Who we are
Velio is built by NightFlareProduction (NFP), an independent project based in Prague, Czech Republic. NFP is the data controller for anything you submit on this site or in the Velio app.
The fastest way to reach us about anything privacy-related is by email at velio.app@proton.me. We don't publish a postal address on a public webpage, but we'll provide one in writing if your data request specifically requires postal correspondence — just ask.
What we collect, when
Velio is currently in development phase. The site is a marketing landing with a waitlist, and the app itself isn't shipped yet. So this section describes both what's true today and what will become true once the app launches — that way nothing changes silently in the background.
Today (waitlist only)
The only personal data Velio collects right now is the email address you submit through the waitlist form on velioapp.netlify.app. We use it for one purpose: to email you once when Velio is ready, plus any meaningful update along the way (we expect "any meaningful update" to mean roughly zero or one emails between now and launch).
We do not run any tracking analytics, advertising pixels, profile builders, or third-party scripts on this site. The visit counts we see come from our hosting provider's server logs, in aggregate, with no cookies and no personal identification.
When the app ships
Once Velio is released, the app will additionally process:
- Account information — your name and email when you create an account.
- Content you create — journal entries, food logs, intentions, mood selections, focus-mode preferences.
- Health data via Apple HealthKit — steps, sleep, mindful minutes, active energy. This is a special category of data under EU law and we treat it accordingly.
- Camera photos — when you take a photo to log a meal, the image is analyzed locally on your device. The photo and any nutritional data extracted from it stay on your device.
- Voice recordings — when you log a meal by voice, the audio is transcribed locally on your device. The audio is discarded immediately; only the transcribed text is kept on your device.
Everything in this list is processed on your device. Health data, photos, and voice recordings never leave your phone and never reach NFP's servers. This isn't a marketing claim — it's how the app is technically built. If a future feature ever needs to send any of this data off-device (for example, a server-side AI food recogniser), we'll update this policy first and ask for your explicit consent before processing anything.
Where the rest of your data lives
The waitlist email lives with our forms host, Netlify, under their data processing agreement for European users. Netlify is a US company, so this counts as an international data transfer under GDPR; Netlify provides Standard Contractual Clauses to cover the transfer. Your email is visible only to NFP, never sold, never shared with advertisers, never used for any purpose other than the launch announcement.
Once the app ships, your account info and content are stored on your device, and optionally synced across your devices via Supabase servers (which is Supabase's encrypted infrastructure, not ours). NFP does not operate a server that holds your journal entries, food logs, or intentions.
Who else sees your data
Nobody. NFP does not sell data, does not share it with advertisers, does not feed it to data brokers, does not use it to build profiles for marketing.
The only third parties involved are infrastructure providers we cannot avoid: Netlify (forms host), Apple (App Store distribution, HealthKit), Supabase (server host for cloud sync). Each is bound by its own data processing agreement and processes data only to deliver the technical service.
If this ever changes — for example, if Velio ever does decide to use a paid analytics tool, or to share aggregate anonymised statistics with a research partner — we will update this policy and tell you before the change takes effect.
How long we keep it
Waitlist emails: until launch + a reasonable wind-down to send the "Velio is here" announcement. After that we delete the list. You can ask us to remove your email from the list at any time — one email to us and it's gone within a few days.
App data (after launch): for as long as you use Velio. When you delete your account, your content is removed from any device sync within thirty days.
Your rights under EU law
Because we're based in the EU and you may be too, GDPR gives you several rights over your personal data. You can:
- Ask what data we have about you (right of access)
- Ask us to correct inaccurate data (right of rectification)
- Ask us to delete your data (right of erasure, sometimes called the right to be forgotten)
- Ask us to limit how we process your data (right of restriction)
- Ask for an export of your data in a portable format (right of portability)
- Object to specific kinds of processing
- Withdraw any consent you've previously given, at any time
To exercise any of these, email velio.app@proton.me. We'll respond within thirty days, usually much faster, and we won't charge you for it. If you feel we're handling your data badly and we haven't resolved it, you have the right to lodge a complaint with the Czech data protection authority — the Úřad pro ochranu osobních údajů at uoou.cz.
Cookies, storage, tracking
This site does not set any tracking cookies. There's no cookie banner because there's nothing to consent to.
The little iPhone preview in the onboarding are just screenshots that are hosted on Netlify.
The waitlist modal also uses local storage briefly during local development. On the live site, your submitted email goes directly to Netlify Forms.
Minimum age
Velio is for adults and older teens. You should be at least 16 years old to join the waitlist or use the app. If you're under 16 and have already submitted your email, ask a parent or guardian to email us and we'll remove it.
Changes to this policy
If we ever change this policy in a way that affects you — like adding a new data category, a new third party, or a new processing purpose — we'll update the "last updated" date at the top of this page and email everyone on the waitlist about the change before it takes effect. Cosmetic edits and clarifications won't trigger a notification.
How to reach us
Anything privacy-related — questions, data requests, complaints, or just curiosity — goes to velio.app@proton.me. We read everything that lands there.