← back

Privacy Policy

This Privacy Policy describes how Veyra ("we", "us", "our") collects, uses, and protects your personal information when you use our platform. By using Veyra, you agree to this policy.

1. Data controller

Veyra is operated as an independent platform. For data protection enquiries, contact us at veyrasupportus@gmail.com. We will respond within 30 days.

2. What we collect

• Account information: Username, email address, password (hashed — never stored in plain text), date of birth.
• Profile data: Age tier, distro preference, habits, notes, goals, and other content you create.
• Usage data: Feature interactions, habit logs, streak data, and community posts.
• Communications: Messages sent via the DM feature (stored to deliver them).
• Student verification (optional): If you choose to verify, we temporarily store a document image; only extracted metadata is retained after review.
• Cookie consent choice: Stored locally in your browser (localStorage) only — not sent to our servers.

3. Legal basis for processing GDPR

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your data under the following legal bases:

• Contract (Art. 6(1)(b) GDPR): Account creation, authentication, delivering core features, sending transactional emails.
• Legitimate interest (Art. 6(1)(f) GDPR): Platform security, abuse prevention, anonymous analytics to improve the product.
• Consent (Art. 6(1)(a) GDPR): Non-essential analytics (only if you select "Accept all" in the cookie banner). You can withdraw consent at any time by clearing your browser's localStorage for this site.
• Legal obligation (Art. 6(1)(c) GDPR): Where required by applicable law.

4. How we use your data

• To create and manage your account.
• To provide age-appropriate features and peer matching.
• To send account-related emails (OTP verification, password reset, notifications).
• To display contextual, non-behavioural advertising (based on your stated interests, not tracking).
• To improve the platform and fix bugs.

5. Children's privacy (COPPA / DPDP)

Veyra is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are under 13, you may not create an account.

If we discover that a user under 13 has created an account, we will delete their data promptly. If you believe a child under 13 has registered, contact us at veyrasupportus@gmail.com.

Users aged 13–17 are considered minors. We apply additional protections including no behavioural advertising and limited data sharing.

6. Cookies & local storage

We use the following technologies:

• Session cookie (necessary): Keeps you signed in during your session. Required for the platform to function.
• localStorage — preferences (necessary): Stores your theme, wallpaper, and cookie consent choice locally in your browser. Never sent to our servers.
• localStorage — analytics (with consent only): If you accept all cookies, we may store anonymous usage identifiers to understand how features are used. No personal data is transmitted to third-party analytics providers.

You can withdraw consent at any time by going to your browser settings and clearing site data for veyra.app, or by clearing localStorage directly.

7. Data sharing

We do not sell your personal data. We share data only with:

• Email providers (Gmail / Brevo) — to send transactional emails.
• Database hosting (Supabase / PostgreSQL) — to store account and usage data.
• Platform hosting (Render) — to run the application.
• Object storage (Backblaze B2) — to store uploaded files.

All third-party providers are contractually bound to protect your data and may not use it for their own purposes. Where required by GDPR, we rely on Standard Contractual Clauses (SCCs) for transfers outside the EEA.

8. Data retention

• Active account data is retained for as long as your account exists.
• If you delete your account, your personal data is deleted within 30 days.
• Anonymous usage statistics may be retained indefinitely.
• Verification document images are deleted immediately after review; only derived metadata is kept.

9. Your rights GDPR

Depending on your country, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): Request deletion of your account and all associated personal data.
• Restriction: Ask us to limit how we process your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interest at any time.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email veyrasupportus@gmail.com. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local Data Protection Authority (DPA).

10. Security

Passwords are hashed using industry-standard algorithms. Data is transmitted over HTTPS. We implement reasonable technical and organisational measures to protect your data, but no system is 100% secure.

11. International transfers

Veyra is operated from India. By using the platform, you consent to your data being processed in India and on servers operated by the third parties listed above (which may be located in other countries, including the US and EU). For transfers from the EEA, we rely on Standard Contractual Clauses. We endeavour to comply with GDPR (EU), UK GDPR, COPPA (US), and India's DPDP Act 2023.

12. Changes to this policy

We may update this policy as the platform grows. We'll notify you of significant changes via email or an in-app notice. Continued use after changes constitutes acceptance.

13. Contact

For any privacy-related questions or to exercise your rights: veyrasupportus@gmail.com

For EEA users: if you are unsatisfied with our response, you may contact your national Data Protection Authority. A list of EU DPAs is available at edpb.europa.eu.

---

← back to veyra