Privacy

What Viky never receives

• The name you give your account: it stays in your device's passkey manager (iCloud Keychain, Google Password Manager, 1Password) as a label. Viky has no copy.
• Your Duolingo password: you sign in to Duolingo inside Reclaim's verification page, never on Viky.
• Your card number or identity documents: card purchases happen on the card service's own page (Rampnow, Ramp or Mercuryo, by country), which runs its own identity checks under its own privacy policy.

What Viky keeps, and where

• Your account's public identifier. Created on your device from your passkey. Kept in our database with each gift you fund or receive, and visible on the Monad network, a public ledger.
• If you fund a gift: the gift terms (amount, goal, daily target, duration). Gifts made before 15 September 2026 also hold the recipient's email or phone number as a one-way fingerprint, in the database and in the public program; the plain email or number was never stored, and gifts made since ask for neither.
• The two names on a gift: the first name of the person it is for and the name of the person who sends it, as the sender types them. Kept in our database with the gift's link, never in the public program. They are shown to whoever opens the link, and to the sender and the recipient when signed in, and to nobody else.
• If you receive a gift: your Duolingo username, profile id and display name (as read at each attested reading, including the short code you add to it once), kept in the database with each reading; a keyed pseudonym of that profile id, which is what the public program sees; your total XP as read, and the attested proof of the reading (produced with Reclaim), kept as the record of each day.
• If you ask Viky to tell you each morning: the private delivery link your browser creates for this device, with the two keys it gives us to encrypt what we send, kept in our database with the gift it is for and your account's identifier. It is not a phone number and it names no person: it is how your browser's notification service reaches this one browser. We send one sentence a day at most, about that gift. "Stop telling me", on the gift's page, deletes it, and so does the first refusal from your notification service.
• If your gift is for a test result: the page of your certificate is read for three things only, the score, the day of the test, and the name printed on it. That is what is kept with the gift. The page's own answer, which Viky's server and the verification service both fetch, also carries your date of birth and a link to the photograph taken on the day. Viky keeps neither. Nothing is read at all until you paste the link of a certificate you have made public yourself, and every later reading checks it again: once you make it private, or once it passes its two years, nothing more can be read. What the public program holds of the name and the course, or of a university, is a hash made with a key drawn for that gift alone, which stays in our database and is never made public, so nobody can find the gift by trying a name (gifts made since 29 September 2026).
• If you receive a gift, your yes and your stop: nothing that moves money is read for a gift until you agree to what is read, and you can stop at any time, from the gift's page or from Me. The yes and the stop are signed by a key your passkey makes for this alone, from the salt sha256("viky:consent:v1"), held only in your browser's memory; it signs agreements and stops and nothing else, and it cannot move money. Viky keeps the text you signed, the signature and that key's public half, with the gift. Gifts that began before 30 September 2026 are read as before until you answer.
• Every visit: a session cookie (__Host-viky-session, 12 hours, signed, holds your account identifier) and a request counter keyed by the IP of your connection, held in memory for ten minutes to slow down abuse. When you ask Viky to act (make, open, end or take back a gift, count a day, send or take out money, read a race result, use a code), the action is also counted in our database, against your account and against the IP of your connection, by the minute, the hour or the day: those counts are what hold the limits on actions. Visits are counted anonymously, with no cookie, by Vercel, the service that hosts Viky: the page opened, never with the key of a gift's link nor a gift's number, the site you came from, your country and region, and the kind of device and browser. Vercel tells one visitor from another by a fingerprint of the request, which it discards after 24 hours. No advertising, no tracking cookies.
• If you send money to your mobile money: the operator, the country and the last four digits of the number, with the amounts and the payout's reference, so the screen can follow it to its end. The whole number and the name on the account go to Switch with the payout and are not kept by Viky.
• On your device: the technical id of your passkey, so the next sign-in can use it directly. And the currency you read money in (a cookie, viky.currency, one year): it is proposed, never asked, from the country your connection comes from, and from your device's language where the connection says nothing. When you make an account that currency is kept with it, so what Viky tells you outside the app speaks it too, and a gift keeps the currency its giver was reading in, for its link. You can change it wherever an amount is shown.

Condition by condition

For each condition Viky offers or is building: what is read, who sees it, what is kept, and what is written into the public program.

