Privacy Policy

Last updated: 17 July 2026

VANTA LABS NW LTD, trading as Vanta Labs, develops and operates Guardian, Herf Station, Cigar Ledger, Parent Quest, Vanta Shift and the Vanta Labs website.

This Privacy Policy explains what personal information we collect, how we use it, when it may be shared and the choices available to users.

We keep data collection as limited as reasonably possible. We do not sell personal information.

1. Who we are

The organisation responsible for the personal information covered by this Privacy Policy is:

VANTA LABS NW LTD
Company number: 17095243
Trading as: Vanta Labs
Email: support@vantalabs.co.uk

In this Privacy Policy, “Vanta Labs”, “we”, “us” and “our” refer to VANTA LABS NW LTD.

2. Information we may collect

The information we collect depends on which app or service is used, which features are enabled and which device permissions are granted.

Account information

Where an app requires or supports an account, we may process:

• email address;
• display name;
• sign-in provider;
• account identifiers;
• family or group identifiers; and
• authentication information required to sign the user in securely.

Where a user signs in through Apple, Google or another authentication provider, we receive only the information made available by that provider in accordance with the user’s settings and authorisation.

Guardian location information

When Guardian location-sharing or safety features are enabled, Guardian may process:

• precise device location;
• background location where permission has been granted;
• location accuracy and timestamps;
• location history;
• safe-zone locations;
• safe-zone arrival and departure events; and
• family-group information needed to display location information to connected family members.

Location permissions can be managed through the device settings. Disabling precise location, background location or related permissions may prevent Guardian features from working correctly.

Guardian SOS and safety information

Guardian may process:

• SOS and safety-alert events;
• event timestamps and status;
• device battery information;
• relevant device status;
• connected family-member information;
• push-notification tokens; and
• notification information needed to send alerts.

Herf Station information

Herf Station may process:

• account information;
• profile information;
• lounge information;
• lounge participant information;
• reports or moderation information where applicable;
• push-notification information; and
• technical connection information needed to operate lounges.

Herf Station may transmit voice and video in real time to provide lounge features.

Vanta Labs does not intentionally record or permanently store the contents of live lounges unless participants are clearly informed before recording begins.

Other lounge participants may hear or see information communicated during a lounge. Users should not share private or sensitive information they do not want other participants to receive.

Subscription and purchase information

Apple, Google or another authorised app-store provider may provide:

• subscription status;
• product identifiers;
• entitlement status;
• renewal, expiry or cancellation status;
• transaction references; and
• information required to verify or restore a purchase.

Vanta Labs does not receive or store complete payment-card details. Payments are processed by the relevant app store or payment provider.

Technical and diagnostic information

We may process limited technical information required to operate, secure and improve our apps, including:

• device type;
• operating system;
• app version and build number;
• crash reports and error information;
• performance diagnostics;
• security logs;
• authentication events;
• push-notification tokens; and
• basic technical events needed to investigate faults or prevent abuse.

We do not use this information to track users across unrelated companies’ apps or websites for behavioural advertising.

Website and support information

When someone visits our website or contacts us, we may receive:

• information submitted through a contact form;
• email address and message contents;
• support correspondence;
• basic server logs;
• IP address;
• browser or device information; and
• cookie or analytics information where those features are enabled.

3. Information stored only on the user’s device

Some Vanta Labs apps store their main app information locally on the user’s device rather than sending it to Vanta Labs.

This may include:

• child names or nicknames, tasks, rewards and progress entered into Parent Quest; and
• shift times, hourly rates, estimated earnings and settings entered into Vanta Shift.

Unless a feature clearly states otherwise, Vanta Labs does not receive or have access to information stored only on the user’s device.

Local information may be lost or deleted if the app is uninstalled, its local storage is cleared, the device is reset, the device is lost or damaged, or the user deletes the information within the app.

Vanta Labs may not be able to retrieve, restore, export or delete information stored only on a user’s device.

4. How we use information

We use personal information only where reasonably necessary to:

• create and authenticate accounts;
• provide requested app features;
• connect authorised family members;
• display Guardian family locations;
• maintain Guardian location history;
• detect Guardian safe-zone arrivals and departures;
• send Guardian SOS and safety notifications;
• operate Herf Station lounges;
• deliver push notifications;
• verify and restore subscriptions;
• maintain security;
• prevent fraud, abuse and unauthorised access;
• investigate technical problems;
• diagnose crashes and errors;
• respond to support requests;
• maintain appropriate business and transaction records; and
• comply with legal obligations.

Depending on the circumstances, we process information because it is necessary to provide the requested service, necessary for our legitimate interests in operating secure and reliable services, based on consent where required, or necessary to comply with a legal obligation.

