Privacy Policy
Veyoli is a private, invite-only video messenger for the people closest to you, currently in TestFlight beta. This policy explains what we collect, why we collect it, and who processes it. The short version: videos in your conversations are end-to-end encrypted. Not even Veyoli can decrypt or watch them. We show no ads, we do not track you across other apps or websites, and we never sell your data.
Who is responsible for your data
The person responsible for your personal data (the controller under the EU General Data Protection Regulation) is Balint Barcsa, the individual who runs Veyoli. Contact: contact@veyoli.com
What we collect and why
Account information
When you sign in with Apple, Apple gives us a stable identifier and, if you allow it, your name. We never see your Apple password. In the app you choose a username and display name and can add an optional avatar picture. We use this information to create your account and show who sent each video.
Waitlist
If you join the waitlist on veyoli.com we store the email address you enter and a note that it came from the website, only to tell you when there is room. To limit abuse we store a keyed hash of your IP address, not the address itself. We delete hashes older than one hour when the waitlist service next handles a request. Ask us to delete your email at contact@veyoli.com.
Your messages: end-to-end encrypted
Your videos, voice notes, photos, text replies, emoji reactions and their thumbnails are encrypted on your device before upload, and our servers store only ciphertext for them. We hold no keys, so we cannot watch them. Some data is not end-to-end encrypted: your username, display name and profile picture, group names, who is in each conversation, when messages are sent and how long they are, the welcome video an inviter may attach to an invitation until it is moved into the conversation, and anything you choose to send us in a report (description and screenshots).
Usage analytics (PostHog, EU)
We collect product-usage events and limited device and app context so we can improve the product. Before you create or sign in to an account, events use an app-generated install identifier. When you create or sign in, events are associated with a one-way hash of your account ID. This means analytics can be linked to your account, although they do not use your name. There is no in-app opt-out for these events. These events:
- include event names, timestamps, limited device and app context, and privacy-minimized event properties. They never include message content, transcripts, usernames, contact details, or your profile name;
- use an app-generated identifier and, after sign-in, a one-way hash of your account ID, not your name or email;
- are processed by PostHog on EU servers. Automatic screen and element capture, session recording, and IP-based location lookup are disabled;
- are collected only in released builds, never in development builds.
If you would like your usage events excluded or deleted during the beta, contact us at contact@veyoli.com and we will remove them.
Crash and performance diagnostics (Sentry)
If the app crashes or misbehaves, a diagnostic report is sent to Sentry so we can find and fix the problem. Reports are linked to your account through your account ID, but do not use your name or email. Except for a description you choose to write in "Report a Problem," we remove message content, video, names of people you talk to, screenshots, view hierarchies, request bodies, and direct request URLs before sending. If you use "Report a Problem" in Settings, the description you choose to write, your account ID, and recent diagnostic activity are sent to Sentry so we can investigate.
Reports and support
Every message and every user can be reported in the app. A report reaches the operator by email as soon as it is filed. We aim to look at each report as soon as we can and will act on abuse we can confirm, which can include removing content or ending an account. This is a service run by one person, so we cannot promise a fixed time. Because messages are end-to-end encrypted, we rely on the report details and any screenshots you choose to attach.
The report reason, any description you write, and screenshots you attach are not end-to-end encrypted. We retain report text so we can review it, and it is readable by us. You can also choose "Report a Problem" in Settings. Its text and recent diagnostic activity are sent to Sentry to help us investigate.
Push notification token
To deliver notifications, your device registers a push token that is routed through Apple Push Notification service and Firebase Cloud Messaging. The token is an opaque delivery address. Firebase Analytics is disabled; Firebase is used only to deliver notifications.
How the encryption works
Veyoli uses sender-key end-to-end encryption with standard, published algorithms. Your main keys are generated on your device and, if iCloud Keychain is on, synced through it, where Apple encrypts them. Some temporary keys stay on your device only. We do not hold a copy. Messages are decrypted on your device when you play them.
A recovery phrase option is planned but not available yet. Until then, if you lose all your devices and iCloud Keychain is off, you can lose access to your message history.
What we do not do
- No ads. There is no advertising in Veyoli and no advertising identifiers are used.
- No tracking. We do not track you across other companies' apps or websites, which is why the app never shows Apple's App Tracking Transparency prompt: there is nothing to ask permission for.
- No data sale. We never sell your data or share it for advertising.
- No location collection. We do not collect your location, and IP-based location lookup is disabled in our analytics.
- No contact or photo library scraping. The app does not read your contacts. Photos or videos you explicitly attach are the only library content it touches.
Data retention and deletion
Your messages and account data are kept while your account is active, so your conversations stay available to you and the other people in them.
You can delete a video you sent. It is removed from the conversation, and the app requests removal of its stored video and thumbnail files. That storage request is best effort, so this policy does not promise a physical-erasure deadline for an individual video.
You can delete your account at any time in the app under Settings, Delete Account. Deleting your account removes your sign-in record, profile, and your own standing account data. It does not delete every video you sent from conversations that still have other members. Those videos stay available to the remaining members and identify you as Deleted account.
