Privacy Policy

1. Overview

Velora ("we," "us," or "our") operates the Velora mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using Velora, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (encrypted), and display name when you register.
• Conversation Data: Messages you send to AI characters and the responses generated.
• Payment Information: Transaction receipts and subscription details processed through Google Play Billing or Apple App Store. We do not store your full credit card details.
• Feedback: Information you provide when contacting our support team.

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, unique device identifiers, and language settings.
• Usage Data: App features used, time spent in the app, interaction logs, and crash reports.
• IP Address: Collected for security, analytics, and service operation purposes.

2.3 AI-Generated Content

The Service uses OpenAI's API to generate AI character responses. Your conversation messages are sent to OpenAI for processing. OpenAI's data retention and privacy practices are governed by their own policies, available at openai.com/privacy.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain the Service;
• To create and manage your account and process authentication;
• To generate AI-powered conversations and personalized content;
• To process payments and manage subscriptions via Google Play or Apple App Store;
• To monitor and analyze usage patterns to improve Service functionality;
• To detect, prevent, and address technical issues, fraud, and security violations;
• To send service announcements, updates, and administrative messages;
• To respond to your comments, questions, and customer support requests;
• To comply with applicable legal obligations.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following situations:

4.1 Service Providers

We engage third-party service providers to perform services on our behalf, including:

• OpenAI: For AI text generation and image generation services;
• Google Play / Apple App Store: For in-app purchase processing;
• Analytics Providers: For usage analytics and crash reporting;
• Cloud Hosting: For server infrastructure and data storage.

4.2 Legal Compliance

We may disclose your information if required by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different Privacy Policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion:

• Conversation data: Deleted within 30 days;
• Account information: Permanently deleted within 30 days;
• Payment records: Retained as required by tax and financial regulations (typically 3-7 years);
• Usage logs: Anonymized or deleted within 90 days.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL;
• Encrypted password storage using industry-standard hashing algorithms;
• Restricted access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing;
• Database access restricted to internal network only.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location (e.g., EU/EEA, UK, California), you may have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data;
• Right to Rectification: Request correction of inaccurate or incomplete data;
• Right to Erasure: Request deletion of your personal data ("right to be forgotten");
• Right to Restrict Processing: Request that we limit the processing of your data;
• Right to Data Portability: Receive your data in a structured, machine-readable format;
• Right to Object: Object to the processing of your personal data;
• Right to Withdraw Consent: Withdraw consent for data processing based on consent.

To exercise any of these rights, please contact us at support@velorai.cc. We will respond to your request within 30 days.

8. Children's Privacy

The Service is not intended for individuals under the age of 13 (or the minimum age required by applicable law). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

If you believe we have collected information from a child in violation of applicable law, please contact us immediately at support@velorai.cc.

9. Third-Party Services

The Service integrates with the following third-party services, each with its own privacy policy:

• OpenAI API — openai.com/privacy
• Google Play Services — policies.google.com/privacy
• Apple App Store — apple.com/legal/privacy

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top of this page;
• Notify you of material changes via in-app notification or email at least 30 days before the changes take effect;
• Maintain previous versions of this policy upon request.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.