Privacy policy

1. Data we collect

The data we collect depends on how you use the platform. These are the main categories:

• Personal information: name, email address, phone number, country, profile photo and user identifiers.
• Precise and approximate location: used to display maps, plan routes, log trips and surface nearby benefits. We collect it only when you grant the corresponding permission.
• Photos and videos: those you upload to your profile, trips, services or posts.
• User-generated content: trips, services, experiences, events, bios, comments and reviews.
• Purchase and subscription history: records of your in-app purchases and Boost or Pro plans.
• In-app interactions: screens visited, actions taken, searches and usage metrics so we can understand how the product is used.
• Device information and technical logs: device identifiers (including the Android Advertising ID), model, operating system, language, IP address, crash logs and diagnostics.

2. How we use your data

• Provide and maintain Velok Life features: authentication, trip planning, service publishing, community comments and messages.
• Process purchases, subscriptions and billing.
• Diagnose crashes, monitor performance and improve app stability.
• Analyze, in aggregate, how the product is used so we can improve the experience.
• Detect fraud, protect accounts and comply with legal obligations.
• Communicate with you about important updates, service changes and operational notifications.

3. Who we share your data with

We do not sell your personal data. To operate the platform we rely on trusted technology providers, each governed by their own privacy terms:

• Google (Firebase Analytics, Firebase Cloud Messaging, Google Sign-In): usage events, device identifiers, push notifications and Google account authentication.
• Meta Platforms (Facebook SDK, Facebook Login): campaign attribution and social login.
• Sentry: crash logs, diagnostics and performance data.
• Mapbox: map rendering and coordinate processing.
• Amazon Web Services (Cognito, RDS, S3, CloudFront): authentication, database storage and content delivery.
• Stripe: payment processing for plans and subscriptions.
• Apple App Store and Google Play: in-app purchase processing.
• Discourse: community forums linked from Velok.
• Public authorities: when applicable law requires us to disclose information.

4. Data retention

We keep your data while your account is active or while it is needed to provide the service. When you delete your account, we deactivate your profile and associated data immediately and complete the deletion within the following 30 days.

Due to legal, tax or fraud-prevention obligations we may retain minimum transaction records (purchases, payments and billing) for the period required by applicable law, typically up to 10 years. These records are decoupled from your public profile and used only for audit and compliance purposes.

5. Your rights

You may request access to, rectification, deletion or portability of your personal data, as well as object to certain processing activities. To exercise these rights, write to privacy@velok.app from the email address associated with your account.

If you want to delete your account, you can do so directly from the mobile app (Profile → Settings → Delete account) or from your Dashboard on the web. We also publish the detailed steps at https://velok.app/legal/eliminar-cuenta.

6. Security

We use encryption in transit (HTTPS/TLS), access controls, backups and periodic reviews to protect your data against unauthorized access, alteration or disclosure. No system is infallible, so we recommend choosing strong passwords and keeping your device secure.

7. International transfers

Velok Life relies on providers located in different countries, mostly in the United States (Google, Meta, AWS, Sentry, Stripe, Mapbox). When we transfer your data outside your jurisdiction we apply standard contractual clauses and other technical and organizational measures to ensure an adequate level of protection.

8. Minors

Velok Life is not directed specifically to minors. If you are a minor under the laws of your country, you must have the consent and supervision of your parent or legal guardian before using the platform. If we become aware that we have collected data from a minor without proper authorization, we will delete it.

9. Changes to this policy

We may update this policy to reflect regulatory changes, new features or adjustments to the providers we use. We will notify you through the platform or by email when changes are relevant. The last update date is always shown at the top of this page.

10. Contact

For any questions about this policy or about how we process your personal data, write to privacy@velok.app.