Legal
Data Controls
The controls Vavus gives you over history, local storage, cloud sync, messaging, exports, deletion, and healthcare workflows.
Last updated: May 31, 2026
The core control
Zero data retention or encrypted history. Anything Vavus keeps for you is encrypted history it cannot read; anything you do not keep is not retained. The controls below let you decide what is kept and where.
History sync
History has three modes. Cloud sync - the default - saves your encrypted history and syncs it across the devices you sign in to. Manual keeps history on your device and uploads only the entries you choose. Off keeps everything local: the server rejects cloud history writes, so nothing reaches the cloud.
You can switch modes any time in Settings, and whatever is stored is always encrypted on your device before it leaves it.
What is encrypted
New history entries, documents, and saved audio are encrypted on your device before upload and stored as ciphertext Vavus cannot read. Messaging is end-to-end encrypted between participants.
Messaging and calls
Messages are end-to-end encrypted, and Vavus stores only ciphertext. Group polls are an exception: the server has to read a poll to tally votes and show it to everyone, so polls are not end-to-end encrypted - and they are not offered in healthcare conversations.
Live call and conference translation is processed for the session and is not stored as history unless you record or save it. Recordings follow your history sync setting.
Keyboard history
The Vavus Keyboard has its own history control with off, on-device, and cloud modes. Off stores nothing. On-device keeps history on that device only. Cloud mirrors encrypted history to your account for cross-device access.
How providers handle your content
To produce a result, your content is processed by third-party speech, translation, and AI services. Vavus configures these to keep your content out of their model training and to minimize retention, wherever the service supports it. They receive only the content needed to produce your result - never your name, account, or identity.
Export, deletion, and account controls
You can export your data, delete individual entries or your whole history, manage active sessions and security settings, and delete your account. Cookie consent is managed on the website.
Healthcare and enterprise
Healthcare accounts run under a Business Associate Agreement with stricter session, audit, and PHI controls, and use only BAA-covered services. Enterprise customers can request organization policy review, SSO, regional or dedicated managed cloud deployment, and on-premises options. HIPAA audit logs are metadata only and may be retained for six years.
How do I stop Vavus from saving my history to the cloud?
Set History to Off in Settings. With sync off, the server rejects cloud history writes, so nothing new leaves your device. You can also choose Manual to upload only the entries you pick.
Is Vavus messaging end-to-end encrypted?
Yes. Messages are end-to-end encrypted and Vavus stores only ciphertext. Group polls are the exception, because the server has to read them to tally votes, so polls are not end-to-end encrypted and are not offered in healthcare conversations.
Can I export or delete my data?
Yes. You can export your data, delete individual history entries or your whole history, manage your security settings, and delete your account from the product controls.
What do third-party providers receive?
They receive only the content needed to produce your result - never your name, account, or identity - and are configured to keep your content out of their model training and to minimize retention where supported.
Contact
DCI Brands LLC, 312 W 2nd Street, Casper, WY 82601, United States. For legal, privacy, billing, or deletion requests, email constantine@vavusai.com.