Vision AI is a free AI chat assistant. This page explains, in plain words, what information it uses, who can see it, and how to get it deleted.
The short version
You sign in with Google or with an email and a password. There are no ads and no tracking cookies, and we never sell your data. The only cookies we set are to keep a sign-in working.
What you type is sent to an AI provider so it can answer you. A copy is kept in our database so abuse can be spotted and stopped.
Your chats, memory, notes and settings are kept on your own device, not in our database.
Incognito is not invisible. It turns off the AI’s memory and keeps your name off the record, but the message is still kept privately so misuse can be reviewed. Only the owner can see it.
You can ask us to delete what we hold about you at any time: Settings → Delete My Data. We email you the answer, and if it is a no, the email says why.
1. Who we are
Vision AI is built and run by Arnav as a personal project. In this policy, “we” means Arnav. You can reach us at askvisionai@outlook.com.
2. What we collect, and why
What you type. Chat messages, image descriptions and web-search questions are sent to our AI providers (section 4) to produce the answer. We also save a copy in our database: the text (up to 4,000 characters), the time, the language and mood the app detected, the kind of request (chat, image, search…), the AI model used, your display name if you gave one, and your device code (see below). We use these records to keep the service safe, to fix problems and to see how it is used. We do not save the AI’s answers, except the first part (about 1,000 characters) of its description of a picture you upload.
Files and pictures you upload. They are read while your question is answered and are not saved. We keep the question you typed and, for pictures, the file name and the start of the AI’s description.
Your account. When you sign up we keep your email address, the name you chose (or Google’s name for you), when you joined and last signed in, and — if you use a password — a scrambled version of it that nobody, including us, can turn back into the password. If you use Google we keep Google’s ID for you; we never see your Google password. Your email address is also saved with the message records above (except in Incognito), so that the owner can tell who is misusing the service. Codes we email you (to confirm your address or reset a password) are kept only as scrambled values and stop working after 10 minutes. We also keep a short history of what happened to an account — it was created, the password was changed or reset, you signed out everywhere, a deletion was asked for or decided, the account was deleted — with the date, who did it (you or the owner) and your device code, so the owner can look into problems and misuse. That history stays after an account is deleted, and it never holds your password or a code. When your password is changed or your account is deleted, we email a notice to the account’s address.
Your display name. The name shown in greetings is kept on your device and in your account, and is sent with your messages to the AI.
Your IP address and device code. We use your IP address to apply the usage limits (see the Terms) and to block abuse. In our database we store only a “device code”: a short code worked out from your IP address. It is not your address, but it is the same every time you connect from the same place, so it can single out a connection — for example to apply a ban. Our hosting provider also keeps ordinary technical logs that include IP addresses.
Usage counters. How many messages you sent today and roughly how much text they used, filed under your device code. They are deleted after a few days.
Safety records. If a message trips a safety rule — an attempt to break the AI’s rules, a request involving violence, hate, children or other illegal content, an image request that is refused, or a message about hurting yourself — we record the text, the time and your device code separately, and the owner may get an alert so it can be looked at. For messages about self-harm the app replies with supportive information and helpline links. This happens in Incognito too.
Bans and deletion requests. If a connection is banned we keep its device code, the reason and the date. If you ask for deletion we keep the request (your account email and name, your device code, the date, and how many messages were found) and what was decided: approved or refused, when, the reason we gave if it was refused, and whether the email to you went out.
3. Incognito mode
Incognito (the switch in Settings) is for chatting without the AI remembering you. It is not a way to chat unseen, and it does not pause any rule. Exactly what it does:
What it changes: the app does not read or write your Memory for that chat, and the record we keep of your message has no name on it.
What it does not change: the message still goes to the AI provider, still counts towards your usage limits, still passes through the same safety checks, and is still saved in our database — without your name, but with your device code.
Who can see it: only the owner. Incognito records are used to review misuse and to block people who abuse the service. They are never shown to other users, never used for advertising, and they follow the same retention time and deletion request as everything else.
Your chats still save on your own device as usual.
