Privacy Policy

Welcome to Velo. We are committed to protecting your personal data and your privacy. This Privacy Policy explains what information Velo collects, why it collects it, what stays on your device, and what is shared with third parties. By using Velo, you agree to the practices described in this policy.

The vast majority of Velo's data never leaves your device. Your flashcard decks, quiz scores, study history, and streak data are stored locally using Android's built-in storage. We do not upload this content to any server. This is a deliberate design decision — your learning data is yours.

Velo collects only what is necessary to run the service. We collect your email address when you create an account (handled by Supabase Auth). We do not collect your name. App usage statistics — including the names of installed apps and usage duration (up to a 35-day rolling history) — are read locally on your device via the PACKAGE_USAGE_STATS permission to enforce your screen time limits; this data is not transmitted to our servers. When our servers handle authentication requests, Supabase may log your IP address as a standard server-side side effect — the app does not actively collect or store IP addresses.

Velo uses two sensitive Android permissions that require explicit disclosure. First, the Accessibility Service (MyAccessibilityService): this permission allows Velo to detect when you open a monitored app in real time, so it can display the quiz gate before you can use the app. The Accessibility Service is used solely for this purpose — it does not read screen content, capture keystrokes, or transmit any data off your device. Second, PACKAGE_USAGE_STATS: this permission lets Velo read which apps you use and for how long, so it can enforce your time limits and display your usage history. This data is processed locally only.

Velo uses the following third-party services. Supabase: handles account authentication and server-side rate limiting. Your email address is stored in Supabase's database. Supabase is GDPR-compliant and stores data on AWS infrastructure. Google Gemini API: when you generate flashcards from a topic, URL, PDF, or image, that content is sent to Google's Gemini API to produce quiz questions. You should not submit sensitive or confidential material when using this feature. Google's data use and retention policies apply to content sent through their API — see Google's privacy policy for details. We do not use any analytics, advertising, or crash-reporting SDKs.

Your email address is used to authenticate your account and, if necessary, to send account-related communications (e.g. password reset). App usage data is used exclusively on-device to power screen time limits and your personal usage dashboard. Flashcard content submitted for AI generation is sent to Google Gemini solely to produce quiz questions and is not stored by Velo.

Velo stores preferences and app data using Android SharedPreferences and local device storage — not browser cookies. No tracking cookies are used. This website (velo-app.com) may use localStorage to remember your preferences, but does not use advertising or analytics cookies.

Account data (your email) is retained in Supabase for as long as your account is active. You may request account deletion at any time by contacting us, after which your email will be permanently removed from our database. Local app data (flashcards, scores, history) can be cleared at any time by uninstalling the app or clearing app data in Android settings.

We do not sell your personal data. We do not share your data with advertisers or data brokers. Data is shared only with the two service providers named above (Supabase and Google Gemini) and only to the extent required for the features described. We may disclose information if required by law or to protect our legal rights.

You have the right to access, correct, or delete the personal data we hold about you. To request deletion of your account and associated data, contact us at the email below. Because most of your data is stored locally on your device, you retain full control over it at all times.

Velo is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with their information, please contact us and we will promptly delete it.

We may update this Privacy Policy when our practices change. We will post the updated policy on this page with a revised date. Continued use of Velo after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: veloappuk@gmail.com