Privacy Policy

Effective date: September 9, 2026  ·  Last updated: October 20, 2026  ·  App: Vigil  ·  Developer: Reno Labs, LLC

1. Introduction

Vigil ("we," "our," or "us") is a mobile application published by Reno Labs, LLC. Vigil curates, analyses, and reports on publicly filed financial-disclosure records of institutional investors, members of Congress, executive-branch officials, and corporate insiders, and disseminates that reporting to the general public. Source records are obtained from the U.S. Securities and Exchange Commission (SEC), the Office of the Clerk of the U.S. House of Representatives, the Office of Public Records of the U.S. Senate, and the U.S. Office of Government Ethics (OGE).

This Privacy Policy explains what information we collect when you use Vigil, how we use it, and the choices you have. By using Vigil you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information We Do NOT Collect

Vigil does not collect: your phone number, precise or approximate location, contacts, health data, camera images, microphone input, browsing history, or any advertising identifier (IDFA). Your name and email address are optional Sign in with Apple information, as described in Section 2.1. We do not display third-party ads.

Until October 19, 2026, our analytics provider, PostHog, estimated an approximate location (country and city) from the IP address of app events. Since then, for every version of Vigil, PostHog no longer stores your IP address and derives no location from it. Events recorded before that date may still include the IP address and that approximate location.

3. How We Use Your Information

DataPurpose
Apple User IDCreate and authenticate your account; associate your preferences with your account
APNs device tokenDeliver push notifications for filings, congressional trades, and insider activity you follow
Follow / watch preferencesPersonalise your feed; trigger relevant notifications
Purchase historyValidate your subscription entitlement and grant premium access
Crash dataDiagnose and fix bugs to improve app stability
Usage eventsUnderstand feature adoption; prioritise product improvements
Feedback textAddress reported issues and inform product roadmap
Install attributionMeasure which of our Apple Search Ads ads lead to installs and subscriptions; choose what the first-launch screen shows (for example, the member of Congress you searched for)

We do not show third-party ads, sell your data, share it with data brokers, or use it to build profiles for purposes unrelated to the app. Install attribution is used only to measure our own ads and to tailor the first-launch screen.

4. Third-Party Services

Vigil uses the following third-party SDKs. Each receives only the data necessary for its function.

RevenueCat

RevenueCat processes your App Store purchase receipts and subscription status to determine your premium entitlement. It collects purchase history, an app user ID associated with your Vigil account, device type, and OS version. We also send RevenueCat the install source, the onboarding experience shown and, for installs from our Apple Search Ads ads, the keyword ID, so we can see which ads lead to subscriptions. RevenueCat does not sell your data, does not use it for advertising, and does not require an advertising identifier.

RevenueCat Privacy Policy →

PostHog

PostHog collects crash reports and error diagnostics to help us fix bugs, as well as usage events (screens viewed, features tapped, and app lifecycle events) to help us understand how the app is used and prioritise improvements. It collects stack traces, device model and OS version, app version, available memory at crash time, a randomly generated app-install identifier, event metadata, and, for installs from our Apple Search Ads ads, the campaign, ad group and keyword IDs. We also send Apple's identifier for vendor (IDFV). Analytics, diagnostics and attribution records are linked to persistent app or device identifiers. Events from the same installation are associated with that identifier and, for some server-side events such as notifications, with your Vigil account ID. We do not send your name, Apple ID, email, location, or IDFA to PostHog. Since October 19, 2026, PostHog does not store the IP address of Vigil events or derive a location from it.

PostHog Privacy Policy →

Apple App Store / StoreKit

Subscriptions are processed entirely through the Apple App Store. Apple's own privacy policy governs all payment and billing information. We never see your payment details. Install attribution comes from Apple's AdServices framework, which Apple operates under its own privacy policy.

Apple Privacy Policy →

5. Data Storage and Security

Your account data, follow preferences, and notification settings are stored on servers operated by Reno Labs, LLC hosted in the European Union (Hetzner Cloud). We use HTTPS for all data in transit. Access to production databases is restricted to authorised personnel.

Offline caches of public financial-disclosure records (SEC 13F, House and Senate STOCK Act, and OGE Form 278 / 278-T data) are stored locally on your device using Apple's SwiftData framework. This data is publicly available government information and contains no personal information about you.

We retain your account data for as long as your account is active. If you delete your account, we delete it and its associated data from our live database at once. Encrypted database backups that still contain it are deleted on a rolling basis within 32 days. Server logs, which can include your account ID, are rotated and overwritten automatically. When you delete your account, we also ask PostHog to remove the identifying attributes from your analytics profile (install and ad-attribution details, device and app details, and any approximate location), and ask RevenueCat to remove the attributes we set on your subscription record; if either service is unavailable, we keep retrying until it confirms. Your past usage events stay in PostHog under the app-install and device identifiers they were recorded with, and your purchase history stays in RevenueCat under your former account ID. We keep no record linking those identifiers to you, and we use that data only in aggregate, for analysis and accounting. Starting with Vigil 1.1.1, deleting your account also resets the app's analytics identity: the app discards its app-install identifier and creates a new one, so new usage is not recorded under the identifier tied to your deleted account. Apple's identifier for vendor (IDFV) and PostHog's own device identifier do not change when you delete your account, so usage on the same device before and after the deletion can still be linked by those device identifiers. In earlier versions of Vigil, if you keep using the app on the same device after deleting your account, new usage may be recorded under the same install identifier.

6. Your Rights

For users in the European Economic Area (GDPR)

If you are located in the EEA, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and lodge a complaint with your local data protection authority. To exercise these rights, contact us at support@renolabshq.com.

Our legal basis for processing your data is contract performance (to provide the app features you requested) and legitimate interests (to improve the app and ensure its security).

For California residents (CCPA)

California residents have the right to know what personal information we collect and how it is used; request deletion of personal information; and opt out of the "sale" of personal information. We do not sell personal information. To exercise your rights, contact us at support@renolabshq.com.

7. Children's Privacy

Vigil is a financial data application. It is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us personal information, please contact us at support@renolabshq.com.

8. Account Deletion

You can permanently delete your Vigil account at any time from within the app:

  1. Open Vigil and go to the More tab
  2. Tap Settings
  3. Scroll to the bottom and tap Delete Account
  4. Confirm deletion in the prompt

Deleting your account permanently removes your Apple User ID, device token, follow and watch preferences, notification settings, feedback submissions, and any earlier device accounts merged into it from our live database (backups follow within 32 days), and asks our analytics and subscription providers to remove identifying attributes, as described in Section 5. This action cannot be undone. Your App Store subscription must be cancelled separately through the App Store.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify you via a push notification or an in-app notice. Your continued use of Vigil after any change constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact:

Reno Labs, LLC
Email: support@renolabshq.com
Website: renolabshq.com