Privacy Policy
Last updated: August 17, 2026
Who We Are
Vanism is a Travel OS — a van-life OS. The door is vanism.ai. The desk is vanism.ai/os. The iPhone app is free on the App Store.
Vanism is operated by LOKES ONE LIMITED CO ("we", "us", "our"). The founder is Nicholas Acord (LOKES ONE). This site is the product, not a shop and not a biography. The man is at me.lokes.one. The shop is at lokes.one.
Contact: rockymountainamerica@gmail.com
Age Requirement
Vanism is not intended for users under 13 years of age. By using the app, you confirm you are at least 13 years old. If we learn we have collected data from a child under 13, we will delete it promptly.
Data We Collect
Device Identifier
We generate a random device ID on first launch and store it locally on your device. This ID is used to track your earned achievements, token balance, and app settings. You do not need a name, email, or Apple ID to use the app.
Sign in with Apple (optional)
If you choose Sign in with Apple, Apple may share the name and email you select. That is optional. The default identity is the device ID on your phone.
Location Data
If you enable Challenge Mode, the app uses your device's GPS to check you into nearby landmarks and achievements. Location is processed on-device and on our servers to verify proximity to challenge points. We store the coordinates and timestamp of each achievement grant.
Vanism may use location in the background to deliver proximity alerts when you are near an unearned challenge point while driving. You can disable this at any time in Settings → Challenge Mode.
Camp and Trip Logs
When you log a camp stop, we store the date, optional notes, and location. This data is stored locally on your device and optionally synced to our servers for cross-device access.
C3I Conversation Data
Messages you send to C3I (the AI copilot) are transmitted to Anthropic's API for processing. Anthropic may retain messages per their own privacy policy. We do not store your conversation history on our servers beyond the current session.
Community Posts
If you submit a post to the community map or a Closed Room, the text content, your device ID, and optional location are stored in our database (Supabase). Posts are visible to other users. Do not include personal information in community posts.
Token Balance and Purchases
Your Dragon Coin balance and transaction history are stored in our Redis database keyed to your device ID.
How We Use Your Data
- Verifying achievement unlocks and preventing cheating
- Tracking your token balance and purchase history
- Providing the AI copilot with context about your rig and route
- Moderating community posts for harmful content
- Delivering proximity alerts when you are near challenge points
- Rate limiting and abuse prevention
Data We Do Not Collect
- Your name, email, or Apple ID, unless you choose Sign in with Apple
- Payment information (processed by Apple, not us)
- Contacts, photos, or any other device content
- Advertising identifiers
Third-Party Services
- Anthropic — AI API provider for C3I. Messages are transmitted to Anthropic for processing. See anthropic.com/privacy.
- Supabase — Cloud database for community posts and rooms. See supabase.com/privacy.
- Upstash — Redis database for token balances, rate limiting, and anti-cheat. See upstash.com/privacy.
- Vercel — API hosting. Requests are logged per Vercel's standard practices. See vercel.com/legal/privacy-policy.
- Apple — App Store, In-App Purchases, Sign in with Apple, and push notifications are handled by Apple. See apple.com/privacy.
Data Retention
Achievement and token data is retained indefinitely unless you request deletion. Community posts are retained until removed by the user or our moderation team. C3I conversation data is not stored server-side beyond each session. Location data for the last earned achievement is retained for anti-cheat purposes and deleted after 90 days of account inactivity.
Your Rights
You may request deletion of your data at any time by contacting us at rockymountainamerica@gmail.com with your device ID (found in Settings). We will delete your achievement records, token balance, and any community posts within 30 days.
If you are in the EU or California, you have additional rights under GDPR and CCPA including the right to access, portability, and erasure of your personal data.
Security
We use industry-standard measures to protect your data including encrypted transit (HTTPS), rate limiting, device ban mechanisms for abuse, and server-side validation of all game actions. No system is perfectly secure — if you discover a vulnerability, please report it to us before disclosing publicly.
Changes to This Policy
We may update this policy as the app evolves. Material changes will be communicated via an in-app notice. Continued use of the app after changes constitutes acceptance.