Privacy Policy

1. Introduction

Velora ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Velora mobile application on iOS and Android. By using Velora, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

• Birth data: date, time, and place of birth — used exclusively to generate your natal chart (Sun sign, Moon sign, Ascendant, house placements, and planetary aspects)
• Display name (optional) — for personalization within the app
• Email address — only when you choose to create or link an account for cross-device sync
• Mood and journal entries — data you voluntarily enter in Astro-Journaling for self-reflection and AI therapeutic feedback
• In-app purchase and subscription history — processed through Apple App Store, Google Play Store, and RevenueCat
• Credit balance and usage data — your in-app credit transactions, daily check-in activity, and feature usage
• Anonymous device identifiers and analytics — app performance, crash reports, and usage patterns via Firebase Analytics
• Compatibility partner data — birth information of partners you add for synastry analysis (with their awareness)

3. How We Use Your Information

Your data is used strictly for the following purposes:

• Generate personalized Cosmic Weather daily forecasts based on your full natal chart and current planetary transits
• Provide AI Tarot readings (78 Rider-Waite cards) interpreted by AI in the context of your specific question
• Calculate Numerology profiles — 6 Core Numbers (Life Path, Expression, Soul Urge, Personality, Birthday, Maturity) and Personal Year/Month/Day cycles
• Analyze compatibility through basic Sun sign matching (free) and deep AI synastry (Moon-Moon, Venus-Mars aspects)
• Process AI Chat conversations with natal chart context awareness
• Compare your chart with 20+ historical figures (deceased >70 years, public domain only)
• Generate monthly Cosmic Audit energy summaries and AI life coach insights
• Process in-app purchases, manage subscriptions (Free, Pro Monthly $7.99, Pro Yearly $59.99), and credit pack purchases ($0.99–$19.99)
• Deliver push notifications (with explicit opt-in consent only)
• Improve app quality through anonymous, aggregated analytics

4. AI Data Processing

Velora uses OpenAI's language models to generate interpretive content across multiple features: Cosmic Weather AI, AI Tarot, AI Chat, AI Compatibility, Numerology AI, Historical Figures AI, and Cosmic Audit AI. When processing your request, we send relevant birth data and context to OpenAI's API. Important safeguards include:

• All AI-generated content is clearly marked with a 🤖 badge
• AI conversations are not stored on third-party servers beyond the current session
• Real-time content moderation via our AiOutputValidationService filters all AI responses
• Blocked content categories: death predictions, medical diagnoses/advice, legal advice, self-harm/violence content, and hate speech
• Cultural sensitivity checks are applied per locale before AI processing
• Fallback responses are provided when AI content is blocked by our moderation system
• AI content is for entertainment and self-reflection only — never a substitute for professional advice

5. Data Storage & Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for all data at rest
• TLS 1.3 encryption for all data in transit
• Least-privilege access controls with role-based authorization
• Regular security audits and penetration testing
• Optimistic locking on credit transactions to prevent double-spending
• Server-side validation of all purchase receipts via RevenueCat webhooks
• Sandbox transaction isolation — test transactions are blocked in production

6. Children's Privacy (COPPA Compliance)

Velora fully complies with the Children's Online Privacy Protection Act (COPPA) and similar international regulations. Our safeguards include:

• Age verification through birth date provided during onboarding — verified and stored securely
• Users under 13 years old are completely restricted from accessing all AI-powered features (Cosmic Weather AI, AI Tarot, AI Chat, Compatibility AI, Numerology AI, Historical Figures AI, Cosmic Audit AI)
• Age-appropriate messaging is displayed to underage users when AI features are blocked
• Minimal data collection for minors — only basic natal chart computation, no AI processing
• Parents/guardians may request deletion of their child's data at any time by contacting us

7. Third-Party Services

We share data with the following third-party service providers, each under their own privacy policies:

• RevenueCat — processes all subscription and in-app purchase transactions, manages geo-pricing (PPP-adjusted pricing across 5+ markets), and handles intro offer eligibility (1 offer per device/user)
• OpenAI — processes AI content generation requests; we do not grant OpenAI permission to use your data for model training
• Firebase Analytics (Google) — collects anonymous app performance and usage analytics
• Google AdMob — serves advertisements to Free tier users only (banner, interstitial, rewarded video, and app-open ads); Pro subscribers see no ads
• Apple App Store / Google Play Store — processes payments and manages app distribution

8. Your Rights

Regardless of your location, you have the following rights regarding your personal data:

• Right to Access — request a complete copy of all personal data we hold about you
• Right to Deletion — request permanent deletion of your account and all associated data
• Right to Data Portability — receive your data in a structured, machine-readable format
• Right to Rectification — correct any inaccurate personal data
• Right to Withdraw Consent — revoke consent for data processing at any time without affecting prior processing
• Right to Opt Out — disable analytics tracking, marketing communications, and push notifications
• Right to Non-Discrimination — exercising your rights will not affect your access to our services

9. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Account data (birth info, preferences, credits): retained while your account is active
• Upon account deletion: all personal data is permanently removed within 30 days
• In-app purchase transaction records: retained for 7 years as required by financial regulations
• Anonymous analytics data: retained for up to 24 months in aggregated, non-identifiable form
• AI conversation logs: deleted immediately after the session ends; not stored server-side
• Journal entries: deleted with your account; exportable before deletion upon request

10. Cookies & Tracking Technologies

The Velora mobile application does not use browser cookies. We use anonymous device identifiers provided by the operating system (IDFA on iOS, GAID on Android) for analytics and ad attribution purposes. You can opt out of personalized tracking through your device's privacy settings (iOS: Settings > Privacy > Tracking; Android: Settings > Google > Ads).

11. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure adequate data protection through Standard Contractual Clauses (SCCs) approved by the European Commission, compliance with the EU-US Data Privacy Framework, and equivalent safeguards for other jurisdictions.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes through in-app notifications, email (if you have an account), or a prominent notice within the app. Your continued use of Velora after changes take effect constitutes acceptance of the updated policy.

13. Contact Us