Privacy Policy

This Privacy Policy explains how Vice ("Vice", "we", "us", or "our") collects, uses, discloses, retains, and protects information when you visit usevice.com, join our waitlist, or use the Vice mobile application and related services (collectively, the "Services"). Vice is a personal micro-savings tool that helps you redirect the money you would have spent on an impulse purchase into savings or investments.

This policy applies to all users of the Services. It does not apply to third-party websites, financial institutions, or applications that we link to or integrate with, each of which is governed by its own privacy practices. Vice is not a bank. Deposit, custody, brokerage, and payment services, where offered, are provided by regulated third-party partners whose own privacy notices and disclosures will be presented to you before those services begin.

By using the Services you acknowledge the practices described here. Where required by law, we will obtain your consent separately, and you may withdraw that consent at any time as described in the "Your rights and choices" section.

Information you provide. Name, email address, and any message content you submit through waitlist, support, or feedback forms. If and when the app launches with accounts, this may also include a password or authentication credential, profile preferences, savings goals, vice categories, target amounts, and content you choose to store in the app.

Financial connection data. If you choose to link an external bank, card, or brokerage account, our regulated aggregation and payment partners collect account credentials directly. We do not receive or store your online banking username or password. We may receive tokenized account identifiers, institution name, account type, masked account numbers, balances, and transaction metadata necessary to detect qualifying spending and move money you authorize.

Identity verification data. Where a financial feature requires it, our partners may collect legal name, date of birth, address, phone number, government identifier, and identity documents to satisfy Know Your Customer, anti-money-laundering, and sanctions-screening obligations. We may receive only the verification result and limited status information.

Automatically collected data. Device model, operating system and version, app version, language and locale, time zone, approximate location derived from IP address, IP address, crash logs, diagnostic events, referring URLs, pages or screens viewed, and interaction timestamps.

Communications data. Records of emails and in-app messages, delivery and bounce status, and, where permitted, whether a message was opened or a link clicked, so we can measure deliverability and reduce unwanted mail.

Information from others. Referral source, analytics providers, fraud-prevention vendors, and financial partners acting on your instruction.

We do not knowingly collect precise GPS location, contacts, photos, biometric templates, or health data. If a future feature requires any of these, we will request explicit in-app permission first and explain the purpose at the point of collection.

We use information to:

• Create, operate, secure, and maintain your account and the Services.
• Detect qualifying purchases you designate as "vices" and calculate the redirect amount.
• Initiate and reconcile transfers you explicitly authorize.
• Show balances, streaks, projections, and savings insights.
• Send transactional messages: confirmations, receipts, security and service notices.
• Send product updates and marketing where permitted, always with a one-click unsubscribe.
• Provide customer support and investigate reported problems.
• Prevent, detect, and investigate fraud, abuse, unauthorized access, and other harmful activity.
• Measure and improve the Services through aggregated and de-identified analytics and product research.
• Comply with legal, regulatory, tax, audit, and recordkeeping obligations and enforce our Terms of Service.

We do not use your transaction data to build advertising profiles, and we do not sell your financial data.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (operating the Services you request); legitimate interests (security, fraud prevention, service improvement, and non-intrusive direct marketing to existing users), balanced against your rights; consent (optional analytics, certain cookies, and marketing where consent is required), which you may withdraw at any time; and legal obligation (financial, anti-money-laundering, tax, and accounting requirements).

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers. Cloud hosting, database, email delivery, error monitoring, analytics, and customer-support vendors bound by contract to process data only on our instructions.
• Financial partners. Banks, brokers, processors, and data-aggregation providers, strictly to deliver a feature you enable.
• Legal and safety. When required by law, subpoena, or valid legal process, or where necessary to protect the rights, property, or safety of Vice, our users, or the public. Where legally permitted, we will attempt to notify you first.
• Corporate transactions. In a merger, acquisition, financing, or asset sale, subject to this policy continuing to apply to the transferred information.
• With your direction. Any other disclosure you specifically request or authorize.

Plaid Integration:

Vice uses Plaid Inc. (“Plaid”) to connect your financial accounts. By linking your bank account through our application, you grant Vice and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial data from your financial institution. Your personal and financial information will be handled, stored, and processed in accordance with Plaid’s End User Privacy Policy.

We use encryption in transit (TLS 1.2+) and encryption at rest for stored data, network isolation, least-privilege access controls, row-level database authorization so that waitlist and account records are not readable from the browser, secret management for credentials, audit logging, and routine dependency and vulnerability scanning. Access to production data is limited to personnel who need it and is logged.

No system is perfectly secure. You are responsible for protecting your device, your email account, and any credentials you use with the Services. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators as required by law and without undue delay.

Waitlist records are retained until you ask us to delete them or until the waitlist program ends, whichever comes first. Account records are retained while your account is active and then deleted or de-identified within a reasonable period after closure, except where a longer period is required: financial transaction records may be retained for up to seven years to satisfy legal, tax, audit, and anti-money-laundering obligations. Backups are purged on a rolling schedule. Aggregated or de-identified data that cannot reasonably be linked to you may be retained indefinitely.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal information; the right to data portability; the right to withdraw consent; and the right not to be discriminated against for exercising a right. California residents have rights under the CCPA/CPRA, including the right to know categories collected, disclosed, and sold or shared (we do not sell or share), and the right to limit use of sensitive personal information. Virginia, Colorado, Connecticut, Utah, Texas, and other state residents have comparable rights, including appeal of a denied request.

Submit a request to privacy@usevice.com. We will verify your identity through the email address on file or, for accounts, an in-app confirmation, and respond within the period required by law (generally 45 days, extendable once). Authorized agents may submit requests with written permission.

You can unsubscribe from marketing email at any time using the link in any message. Transactional messages about security, transfers, or account status are not optional while you have an account. You can disable push notifications in your device settings.

Our website uses strictly necessary cookies and local storage to keep the site working, and may use privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising cookies. Where required, we will present a consent banner and honor Global Privacy Control signals. You can block or delete cookies in your browser, though some features may not function.

We operate in the United States, and our service providers may process data in the United States and other countries. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism, together with supplementary technical measures such as encryption.

The Services are not directed to children under 13 (or under 16 where a higher age applies), and financial features require you to be at least 18. We do not knowingly collect personal information from children. If we learn we have, we will delete it promptly. A parent or guardian may contact us at privacy@usevice.com to request deletion.

Data collected by the Vice app is described in our App Store privacy label and Google Play Data safety section, which we keep consistent with this policy. We request device permissions only at the moment a feature needs them and the app remains usable, in reduced form, if you decline optional permissions.

App Store purchases, subscriptions, and refunds are handled by Apple or Google under their own terms and privacy policies; we receive only the transaction confirmation and entitlement status, never your full payment card details.

We may update this policy as the Services evolve. We will revise the "Last updated" date and, for material changes, provide prominent in-app or email notice before the change takes effect. Continued use after the effective date constitutes acceptance.

Questions, requests, or complaints: privacy@usevice.com. EEA/UK users may also lodge a complaint with their local supervisory authority.