4. Who else handles your data
Vision AI is built on outside services. Each gets only what it needs to do its job:
Groq — the AI that writes the answers and reads pictures you upload. It receives your message, the recent chat, and the memory notes and settings the app attaches to your message.
Hugging Face, Cloudflare Workers AI and Pollinations — turn an image description into a picture.
Serper, Tavily and Firecrawl — look things up on the web when you use search. They receive your search words.
Google Firebase (Firestore) — our database, including accounts.
Google Sign-In — only if you choose “Continue with Google”. Google tells us your email address, name and ID after you agree.
Gmail (through a Google Apps Script) or Brevo — deliver the emails we send you: confirmation and password-reset codes, notices about your account, and the answer to a deletion request. They see your email address and what the email says.
Render — hosts Vision AI and keeps ordinary technical logs, which include IP addresses.
Google Fonts, jsDelivr and cdnjs (Cloudflare) — supply the fonts and code libraries the page loads. Your browser contacts them directly, so they can see your IP address, as with most websites.
These providers may handle data in other countries, including the United States, under their own privacy policies. We do not sell your data or share it for advertising. We may pass on a record if the law requires it, or to protect someone from serious harm.
5. Cookies and what stays on your device
Vision AI has no advertising or tracking cookies and no analytics. Your chats, folders, memory, notes, settings and display name are saved in your browser’s local storage, on your own device. Clearing your browser data, or using Settings → Full Reset, removes them. (We set two kinds of cookie, both only to keep a sign-in working: one keeps you signed in to your account — for up to 30 days, or until you sign out — and one is a sign-in cookie for the owner’s private admin page.)
6. How long we keep things
Your account: until you delete it (Account → Delete account), or ask us to. Signed-in sessions last up to 30 days.
Logged messages and safety records: kept for up to 12 months, then deleted automatically.
Usage counters: about 3 days.
Bans: until the owner removes them.
Deletion requests and the account history: a request that is still waiting stays until the owner decides it. After that, a decided request and the account history are kept for up to 12 months, then deleted automatically.
On your device: until you clear them.
7. Your choices and rights
Delete what we hold. Settings → Delete My Data sends us a request. We check each request before approving it, so that records of abuse cannot be wiped to dodge a ban. Once it is approved, we delete the messages and safety records linked to your device code — Incognito ones included. We find your records by device code (and by your account email), so we can only find what came from the connection and account you are using when you ask. We email the account’s address with the decision. If we refuse, the email gives the reason. Approving a request does not delete your account or the chats saved on your own device; for those use Delete account and Full Reset.
Delete your account. Open your account (your name at the top of the sidebar) → Delete account. Your sign-in details are removed at once; messages already in the log follow the deletion request above.
Stop the AI remembering you. Turn on Incognito, or clear your Memory in Settings.
Your own copy, and your device. Export your chats from Settings, or wipe everything on your device with Full Reset.
Your rights by law. Where the law gives you rights over your data (for example access, correction or deletion), we will respect them. Use the options above, or contact us.
Deleting from our database does not reach copies held by our providers under their own policies.
8. Children
Vision AI is for people aged 13 and over. The app asks you to confirm your age the first time you use it, and we do not knowingly keep information from children under 13. If you think a child under 13 has used it, tell us and we will delete their records.
9. Security
Connections to Vision AI are encrypted (HTTPS), and the site tells your browser to use only HTTPS. The database is used only by the app’s own back end, and passwords are stored only as scrambled values. Too many wrong passwords or wrong codes lock a sign-in for a while, and you can end every sign-in on every device from your account (Sign out everywhere). We email you if your password is changed or your account is deleted. The owner’s admin page needs a password, locks after wrong guesses, and accepts actions only from this site. No system is perfectly secure, so please do not type passwords, ID or bank numbers, or other people’s private details into a chat.
10. Changes
We may update this policy. The date at the top shows the latest change, and we may also post a notice in the app.
11. Contact
To have your data deleted, use Settings → Delete My Data. You can also email askvisionai@outlook.com. The rules for using Vision AI are in the Terms of Service.