Privacy Policy

1. Who can use Velvet

Velvet is intended only for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has used the App, please contact us and we will remove their information.

2. Information we collect

We collect the following categories of information:

• Account information. Your email address and authentication identifiers when you sign up or sign in. If you choose Google Sign-In, we receive your name, email address, and profile photo from Google. Your password is managed by our authentication provider and is never visible to us.
• Profile & preferences. Information you provide during onboarding to personalize your suggestions, including your age range, gender, sexual orientation, dating goal, personality, country, language, and your calibration / preferred-style choices.
• Content you provide. The chat screenshots and any text you upload for analysis, and the match’s name you enter.
• AI analysis & suggestions. The conversation scores, insights, and reply suggestions generated for you, along with your saved conversation history.
• Device & usage data. Basic information needed to operate the App, such as notification-permission status. The App does not use third-party advertising, analytics, or tracking SDKs, and does not collect device identifiers for tracking.

Some of this information — in particular your gender and sexual orientation — is considered sensitive personal data. We collect it solely to personalize the replies the App generates for you, and we process it based on your consent. You can stop providing it by not using the App.

3. How we use your information

We use your information only to:

• Analyze the conversations you upload and generate reply suggestions and opening lines.
• Personalize those suggestions to match your stated preferences and style.
• Keep your conversation history available to you in the App.
• Operate, secure, and maintain the App and your account.
• Send you local, on-device notifications you have allowed.

We do not use your content for advertising, and we do not sell or rent your personal data.

4. How your information is shared

We share your information only with the service providers that help us run the App. These are:

• Supabase — our backend provider, which handles authentication, database storage, file storage, and server functions. Your account data, preferences, uploaded screenshots, and conversation history are stored on Supabase’s infrastructure.
• OpenAI — our AI provider. When you request an analysis, the screenshots and context you submit (the match’s name, your profile details, and any prior-analysis summary) are sent to OpenAI to generate the analysis and replies. This processing is governed by OpenAI’s API terms and data-usage policies.
• Google — if you use Google Sign-In, Google processes your sign-in and shares your basic profile information with us.

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer. We do not sell your personal data.

5. Where your data is stored and how it's protected

Your data is stored on Supabase’s infrastructure and transmitted over encrypted (HTTPS) connections. We apply the following safeguards:

• Row-level security so that each account can only access its own data.
• Uploaded screenshots are kept in private, per-user storage that only you can access, served through short-lived signed links.
• Our AI provider key is held only on our servers and is never included in the App.

6. Data retention

We keep your account information, preferences, conversations, and screenshots for as long as your account is active, or until you delete them. There is no automatic expiry. You can delete individual conversations from within the App at any time.

To request deletion of your entire account and all associated data — including stored screenshots — email us at hello@tryvelvet.app and we will remove it.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal data we hold about you, to withdraw consent, and to object to or restrict certain processing (including under the GDPR and CCPA). You can exercise these rights, including account deletion, by contacting us at hello@tryvelvet.app. You can also sign out at any time and control notifications from your device settings.

8. International data transfers

Our service providers may process and store your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers. By using the App, you understand your information may be processed in these locations.

9. Children's privacy

Velvet is an adults-only (18+) service. We do not knowingly collect personal information from children. If we learn that we have collected information from someone under 18, we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date at the top of this page. Significant changes will be communicated where appropriate.

11. Contact us

Questions about this policy or your data, or to make a privacy request? Email us at hello@tryvelvet.app.