Privacy Policy

1. Who we are

Vast Monitor is a fleet-monitoring dashboard for Vast.ai. It lets you view your Vast.ai GPU machines, instances, earnings and account information, and the real-time health of those machines (CPU, memory, storage, network and GPU metrics).

The App is provided and controlled by:

Youcef NAFA
Contact: youcef.nafa@gmail.com
Registered address / location: Annaba, Algeria

2. Scope

This policy applies to the Vast Monitor mobile app (Android) and the web application, and to all interactions with the Vast Monitor backend service.

3. Information we collect

We collect and handle the following categories of information:

(a) Information you provide

• Vast.ai API key — you enter your Vast.ai personal access token (Settings → Connect) so the App can retrieve your fleet and account data on your behalf. This is the core credential the App operates on.
• Account credentials — a login handle/password for the Vast Monitor backend.
• Contact details — if you choose to provide an email address or other contact information (e.g. for alerts).

(b) Information we retrieve on your behalf from Vast.ai

When you connect your Vast.ai API key, the App queries the Vast.ai API to display:

• Machines and instances you own or rent (identifiers, hostnames, GPU types, hardware configuration, data-center region/location);
• Financial information — your earnings, balance and transaction history from Vast.ai;
• Account information — your account identity and usage.

This data is shown to you inside the App. It originates from Vast.ai and is governed, in part, by Vast.ai's own terms and privacy policy.

(c) Device and system metrics

For machines that run the optional metrics collector, the App collects technical performance data: CPU usage and temperature, memory usage, disk usage, network traffic, GPU utilization, GPU temperature, GPU power draw and GPU memory usage.

These are machine-performance metrics, not personal data about you or your activity — we do not read files, keystrokes, screenshots or communications.

(d) Usage and technical data

• Approximate location — only as derived from machine datacenter regions shown by Vast.ai; the App does not track precise device location.

4. What we do NOT collect

For clarity: the App does not collect precise geolocation, biometric data, photos, contacts, messages, web-browsing history, health data, or any data from other apps on your device. We do not read, upload or process the contents of your machine beyond the technical metrics described above.

5. How we use your information

• To authenticate you and connect your Vast.ai account;
• To retrieve and display your fleet, earnings and account information from Vast.ai;
• To collect, store and chart machine health metrics (CPU, memory, disk, network, GPU);
• To evaluate alert rules you configure and to surface those alerts to you;
• To operate, secure, and improve the App.

We do not use your data for advertising, and we do not sell or rent your personal information to anyone.

6. How we share information

We share information only where necessary to provide the App:

• Vast.ai — your API key is transmitted to Vast.ai's servers to authenticate API requests on your behalf. Vast.ai's handling of your data is governed by Vast.ai's Privacy Policy and terms.
• Cloud / hosting providers — if the backend is hosted on third-party infrastructure (e.g. a VPS or cloud platform), those providers process the data solely to host it and are bound by their standard processing terms.

We do not otherwise share, sell, or transfer your information to third parties.

7. Where data is stored & security

The backend is self-hosted by us: application data is stored in a PostgreSQL database and time-series metrics in a VictoriaMetrics store, running on infrastructure we control (or on a cloud/VPS provider, and in the region we designate): "EU".

We protect the data with the following controls:

• AES-256-GCM encryption of your Vast.ai API key at rest in the database. The key is decryptable only by the backend service, using a secret held in server configuration.
• HTTPS/TLS encryption in transit between the App, the backend, and Vast.ai.
• Authentication (JWT-based login) for access to the App and its API.
• Minimal privileges — the API key is used only to call Vast.ai and is never exposed to the App's client-facing UI in plaintext after connection.

While we take these measures, no transmission or storage is 100% secure, and you should treat your Vast.ai API key like a password.

8. Data retention

• Time-series metrics: machine-health metrics are retained for 30 days, after which they are automatically deleted by the storage engine.
• Vast.ai API key: retained while your Vast.ai connection is active, and removed when you disconnect the connection in Settings or the key is rotated.
• Application data (fleet/account records): retained while needed to operate the App and provide the connected dashboard, and deleted when your account/connection is removed.
• Diagnostic logs: retained for a limited period needed to investigate issues.

9. Your rights & deletion

Depending on the law that applies to you (such as the GDPR), you may have the right to:

• Access a copy of the personal data we hold about you;
• Rectify inaccurate information;
• Erase your data (right to be forgotten);
• Restrict or object to certain processing;
• Data portability.

To exercise any of these rights, contact us at youcef.nafa@gmail.com. To delete your data from the App: disconnect your Vast.ai connection in Settings (which removes the encrypted API key), and contact us if you wish for your full account record to be deleted.

When you request deletion, we will action it promptly and, where required, confirm to you that the data has been removed.

10. Children's privacy

This App is not directed to children under 13 and we do not knowingly collect personal information from children. If you believe we have inadvertently collected a child's data, contact us youcef.nafa@gmail.com.

11. Changes to this policy

If we change this policy, we will update the effective date above and notify you in the App or via the contact you have provided. Material changes affecting your rights may require you to re-consent.

12. Contact

For any privacy question, request, or concern, contact:

youcef.nafa@gmail.com
Vast Monitor