This Privacy Policy explains how the Vellua application (“Vellua”, “the app”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use it. It applies to the Vellua app on the Apple App Store and Google Play and to related services. By using Vellua, you agree to the practices described here.
Vellua helps you understand the surface, cosmetic condition of your skin, build a personalised routine, and track changes over time. Our guiding principle is simple: understand you, don’t exploit you.
Vellua is intended only for individuals who are 18 years of age or older. We do not direct the app to children and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
Vellua provides cosmetic and general wellness information only. It is not a medical device, and it does not diagnose, treat, cure, or prevent any disease or condition. Vellua does not detect skin cancer, moles, lesions, or any medical condition, and it should never be used for that purpose. Always consult a qualified healthcare professional or dermatologist for medical concerns. Where you tell us about pregnancy, breastfeeding, or medication, we use that only to avoid suggesting cosmetic ingredients that may not suit you — this is not medical guidance.
We collect only what the app needs to work. Most of your information is stored on your device by default. If you choose to create an optional account, some of it is also backed up to our cloud so your progress survives a reinstall.
| Category | Examples | Where it lives |
|---|---|---|
| Photos (facial images) | Selfies you capture to scan your skin, and the AI-generated “glow preview” created from them | Stored only on your device. Sent to our processing service transiently to produce results (see §5); not stored on our servers. |
| Skin & wellness inputs | Your quiz answers: skin goal, skin type, how skin affects you, product history, budget, routine size, and sensitivity flags (e.g. fragrance sensitivity, reactions to actives, pregnancy/breastfeeding, medication) | On your device; backed up to our cloud only if you sign in |
| Scan results | Your Glow Score, per-concern scores, and routine — derived from your scan and answers | On your device; backed up to our cloud only if you sign in |
| Account information (optional) | If you use Sign in with Apple, a unique account identifier (and any relay email you choose to share) | Apple & our cloud (Firebase Authentication) |
| Purchase information | Subscription status and transaction identifiers for managing your subscription and free trial | Apple / Google & our payments provider (RevenueCat). We never receive your full card details. |
| Usage & diagnostics | In-app events (e.g. which onboarding step you reached), feature usage, and crash/performance data — used to improve the app | Our analytics/backend (Firebase) |
| Device & notification data | A push notification token and basic device/OS information needed to deliver reminders and operate the service | Our backend (Firebase Cloud Messaging) |
Some of the inputs above (skin concerns, and flags such as pregnancy/breastfeeding or medication) may be considered sensitive or health-related data in your region. We treat them as sensitive and use them only to personalise your cosmetic routine and keep suggestions safe for you.
Your face photo is the most personal thing you share with Vellua, so we hold it to the strictest standard:
We instruct our AI processing providers to use your photo solely to perform your requested analysis and preview, not for their own purposes and not to train their models. See §8.
We do not use your information for third-party advertising, and we do not sell your information.
We share information only with the service providers that make Vellua work, and only for the purposes described here. These providers are bound by their own obligations to protect your data.
| Provider | Purpose | Learn more |
|---|---|---|
| Google Firebase (Cloud Functions, Firestore, Authentication, Cloud Messaging) | Secure backend, optional account & cloud backup, notifications, diagnostics | Firebase privacy |
| Google (Gemini AI, via our backend) | Analysing your scan photo to estimate cosmetic skin condition, and creating your optional glow-preview image | Google privacy |
| RevenueCat | Managing subscriptions, trials, and purchase restoration | RevenueCat privacy |
| Apple & Google (app stores) | Processing payments and, if you choose, Sign in with Apple | Apple · Google |
We may also disclose information if required by law, to protect the rights, safety, and security of our users or Vellua, or in connection with a business transfer (such as a merger or acquisition), in which case we will notify you of any change in how your information is handled.
Vellua uses artificial-intelligence services to analyse your scan and to create your optional glow-preview image. To do this, your resized photo and relevant context (such as your stated skin goal and sensitivities) are transmitted to Google’s Gemini AI (see §7). We instruct Google so that your photo is used only to fulfil your request and is not retained by us. The AI-generated glow preview is a cosmetic visualisation, not a prediction or guarantee of future results. Where your region requires it, we rely on your consent for this AI processing, which you provide before your first scan and can withdraw at any time by declining to scan and deleting your data.
We do not sell your personal information and do not share it for cross-context behavioural advertising. Residents of California, Colorado, Connecticut, Virginia, and other states with privacy laws may exercise the rights described in §10, including the right to access, delete, and correct personal information, and to opt out of sale/sharing and certain profiling. We treat facial images and health-related inputs as sensitive personal information and use them only for the purposes described in this policy.
Where the GDPR or UK GDPR applies, our legal bases for processing are: consent (for scanning, AI processing of your photo, and special-category/health-related inputs), performance of a contract (to provide the app and your subscription), legitimate interests (to secure and improve the app, balanced against your rights), and legal obligation. You have the right to lodge a complaint with your local supervisory authority.
We use encryption in transit (HTTPS/TLS) for data sent between the app and our services, keep API keys on our secure backend rather than in the app, store your photos in the app’s private on-device storage, and limit access to information. No method of transmission or storage is completely secure, but we work to protect your information using a commercially reasonable standard of care.
Our service providers may process information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers. By using Vellua, you understand your information may be processed in these locations.
Vellua is not intended for anyone under 18 and we do not knowingly collect their information. If we learn that we have collected personal information from someone under 18, we will delete it promptly.
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide notice in the app. Your continued use of Vellua after an update means you accept the revised policy.
Questions, requests, or privacy concerns? Contact us at:
Email: dreamprayer.dev@gmail.com