5. Guardian location and safety features

Guardian is designed to help authorised family members share device locations and receive safety-related notifications.

Who can see Guardian information

Guardian location and safety information may be visible to authorised members of the relevant connected family group.

The family organiser or account holder is responsible for deciding who is invited, inviting only people they trust, protecting access to the account and removing members when access is no longer appropriate.

Vanta Labs does not independently verify every claimed family relationship or every claim of parental responsibility.

Location accuracy and notification limitations

Guardian relies on devices, networks, operating systems and third-party services outside our complete control.

Location information, location history, safe-zone events, push notifications and SOS alerts may be delayed, inaccurate, incomplete, duplicated or unavailable because of internet or mobile-network availability, GPS accuracy, device hardware, battery level, battery-saving settings, disabled permissions, notification settings, operating-system restrictions, app termination, device shutdown, incorrect safe-zone settings or third-party service interruptions.

Guardian is not an emergency service

Guardian is not an emergency service, alarm-monitoring service, medical device, professional safeguarding service or guaranteed location-tracking service.

Guardian must not be relied upon as the sole means of protecting or locating a person or obtaining emergency assistance.

If someone may be in immediate danger, contact the appropriate emergency services directly.

6. Children’s privacy

Guardian and Parent Quest include features intended to be managed by parents or guardians.

If an adult creates or manages a child profile, connects a child device, adds information relating to a child, enables Guardian location sharing for a child or allows another person to view a child’s location, that adult confirms that they are the child’s parent or legal guardian, or otherwise have appropriate authority.

Parents and guardians are responsible for using the apps lawfully, acting in the child’s best interests, explaining location sharing or monitoring where appropriate, ensuring device permissions are appropriate, controlling who is connected and removing access when it is no longer appropriate.

Guardian must not be used for stalking, harassment, domestic abuse, coercive or controlling behaviour, covert monitoring without appropriate authority, unauthorised workplace monitoring or any other unlawful surveillance.

Where a privacy request concerns a child, we may request reasonable evidence of identity, parental responsibility or other authority.

7. App-specific information

Guardian

Guardian may process account and family-group information, child profile information, precise and background location, location accuracy and timestamps, location history, safe-zone information, arrival and departure events, SOS and safety events, device battery or status information, push-notification tokens and notification records.

This information is used to provide family location sharing, location history, safe-zone notifications and SOS functionality.

Herf Station

Herf Station may process account and profile information, lounge and participant information, moderation or report information where applicable, push-notification information, technical connection information and real-time voice or video required to operate lounges.

Herf Station is intended only for adults who meet the minimum age stated in its app-store listing and Terms of Use.

Lounges are community spaces. Other participants may hear or see information users choose to disclose.

Cigar Ledger

Cigar Ledger displays cigar information, indicative prices and links to independent third-party retailers to help adult users find where cigars may be available.

Cigar Ledger does not collect or store user-created cigar lists, cigar notes, favourites or cigar preference profiles.

Cigar Ledger may process limited technical and subscription information required to operate the app, verify premium access, restore purchases, diagnose faults, prevent abuse and maintain security.

Prices, availability and product information are provided for convenience only and may be inaccurate, incomplete or out of date. Users must verify all information directly with the retailer before making a purchase.

Vanta Labs does not sell cigars or tobacco products, process retailer payments, fulfil orders, or act as a tobacco retailer, distributor or importer. We do not guarantee third-party prices, stock, products, delivery or services.

Links to third-party retailers are provided solely for convenience. Retailers operate independently and have their own privacy policies and terms.

Cigar Ledger is intended only for adults who meet the minimum age stated in its app-store listing and Terms of Use.

Parent Quest

Parent Quest is a parent-managed chore, checklist and reward app.

Information entered into Parent Quest, such as child names or nicknames, tasks, rewards and progress, may be stored locally on the user’s device.

Unless a feature clearly states otherwise, Vanta Labs does not receive or have access to this locally stored information.

Parent Quest may process limited technical and subscription information needed to operate the app, verify premium access, restore purchases, diagnose faults and maintain security.

Rewards recorded in Parent Quest are created and managed by the parent or guardian. Vanta Labs does not issue, fund, guarantee or enforce those rewards.

Vanta Shift

Vanta Shift is a shift and estimated-earnings calculator.

Shift times, hourly rates, estimated earnings and related settings may be stored locally on the user’s device.

Unless a feature clearly states otherwise, Vanta Labs does not receive or have access to this locally stored information.

Vanta Shift may process limited technical and subscription information needed to operate the app, verify premium access, restore purchases, diagnose faults and maintain security.

Calculations provided by Vanta Shift are estimates based on information entered by the user. They are not official payroll records, payslips, tax advice, accounting advice, financial advice, employment-law advice or a guarantee of the amount an employer owes or will pay.

