (for example in the United States), where the encrypted connection (TLS) is received, and travels on to Singapore over Fly.io’s network. Some providers, such as Mailgun and Google, process information in the United States and elsewhere, so your information may be processed outside your country.
Changes
When this policy changes we update the date at the top. If a change affects how we use your information, we tell you in Vilko or by email before it takes effect.
Contact
Ajna Inc. Privacy questions and requests: privacy@ajna.inc. Security: security@ajna.inc.