Privacy Policy
Last updated: July 17, 2026
Stud Vault is a LEGO collection tracker operated by Voog LLC ("Stud Vault," "we," "us," or "our"). This policy explains what information the Stud Vault iOS app collects, how we use and store it, and the choices you have. By using the app you agree to the practices described here. Stud Vault is an independent app and is not affiliated with, endorsed by, or sponsored by The LEGO Group.
Information we collect
Information you provide
- Your name. During onboarding you can enter a name. It is optional, is used only to personalize greetings in the app, and is stored on your device.
- Your collection data. The items you add to your vault, including item numbers, names, categories, themes, quantities, condition, and the values you record, such as what you paid for an item and what you sold it for. This is the core content of the app.
- Scan images. When you use the camera or choose a photo to identify a LEGO item, the image is sent to our backend to be recognized (see "How recognition works" below). We do not use these images to build a profile of you and we do not retain them to identify you.
- Community submissions. If you submit a correction or identification to our collectible minifigure ("CMF") catalog, we receive the details you enter, such as the figure name, series, region, and any note. These submissions are tagged with a random per-device identifier that is not linked to your name or account.
Account information (optional)
If you choose to back up your vault to the cloud, you sign in with Sign in with Apple. Apple provides us with a unique identifier and, depending on your choice, your name and an email address (which may be an Apple private relay address). We use this only to create your account, secure your backup, and sync your vault across your devices. Signing in is optional; if you do not sign in, your vault stays only on your device.
Information collected automatically
- Usage and product analytics. We use PostHog to understand how the app is used. This includes screen views, app open and close events, and feature events such as onboarding steps, adding or removing an item (including item details and, for a sale, the amount), searches, and scan outcomes. Analytics events are associated with a pseudonymous identifier. If you are signed in, that identifier is your Stud Vault account ID. We do not send your email address to our analytics provider.
- Diagnostics. We collect crash reports and basic performance data to find and fix problems.
Stud Vault does not track you across other companies' apps or websites, and does not use the Advertising Identifier. We do not show ads.
How recognition works
To identify a LEGO item from a photo, the app sends the image to our backend (hosted on Supabase), which forwards it to image-recognition services, currently Brickognize and Anthropic, to return likely matches. The image is used to perform the recognition and is not used to advertise to you or to identify you personally.
How we use your information
- To provide the app: store your vault, calculate totals and insights, identify scanned items, and display catalog and pricing information.
- To back up and sync your collection across your devices when you sign in.
- To power the home-screen widget with a summary of your collection.
- To understand usage, fix bugs, and improve the app.
- To respond to your support requests.
How your data is stored
- On your device. Your vault is saved locally on your device. A small summary is shared with the Stud Vault widget through a private app group on your device. If you sign in, your login session is stored securely in the device Keychain.
- On our backend. Our backend runs on Supabase (cloud infrastructure in the United States). If you sign in and back up your vault, a copy of your collection is stored there in a database record tied to your account and protected so that only your account can access it. Catalog and pricing data we serve to the app is also hosted there.
- Analytics. Usage and diagnostic data is stored with PostHog.
Third-party services
We rely on a small number of service providers to run Stud Vault. They process data on our behalf or provide data to the app:
- Apple (Sign in with Apple, and App Store subscriptions if you purchase one).
- Supabase (backend hosting, database, and authentication).
- PostHog (product analytics and crash reporting).
- Brickognize and Anthropic (image recognition for scanning).
- Rebrickable, Brickset, and BrickLink (LEGO catalog data, images, retail prices, and market prices that we display in the app). These are data sources we read from; we do not send your personal information to them.
Data sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with the service providers listed above so they can perform their functions for us, and where required by law or to protect our rights and users. If Stud Vault is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
Your choices and rights
- Access and deletion. You can reset the app and erase your local data at any time from Settings. To request deletion of any cloud backup associated with your account, or a copy of the information we hold, email us at support@studvault.app and we will act on your request.
- Camera and photos. Scanning is optional. You control the camera and photo permissions in your device Settings, and the app works without them for manual entry.
- Notifications. You can turn off notifications in your device Settings.
- California residents. Under the CCPA/CPRA you have the right to know, access, correct, and delete your personal information, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law. To exercise any right, contact us at the email above.
Data retention
We keep your information for as long as you use the app or maintain a cloud backup, and as needed to provide the service and meet legal obligations. When you delete your data, we remove it from active systems, and it may persist for a limited time in routine backups before being overwritten.
Children's privacy
Stud Vault is intended for people 13 years of age and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it.
International users
Stud Vault is operated from the United States, and your information is processed and stored in the United States. If you use the app from outside the United States, you understand that your information will be transferred to and processed here.
European Economic Area, UK, and Switzerland
If you are in the European Economic Area, the United Kingdom, or Switzerland, the following applies to our processing of your personal data, and Voog LLC is the controller of that data.
Legal bases for processing
- Performance of a contract. To provide the app and its core features, store your vault, sync your collection, and identify scanned items at your request.
- Legitimate interests. To secure, maintain, debug, and improve the Service and to understand how it is used, where these interests are not overridden by your rights.
- Consent. Where required, for optional analytics and for access to your camera or photos. You may withdraw consent at any time, which does not affect processing already carried out.
- Legal obligation. Where we must process data to comply with the law.
Your rights
Subject to applicable law, you have the right to access, correct, delete, or receive a portable copy of your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise any of these rights, email support@studvault.app. You also have the right to lodge a complaint with your local data protection supervisory authority.
International transfers
Our service providers, including our analytics provider, are located in the United States. If you enable optional analytics, or use features that rely on our backend, your data is transferred to and processed in the United States. When we transfer personal data from the EEA, the UK, or Switzerland to the United States, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), to protect that data.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, provide notice in the app. Your continued use of Stud Vault after an update means you accept the revised policy.
Contact us
Stud Vault is operated by Voog LLC. Questions about this policy? Email support@studvault.app.