• Enrolled at university, shown. Shown by you, from your own university account: the page of your student portal that says you are enrolled. It is seen once, on your own screen, and by nobody else. One exception: the first proof ever shown from a university's page is held until a person at Viky has read what was read from it, the fields and which page it was, and pinned that page or refused it. What they read is erased when they decide. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• Passed the year at university. Shown by you, from your own university account: the results page of your student portal, saying the year or the semester is passed, or not. It is seen once, on your own screen, and by nobody else. One exception: the first proof ever shown from a university's page is held until a person at Viky has read what was read from it, the fields and which page it was, and pinned that page or refused it. What they read is erased when they decide. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• Reached a grade at university. Shown by you, from your own university account: the results page of your student portal, with the grade on the university's own scale. It is seen once, on your own screen, and by nobody else. One exception: the first proof ever shown from a university's page is held until a person at Viky has read what was read from it, the fields and which page it was, and pinned that page or refused it. What they read is erased when they decide. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• A TOEFL score, shown. Shown by you, from your own ETS account: your MyBest total score. It is seen once, on your own screen, and by nobody else. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• A Duolingo English Test score. Read for you from Duolingo English Test's public page: the score, the day of the test and the name printed on the certificate page you share. Kept in our database with each reading, and the number read is written into the public program, where anyone can see it.
• An edX certificate. Read for you from a public page you share: the course the certificate names, that it is verified, and the day it was issued, on the certificate page you share. Kept in our database with the gift, and the public program receives that it was found, and the day.
• An MIT course certificate. Read for you from a public page you share: the course or program the certificate names, and the day it was issued, on the certificate page you share. Kept in our database with the gift, and the public program receives that it was found, and the day.
• A Coursera certificate. Read for you from a public page you share: the course the certificate names and the day it was issued, on the certificate page you share. Kept in our database with the gift, and the public program receives that it was found, and the day.
• A Duolingo lesson each day. Read for you from Duolingo's public page: your Duolingo username, profile id and display name, your total XP at each reading, and the attested proof of the reading. Kept in our database with each reading, and the number read is written into the public program, where anyone can see it.
• Reach a Codeforces rating. Read for you from Codeforces's public page: your Codeforces handle, and the rating shown on your profile, at each reading. Kept in our database with each reading, and the number read is written into the public program, where anyone can see it.
• A certification on Credly. Read for you from a public page you share: the badge, its issuer and the day it was issued, on the badge's public record. Kept in our database with the gift, and the public program receives that it was found, and the day.
• A credential on Accredible. Read for you from a public page you share: the credential's title, its issuer's website and the day it was issued, on its public record. Kept in our database with the gift, and the public program receives that it was found, and the day.
• A chess rating on Chess.com. Read for you from Chess.com's public page: your Chess.com username and player id, the rating the gift names and how settled it is, at each reading. Kept in our database with each reading, and the number read is written into the public program, where anyone can see it.
• A puzzle record on Chess.com. Read for you from Chess.com's public page: your Chess.com username and player id, and the best puzzle rating the account ever reached, at each reading. Kept in our database with each reading, and the number read is written into the public program, where anyone can see it.
• A cube result in competition. Read for you from a public page you share: your result in one event at one WCA competition: your name, the event and your best single. Kept in our database with the gift, and the public program receives that it was found, and the day.
• Active minutes a day, Fitbit. Read each morning by Viky's reading service from the Fitbit account you connected: yesterday's active minutes, judged against the target each morning. It is read by that service, never shown to a person, and dropped once judged. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• Kilometres a day, on Strava. Read each morning by Viky's reading service from the Strava account you connected: yesterday's activities, their distances added and judged against the target each morning. It is read by that service, never shown to a person, and dropped once judged. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• Finish a race. Read for you from a public page you share: your line on the timing company's results page: your name, your bib and your official time. Kept in our database with the gift, and the public program receives that it was found, and the day.
• Enrolled in China, shown. Shown by you, from your own CHSI account: the student status on your own CHSI report. It is seen once, on your own screen, and by nobody else. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• A Cambridge English result, shown. Shown by you, from your own Cambridge English account: your Statement of Results, with the overall score on the Cambridge English Scale. It is seen once, on your own screen, and by nobody else. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.
• An IELTS band, shown. Shown by you, from your own British Council account: your result, with the overall band. It is seen once, on your own screen, and by nobody else. Viky keeps neither the number nor the page's answer, only whether what the gift is for was reached, and the public program receives that alone. The person who funds the gift is told that it was reached and knows the target they chose; they do not see the number.

Who processes it

• Vercel hosts the application (Paris region) and keeps standard request logs.
• Neon hosts the database (Frankfurt, Germany).
• Reclaim Protocol runs the verification of your Duolingo progress and of what you show from your own accounts; its attestation service sees that session in the way its protocol describes, and Viky receives only the proof.
• Duolingo answers a public profile lookup for the username you enter.
• Rampnow, Ramp or Mercuryo: the card service your country is served by handles the card purchase on its own page, with its own account and identity checks.
• Switch Labs pays a mobile money payout: it receives the number, the operator, the name on the account and the amount.
• Kuru provides the exchange used to convert between currencies; it sees your account identifier and the amount.
• The Monad network is public and permanent: account identifiers, gift terms, the contact fingerprint of gifts made before 15 September 2026, the identity pseudonym, every check-in and every amount moved can be read by anyone and cannot be erased.

How long

• A verification session that is never completed is deleted after 24 hours.
• Completed verifications and gift records are kept as long as the gift exists and afterwards as its record, until you ask for their deletion.
• A gift read from Fitbit or Strava: when the gift is over, because its last day has passed, because it was cancelled or because you ended it, the access you gave is returned to Fitbit or Strava and erased, with the name of that account, its id at the source, and the rows of the morning readings. It is done when you end the gift, and otherwise by the next morning's pass. What stays is the record of each day, earned or gone back, your signed yes and stop, and what is on the public ledger.
• The session cookie expires after 12 hours; the request counters held in memory after ten minutes. The counts of actions kept in our database stay two days at least, and are erased by an action that comes after.
• What is on the public ledger stays there.

Your rights

You can ask what Viky holds about you, have it corrected, or have the database records deleted (the public ledger cannot be changed). Write to the contact given on the legal notice.