Users should verify calculations against official payroll and employment records.

8. Sharing information

We do not sell personal information.

We may share information only where reasonably necessary to operate our services, including with providers of cloud hosting, databases, authentication, backend services, push notifications, app distribution, subscriptions, in-app purchases, crash reporting, diagnostics, real-time communications, website hosting, email and customer support.

These providers may include Apple, Google, Firebase and communications services used to operate Herf Station lounges.

Guardian location and safety information may be shared with authorised members of the connected family group.

Herf Station profile, lounge, voice and video information may be visible or audible to other lounge participants.

We may also preserve or disclose information where necessary to comply with law, respond to valid legal requests, investigate fraud or abuse, enforce our Terms of Use, protect users or protect the life or safety of a person.

9. Storage and security

We use reasonable technical and organisational measures designed to protect personal information, including encrypted network communications, authentication, database security rules, access controls, restricted administrative access, logging, monitoring, token invalidation and security updates where appropriate.

No internet-connected system is completely secure. We cannot guarantee that information will never be accessed without authorisation, lost, corrupted, delayed, interrupted or unavailable.

10. Retention

We keep personal information only for as long as reasonably necessary to provide the relevant service, maintain security, investigate faults or abuse, comply with legal obligations, resolve disputes, address safeguarding concerns, maintain required records and establish or defend legal claims.

Active account information may be retained while the account remains active. Guardian location and safety information may be retained while required to provide location-history and safety features. Push-notification tokens may be retained until replaced, invalidated, removed during sign-out or no longer needed.

Technical, security and support information may be retained for a reasonable period. Purchase and accounting information may be retained where required by law.

Information stored only on a device remains there until removed by the user, the app is uninstalled, local storage is cleared or the device is reset.

Deleted information may remain temporarily in access-restricted backups until those backups are overwritten through the provider’s normal backup cycle.

11. Deleting accounts and information

Where an app provides account-deletion or data-deletion controls, users should normally use those controls to delete their account or information.

Deleting an account may remove access to the account, remove the user from connected groups, delete or anonymise cloud information associated with the account, affect information visible to connected users and end access to premium features.

Deleting an app account does not necessarily cancel an Apple App Store or Google Play subscription. Subscriptions must normally be cancelled through the relevant app-store account.

Uninstalling an app does not necessarily delete account or cloud information.

Information stored only on a user’s device can normally be removed within the app, by clearing local storage, by uninstalling the app or by resetting the device.

Vanta Labs may not be able to access, retrieve, export or delete information stored only on a user’s device.

Limited information may be retained where necessary for legal compliance, tax or accounting obligations, security, fraud prevention, dispute resolution, safeguarding, another person’s rights or legal claims.

Users who cannot access the relevant deletion controls may contact support@vantalabs.co.uk.

We may request reasonable information to verify identity, account ownership, parental responsibility or other authority.

12. Your data-protection rights

Depending on the circumstances and applicable law, users may have rights to be informed, request access, request correction, request deletion, restrict processing, object to certain processing, request certain information in a portable format, withdraw consent and complain to the Information Commissioner’s Office or another relevant regulator.

These rights are not absolute. A request may be limited or refused where a legal exemption applies, another person’s rights would be affected or information must lawfully be retained.

Where information is stored only on the user’s device and is not accessible to Vanta Labs, we cannot provide, change or delete that information on the user’s behalf.

Privacy requests can be sent to support@vantalabs.co.uk.

13. Cookies and website use

The Vanta Labs website may use cookies or similar technologies for essential functionality, security, contact forms, preventing abuse and analytics where enabled.

Where consent is legally required for non-essential cookies or analytics, those technologies will be used only after the required choice has been provided.

We do not use cookies to sell personal information.

14. International processing

Our apps may be used internationally. Some service providers may process information outside the United Kingdom, including in countries where they or their subprocessors operate.

Where required by law, we use or rely on appropriate safeguards such as UK adequacy regulations, approved contractual safeguards or another legally recognised transfer mechanism.

15. Third-party links and services

Our apps and website may contain links to app stores, retailers and other independent third-party services.

When a user follows a third-party link, that third party may process information under its own privacy policy.

Vanta Labs does not control and is not responsible for an independent third party’s privacy practices, security, content, availability, products, prices, delivery or conduct.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our apps, services, providers, processing activities, legal requirements or privacy and security practices.

The date at the top shows when the policy was last updated.

If a change materially affects how personal information is used, we will take reasonable steps to provide additional notice through an app, the website, email or another appropriate method.

17. Contact

VANTA LABS NW LTD
Company number: 17095243
Trading as: Vanta Labs
Email: support@vantalabs.co.uk

Please identify the relevant app and provide enough information for us to identify the account or issue safely.