VeyloLegal
Privacy Policy
1. Who we are
Veylo ("we", "us") makes the Veylo app, a private vault for photos, videos and files on Android. This policy explains what information the app and this website handle and why.
2. Your vault stays on your phone
Everything you add to your vault is encrypted on your device before it is stored, using AES-256-GCM. The keys are protected by your PIN and the Android Keystore in your phone's secure hardware. Your files are not uploaded to us or to any cloud service, and Veylo has no backup or sync of vault contents. Because we never hold your files or the keys to them, we cannot view, restore or hand them over.
To import files, Veylo asks Android for access to your photos and videos, or uses the system file picker. It reads only the items you choose, and encrypts them on the device.
3. What we collect
To use Veylo you sign in with Google or with an email and password. When you are signed in, the app keeps a small profile linked to your account. It is updated when you open or unlock the app and shortly after your vault totals change.
| Category | Details |
|---|---|
| Account | Account ID, email address, display name, profile photo link (Google accounts), sign-in method, whether your email is verified. |
| Activity dates | When you first used the app, when you last opened it, and when you last signed in. |
| Device | Manufacturer, brand and model, Android version and security patch level, and a random ID created when the app is installed (it changes if you reinstall). |
| App | App version and the store it was installed from. |
| Language and region | Your device language, country setting and time zone. |
| Advertising ID | Your Google Play advertising ID and whether ad personalisation is limited. If you have reset or deleted this ID in Android settings, we don't receive one. |
| Vault totals | Whether a vault exists, the number of files and folders, the total size, counts per type (photos, videos, documents, audio, other), and whether fingerprint unlock is on. Counts only, never names or contents. |
| App disguise | Which home-screen icon you chose (Veylo, Calculator, Clock or Weather) and when you last changed it. |
| PIN recovery key | If you use "Forgot PIN", an encrypted recovery key for your vault. On its own it is useless: it only works together with a key held in your phone's secure hardware, which never leaves the phone. |
This website has no accounts, cookies, analytics or tracking. Our hosting provider may keep standard server logs, such as IP address and pages requested, for security and reliability.
4. Why we use it
- To run your account: signing in, signing out and deleting your account.
- To let you recover a forgotten PIN on the phone where your vault lives.
- To prevent misuse of offers: recognising accounts that were deleted, so new-user offers go to genuinely new users.
- To keep Veylo safe and working: spotting abuse, supporting you when you contact us, and suspending accounts that break the rules.
- To understand usage in aggregate: how many people use Veylo, which Android versions and devices to support, and how much storage vaults use.
We don't sell your information, we don't show ads in Veylo, and we don't use your information for advertising.
A small team of Veylo administrators can see the account profile described above, in order to support users and protect the service. They cannot see vault contents, file names, your PIN or your recovery key, and every administrative action is logged.
5. What we never collect
- Your photos, videos, documents, audio or any other vault files.
- File names, folder names, thumbnails, previews or your searches inside Veylo.
- Your PIN. It is never stored or sent anywhere, only a stretched, hardware-bound form used on your phone.
- Your fingerprint. Android checks it; Veylo only receives "yes" or "no".
- Your contacts, location, messages or call history.
6. Who processes it
Account sign-in and the profile above are handled by Google Firebase (Firebase Authentication and Cloud Firestore), provided by Google LLC, which processes the data on our behalf. If you sign in with Google, Google's own privacy policy also applies to that sign-in. We don't share your information with anyone else, unless the law requires us to.
7. How long we keep it
We keep your account profile for as long as your account exists. When you delete your account, we turn off your sign-in, remove your PIN recovery keys, and keep your profile marked as deleted. We keep it to prevent misuse of new-user offers and promotions (for example, deleting an account and signing up again) and to protect the service, and we use it only for those purposes. You can ask us to review erasure of the kept profile; see Contact. Copies in our providers' routine backups expire on their normal schedule.
8. Security
Vault files are encrypted with AES-256-GCM in authenticated segments. Your PIN is stretched with 210,000 rounds of PBKDF2-HMAC-SHA256 and bound to a non-exportable Android Keystore key. Fingerprint unlock uses a hardware key that Android releases only after a strong biometric check. Your profile data is protected by Firebase security rules, so each user can access only their own profile. No system is perfectly secure, but we design Veylo so that even we can't read your vault.
9. Your choices and rights
- Delete your account at any time in the app, or with a request. Your sign-in is closed and your profile is kept marked as deleted (see section 7). See Delete your account.
- Erase your vault in the app under Settings › Account › Delete vault and data. This permanently erases your files on the phone.
- Advertising ID: reset or delete it in Android Settings › Privacy › Ads.
- Access or correct your information by contacting us. Depending on where you live, you may also have rights to object to or restrict processing, to data portability, and to complain to your data protection authority.
10. Children
Veylo is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.
11. Changes
If we change this policy, we will update the date at the top. If the changes are significant, we will also tell you in the app.
12. Contact
Questions or requests about privacy: info@foxcybersolutions.co.in.