You can delete a conversation only when you are its last member. If you leave a group that still has other members, your videos stay for them.
- Videos in a conversation that is deleted are queued for physical erasure from storage. This normally completes within about five minutes.
- Encrypted files left by deletions before 30 September 2026 are a separate legacy backlog and are not yet covered by that process.
The app does not currently offer a switch to erase every video you sent from conversations that still have other members.
- Usage analytics events are kept for up to 1 year.
- Crash and performance reports are kept for up to 30 days.
- Report screenshots are kept for about 90 days and then removed from storage.
- Report text and the moderation record are kept so we can review them.
You can export a copy of your account data (metadata only; videos cannot be exported) from Settings, Your data. Analytics events are kept for up to 1 year and crash reports for up to 30 days, as described above. They can be linked to your account through a pseudonymous identifier or account ID, but do not use your profile name.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your personal data, and to data portability, as the EU General Data Protection Regulation provides. You can export a copy of your account data from Settings, Your data (metadata only), delete your account in the app, or email contact@veyoli.com.
You also have the right to lodge a complaint with a supervisory authority. In Hungary, that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu. These rights are subject to the limits the law sets, and we cannot give you access to message content because we cannot read it.
Who processes data for us
We use these service providers to run the app:
- Supabase (database, encrypted storage, authentication; hosted on AWS us-east-1, United States): supabase.com/privacy
- Cloudflare (encrypted video storage: Cloudflare R2, EU jurisdiction; Cloudflare, Inc.): cloudflare.com/privacypolicy. Encrypted video files are stored with Cloudflare (R2, European Union jurisdiction), which acts as a storage provider for Veyoli. The files are encrypted on your phone before upload. Veyoli and Cloudflare cannot decrypt or watch them.
- PostHog (account-linked, pseudonymous usage analytics; EU-hosted): posthog.com/privacy
- Sentry (crash and performance diagnostics): sentry.io/privacy
- Apple and Google Firebase Cloud Messaging (push notification delivery only; Firebase Analytics disabled): firebase.google.com/support/privacy
- Resend (transactional email for operator notifications): resend.com/legal/privacy-policy
Why we may process your data (legal basis)
We process account information, messages and push tokens because we need them to provide the service you asked for (contract, GDPR Article 6(1)(b)).
We keep report text, report screenshots and related moderation records, and keep the service safe from abuse, on the basis of our legitimate interest in keeping the service safe (Article 6(1)(f)).
We collect crash and performance reports, so we can keep the app working, on the basis of our legitimate interest in keeping the app working (Article 6(1)(f)).
We collect usage analytics to understand how the app is used and to improve it, on the basis of our legitimate interest in improving the product (Article 6(1)(f)).
We store your email address on the waitlist only if you give it to us, on the basis of your consent (Article 6(1)(a)). You can withdraw it at any time by emailing contact@veyoli.com, and we will delete your email.
Transfers outside the EU and EEA
Our main database and encrypted storage are hosted by Supabase on AWS in us-east-1, in the United States, so data you give us, including account information, is transferred to and stored in the United States. Usage analytics (PostHog) are processed on EU servers and crash diagnostics (Sentry) are sent to Sentry's EU region. Encrypted video files uploaded from 1 November 2026 are held in Cloudflare R2 with EU jurisdiction; Cloudflare, Inc. is a US company. Push delivery goes through Apple and Google Firebase Cloud Messaging.
For providers in the United States (Supabase, Resend, Cloudflare and Google), the transfer is covered by the European Commission's standard contractual clauses, which are part of Supabase's, Resend's and Cloudflare's data processing terms, and by Google's and Cloudflare's certification under the EU-US Data Privacy Framework. Apple handles Sign in with Apple, push notifications and TestFlight under its own privacy policy, not on our behalf. Usage analytics and crash reports are stored in the EU.
Resend, our email provider, stores its data in the United States. The region we pick for sending only changes where email is sent from, not where Resend stores data.
No data protection officer is appointed, because Veyoli is run by one person and does not process data at a scale that requires one. Questions go to contact@veyoli.com.
Children
Veyoli is intended for adults only. You must be 18 or older to create an account (see our Terms), and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy as the app evolves. The effective date at the top reflects the current version, and material changes will be announced in the app or in TestFlight release notes.
Changelog: 1 November 2026: named Cloudflare (R2, EU jurisdiction) as the storage provider for encrypted video files. 3 October 2026: corrected how transfers to Apple are described. 2 October 2026: corrected what we say about analytics and diagnostics, account deletion, reports, and who processes data; added who is responsible for your data, legal basis, retention periods, international transfers and your rights. 2 October 2026 (later): added the legal basis for crash reports, usage analytics and the waitlist, the safeguard for transfers to the United States, where our email provider stores data, and that no data protection officer is appointed. 11 July 2026: moved to veyoli.com/privacy and added the usage analytics section (PostHog, EU). Supersedes the 19 June 2026 version.
Contact
Questions about this policy or your data: contact@veyoli.com
Veyoli. A circle, kept.