This Privacy Policy explains what information Velura (“Velura”, “we”, “us”) collects when you use the Velura mobile application (the “App”), how we use it, and the choices you have. By using the App, you agree to the practices described here.
1. Who we are
Velura is an independent mobile application operated from Paraguay. You can reach us at privacy@peletrangroup.com for any privacy-related question.
2. Information we collect
2.1 Information you provide
Account details — when you sign in with Google, we receive your email address and basic profile identifier. We do not receive your Google password.
Display name — the nickname you enter during onboarding.
Skin quiz answers — your goals, age range, gender (optional), skin type, sensitivity, concerns, experience level, and budget.
Routine data — the routine steps you generate, edit, or log as completed.
Journal entries — your daily skin feeling, concerns, consistency notes, and any free-text notes you write.
Photos — selfies or skin photos you voluntarily take inside the App for progress tracking or journal reviews.
Scanned products — barcodes, ingredient lists, and products you save to your shelf.
Signatures — the signature drawn on the commitment screen is not stored or transmitted. It exists only on your device during that screen.
2.2 Information collected automatically
Approximate location — used only to fetch local weather so we can tailor skincare suggestions (UV index, humidity). Location is not stored with your account.
Device and usage analytics — anonymous event data (screen views, feature usage) collected via PostHog to help us improve the App.
Purchase metadata — if you subscribe, the App receives a purchase token from Google Play or the App Store, which we use to verify your subscription status.
Technical logs — basic error and request logs from Supabase when you use AI features.
3. How we use your information
Provide and personalize the core features of the App (routine generation, product scoring, journal reviews, skin analysis).
Authenticate you and maintain your account.
Process subscriptions and verify your entitlement to premium features.
Improve the App (debugging, analytics, future features).
Respond to support requests.
Comply with applicable law.
4. AI processing
When you use AI features (routine generation, product analysis, skin photo analysis, journal review, routine chat, ingredient profile), the relevant data — including, where applicable, your quiz answers, routine context, journal text, and photos — is sent to OpenAI’s API through a Supabase Edge Function. OpenAI processes the request and returns a result. We do not sell or use your data to train third-party models.
Photos and personal data sent to AI endpoints are processed in order to return a response. We do not control OpenAI’s own retention or logging policies — review OpenAI’s privacy policy for their practices.
5. Where your data lives
Supabase — primary database and storage (profiles, quiz answers, routines, journal entries, photos, subscriptions, token usage). Hosted on infrastructure managed by Supabase.
OpenAI — processes AI requests as described above.
Google — handles authentication (Google Sign-In) and, for Android users, subscription billing (Google Play).
Apple — handles subscription billing for iOS users (App Store).
OpenWeatherMap — receives approximate location to return weather data.
PostHog — receives anonymous product analytics.
Open Beauty Facts — receives scanned barcodes to return public product data.
Data may be stored or processed outside your country of residence, including in the United States and the European Union. Where required by law, we rely on appropriate safeguards for international transfers.
6. Data retention
We keep your data for as long as your account exists. You can delete your account at any time from the Settings screen. Account deletion removes your profile, quiz answers, routines, logs, photos, journal entries, ingredient profile, subscription record, and token usage from our systems. Some backups or operational logs may persist for a limited period before being overwritten.
7. Your rights
Depending on your jurisdiction, you may have the right to:
Access the data we hold about you.
Correct inaccurate data.
Request deletion of your data.
Object to or restrict certain processing.
Export a copy of your data.
The fastest way to delete your data is the “Delete Account” action in the App. For any other request, email privacy@peletrangroup.com.
8. Our discretion in handling data
Within the limits of this Privacy Policy and applicable law, Velura determines how the data it collects is stored, processed, aggregated (in anonymized form), and used to operate and improve the App. By using the App, you acknowledge this and consent to Velura making reasonable product and operational decisions accordingly.
9. Children
Velura is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with data, contact us and we will delete it.
10. Security
We use standard industry practices, including encrypted transport (HTTPS/TLS), server-side authorization (Supabase Row Level Security), and scoped storage to protect your data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated inside the App or by updating the “Last updated” date above. Continued use of the App after changes means you accept the updated policy.