← Back to Veyalo

Privacy Policy

Effective date: July 2026

Veyalo ("we," "us," or "our") operates the Veyalo mobile application (the "App"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our App. By using Veyalo, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: First name, last name, email address, and a unique alias (username) when you create an account.
• Profile information: Profile photo (optional), which you may upload from your camera or photo library.
• Session data: Preferences you set when creating group swiping sessions, including cuisine categories, search radius, and price filters.
• Saved places: Restaurants and places you bookmark, saved to your account so you can find them again.
• Menu and food photos: Photos of restaurant menus or meals you choose to scan using our AI Scanner feature.
• On-device preferences: Your nutrition goals (calorie limit and ingredients to avoid) and your recent-scan history are stored only on your own device — not on our servers — and can be cleared at any time.

1.2 Information Collected Automatically

• Location data: With your permission, we collect your approximate location (latitude and longitude) to find nearby restaurants and places. Location is used only during active sessions and is not stored persistently.
• Usage data: Swipe activity (likes and skips), match history, saved places, session participation, points and rank/achievement stats, and feature usage statistics.
• Analytics and session replay: We use a product-analytics service to understand how features are used. This captures events such as screens viewed and in-app interactions, and — where enabled — masked session replays (recordings of on-screen activity). Masking is applied on your device before anything is sent: all text you type (including email, name, and searches), all images (including profile photos and menu/food scans), and native payment screens are masked, so your personal content is not captured.
• Device information: Push notification token for delivering notifications to your device.
• Error and diagnostic data: Crash reports and error logs to improve app stability.

1.3 Information We Do Not Collect

• We do not receive or store your payment-card or bank-account details. Apple processes payments; we receive subscription status and purchase-related identifiers needed to unlock and manage Premium access.
• We do not collect contacts or address book data.
• We do not use advertising identifiers or tracking pixels.
• We do not collect browsing history outside the App.

2. How We Use Your Information

Purpose	Data Used
Provide and operate the App	Account info, profile, usage data
Find nearby restaurants and places	Location (with permission)
Enable group swiping sessions	Session preferences, swipe activity
AI Scanner analysis (menus and meals)	With your explicit permission, menu or food photos processed by third-party AI and not stored by us
Send push notifications	Device push token
Manage friend connections and leaderboard	Alias, profile name, avatar, points and rank
Understand feature usage and improve the App	Analytics events and masked session replays
Improve app stability	Crash reports, error logs
Provide and manage Premium access	Subscription status and purchase-related identifiers from Apple and our subscription service provider

3. Service Providers

We work with trusted service providers that help us operate, secure, and improve Veyalo. These providers are only allowed to process information as needed to provide services to us.

Before the first AI scan, the App asks for your explicit permission to send the photo you choose to Google Gemini or, if Gemini is unavailable, OpenAI. Declining this permission does not affect the rest of the App. You can withdraw permission at any time under More > AI Photo Processing.

Category	Purpose	Data Processed
Authentication and hosting	Account login, secure data storage, and real-time app features	Account data, profile data, session data
Maps and place discovery	Finding nearby restaurants and places	Location coordinates, search filters, place queries
AI processing (Google Gemini, OpenAI)	Analyzing scanned menu and food photos to identify dishes, estimate calories, and list ingredients	Menu or food photos sent to and processed in real time by third-party AI providers; not stored by us after analysis
Notifications	Delivering session, match, friend, and reminder notifications	Device push token, notification content
Product analytics & session replay	Understanding feature usage and improving the App	Screens viewed, interaction events, and masked session recordings (text, images, and native payment screens masked on-device)
App diagnostics	Crash reporting, error tracking, and reliability improvements	Error logs, device/app details, crash traces
Subscriptions	Processing, restoring, and validating Premium access	Subscription status, product, expiration, and purchase-related account identifiers; payment details remain with Apple
Generated media	Default avatar images and visual profile elements	Avatar seed or display alias only

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. Your information may be shared in the following limited circumstances:

• Within swiping sessions: Your display name, avatar, and swipe activity are visible to other participants in sessions you join.
• Friend connections: Your alias and display name are visible to users who send or receive friend requests.
• Leaderboard: Your alias, avatar, points, and rank are visible to your friends on the friends leaderboard.
• Service providers: We share data with the third-party services listed above solely to operate the App.
• Legal requirements: We may disclose information if required by law, court order, or governmental regulation.

5. Data Storage and Security

• All data is transmitted over encrypted HTTPS connections.
• Passwords are managed by a secure authentication provider and are never stored in plain text by us.
• User authentication uses industry-standard JWT tokens.
• Database access is restricted and protected by role-based access controls.
• We apply rate limiting on authentication endpoints to prevent abuse.

6. Data Retention

• Account data: Retained for as long as your account is active.
• Saved places, points, and stats: Retained while your account is active and permanently removed when you delete your account.
• Session data: Swiping sessions automatically expire after 4 hours.
• Menu and food photos: Processed in real-time by third-party AI providers and not stored after analysis is complete.
• Scan history and nutrition goals: Stored only on your device (most recent scans, capped), never uploaded to our servers, and removable at any time from within the App.
• Error logs: Retained according to our diagnostics provider's data retention policies.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information via your profile settings.
• Deletion: Permanently delete your account and all associated data from within the App or by contacting us. Deletion is immediate and irreversible, cascading to all related records.
• Location: Revoke location permission at any time through your device settings. The App will continue to function but cannot find nearby places.
• Notifications: Disable push notifications through your device settings at any time.
• Camera and photos: Revoke camera or photo library access through your device settings at any time.
• AI photo processing: Decline permission before your first scan or withdraw it at any time under More > AI Photo Processing. After withdrawal, no new scan photo is sent unless you grant permission again.

8. Children's Privacy

Veyalo is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. By using Veyalo, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. Note: we do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top. Continued use of the App after changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact Us