Privacy Policy

1. Introduction

Velora Mobile ("Velora," "we," "our," or "us") is a household management application that helps families collaboratively manage their finances, schedules, and responsibilities. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Velora Mobile application ("the App") available on iOS.

By downloading, installing, or using Velora Mobile, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

We collect information that you provide directly to us, as well as information generated through your use of the App.

2.1 Account Information

When you create an account, we collect:

• Full name and username
• Email address and optional recovery email address
• Phone number (optional)
• Security PIN (stored in hashed form; we never store plaintext PINs)
• Security PIN (stored in hashed form for private section access)
• Profile avatar selection

2.2 Household Information

When you create or join a household, we collect:

• Household name and configuration preferences
• Member roles (owner, admin, member)
• Subscription tier and related billing information
• Custom category names and currency preferences

2.3 Financial Data

When you use our budgeting and expense tracking features, we collect:

• Expense records: amounts, currencies, categories, descriptions, and recipient/payee names
• Budget information: budget names, amounts, periods, and rollover data
• Advance records: amounts lent or borrowed between household members, repayment status, and descriptions
• Privacy level designations: whether an expense or budget is classified as Main, Personal, or Private

2.4 Events and Scheduling Data

When you use our calendar and event features, we collect:

• Event details: titles, descriptions, dates, times, and categories
• Attendee counts and special instructions
• Reminders: task titles, due dates, repeat intervals, and completion status

2.5 Activity and Usage Data

We automatically log certain activities within the App, including:

• Activity history: a record of actions you take (e.g., adding an expense, creating an event) along with timestamps
• User interaction data: which features you use and how frequently

2.6 Device and Technical Information

To deliver push notifications and ensure App functionality, we collect:

• Push notification tokens (device-specific identifiers for delivering notifications)
• Device platform (e.g., iOS)
• App version information

2.7 Biometric Data

If you enable biometric authentication (Face ID or Touch ID), authentication is handled entirely by your device's operating system. Velora does not collect, store, or transmit any biometric data. We only receive a success or failure response from the operating system.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the App: To operate the household management features including budgeting, expense tracking, event scheduling, and task management
• Account management: To create and manage your account, authenticate your identity, and maintain security
• Household collaboration: To enable shared access to household budgets, expenses, events, and activities among household members
• Push notifications: To send you reminders, event alerts, household activity updates, and other notifications you have opted into
• AI-powered features: To provide automated expense categorization and smart suggestions that enhance your experience
• Privacy management: To enforce privacy level controls (Main, Personal, Private) so that sensitive financial data is only visible to authorized users
• App improvement: To understand usage patterns and improve the App's features, performance, and user experience
• Security: To detect, prevent, and address technical issues, fraud, or security breaches
• Customer support: To respond to your inquiries and provide assistance

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Within Your Household

Information designated as "Main" privacy level is shared with all members of your household. "Personal" expenses are visible only to you but may be reflected in aggregate household totals. "Private" expenses are never shared with other household members.

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating the App, including:

• Cloud hosting providers for data storage and processing
• AI service providers for automated categorization features (data is processed but not retained by these providers)
• Push notification services for delivering notifications to your device

These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to:

• Comply with a legal obligation or court order
• Protect and defend our rights or property
• Prevent fraud or address security issues
• Protect the personal safety of users or the public

5. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it:

• Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS/SSL protocols
• PIN hashing: Security PINs are hashed using industry-standard algorithms (bcrypt) before storage; we never store plaintext credentials
• Private section protection: Private expenses and budgets require additional PIN or biometric authentication to access
• Secure infrastructure: Our servers are hosted on secure, enterprise-grade cloud infrastructure with regular security updates
• Access controls: Household data access is restricted based on membership and role-based permissions

6. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you with the App's services.

6.1 Account Deletion

You may delete your account at any time through the App by navigating to Profile > Account Settings > Delete Account. When you delete your account:

• Your personal account information (name, email, phone, credentials) is permanently deleted
• Your expense records, budgets, events, reminders, and activity history are permanently removed
• Push notification tokens associated with your account are deactivated and deleted
• If you are the sole owner of a household, the household and all associated data will also be deleted

Account deletion is permanent and cannot be undone. We may retain certain anonymized, aggregated data that cannot be used to identify you for analytical purposes.

6.2 Data Portability

You may request a copy of your personal data by contacting us at the email address provided below.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information through the App or by contacting us
• Deletion: Delete your account and all associated personal data through the App
• Notification preferences: Manage push notification settings through the App or your device settings
• Withdraw consent: Where processing is based on consent, you may withdraw consent at any time

To exercise any of these rights, please contact us at davar@rasab.io.

8. Children's Privacy

Velora Mobile is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at davar@rasab.io.

9. Third-Party Services and AI Data Disclosure

The App may integrate with or link to third-party services. This Privacy Policy applies only to Velora Mobile and does not cover third-party services, which have their own privacy policies. We encourage you to review the privacy policies of any third-party services you interact with.

9.1 AI-Powered Features (OpenAI)

Velora uses OpenAI's API to provide AI-powered features. Yes, certain user data is sent to OpenAI's servers for processing. The specific data shared depends on the feature being used:

• Expense Categorization: When you add an expense, the expense description, payee/receiver name, amount, and currency are sent to OpenAI to automatically determine the appropriate category. No account credentials, emails, or personal identity information is included.
• AI Chat and Voice: When you use the AI assistant, your conversation messages and any voice recordings (for speech-to-text) are sent to OpenAI for processing. Only the content you voluntarily enter into the chat or speak is transmitted.
• Analytics and Insights: Aggregated spending statistics (total amounts, category breakdowns, daily averages) are sent to OpenAI to generate financial insights. Individual transaction details are not included in analytics requests.
• Feature Suggestions: If you submit a feature suggestion, the title and description you provide are sent to OpenAI for categorization.

OpenAI processes this data according to their API data usage policy. Data sent through the API is not used to train OpenAI's models. For more information, see OpenAI's API Data Usage Policies.

9.2 Other Third-Party Services

• Apple Push Notification Service (APNs): For delivering push notifications to your iOS device. Only device tokens are shared with Apple.
• Cloud Hosting: Our servers are hosted on secure cloud infrastructure. Your data is stored and processed on these servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you through the App or via email if the changes are significant

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the updated policy.