Privacy Policy

1. Introduction

Welcome to Vero ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using Vero, your iPhone storage cleaning app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Vero to optimize and clean your iPhone storage.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address (when you register an account)
• Storage Data: Information about your device storage, photos, and cleaning preferences
• User Preferences: Theme colors, cleaning preferences, and other customization settings
• Usage Analytics: How you use our storage cleaning features and app performance data

2.2 Information Collected Automatically

• IP Address: Used temporarily for rate limiting and security purposes
• Usage Data: How you interact with our storage cleaning features
• Technical Information: Device information, iOS version, and storage statistics

2.3 Information We Do NOT Collect

• We do not use tracking cookies or analytics tools
• We do not collect location data beyond IP address for rate limiting
• We do not store payment information (processed by Stripe)
• We do not collect phone numbers or physical addresses

3. How We Use Your Information

3.1 Service Provision

• Creating and managing your account
• Analyzing and cleaning your device storage
• Optimizing photo management and organization
• Providing customer support

3.2 Security and Fraud Prevention

• Rate limiting to prevent abuse
• Preventing unauthorized access to device storage
• Maintaining service security and integrity

3.3 Legal Basis for Processing (GDPR)

• Contract Performance: Processing necessary to provide our service
• Legitimate Interest: Security measures and fraud prevention
• Consent: Optional features and communications (when applicable)

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored securely in our database with the following protections:

• All data encrypted in transit and at rest
• Row Level Security ensures you can only access your own data
• Regular security updates and monitoring
• Geographically distributed backups

4.2 Data Retention

• Account Data: Retained until you delete your account
• IP Addresses: Used only for active rate limiting, not permanently stored
• Storage Analysis Data: Retained to improve cleaning algorithms (anonymized)
• Audit Logs: Security logs retained for up to 90 days

5. Your Rights and Controls

5.1 Data Access and Control

• View Your Data: Access your storage analysis and preferences through your dashboard
• Edit Your Data: Update preferences and account information at any time
• Delete Your Data: Remove storage analysis data or delete your entire account
• Export Your Data: Request a copy of your data in JSON format

5.2 GDPR Rights (EU Users)

• Right to Access: Request information about what data we have about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests

5.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at hello@vero.namos.io or use the data management tools in your account settings.

6. Data Sharing and Third Parties

6.1 We Do NOT Sell Your Data

We never sell, rent, or trade your personal information to third parties for marketing purposes.

6.2 Limited Sharing

We only share data in these specific circumstances:

• Service Providers: Secure database hosting, Stripe (payments), Netlify (hosting)
• Legal Requirements: When required by law or to protect our rights
• Analytics Data: Anonymized usage statistics to improve Vero's cleaning algorithms

6.3 Third-Party Services

• Database Provider: Secure database hosting and authentication
• Stripe: Payment processing (when using paid features)
• Netlify: Web hosting and content delivery

7. Cookies and Tracking

7.1 Essential Cookies Only

We use only essential cookies required for the service to function:

• Authentication Cookies: To keep you logged in
• Session Cookies: To maintain your session state
• Security Cookies: To prevent cross-site request forgery

7.2 No Tracking or Analytics

We currently do not use:

• Google Analytics or similar tracking tools
• Advertising cookies or pixels
• Social media tracking buttons
• Third-party marketing tools

7.3 Future Analytics (Opt-in Only)

If we introduce analytics tools in the future, we will:

• Ask for your explicit consent
• Provide clear opt-out mechanisms
• Use privacy-focused analytics tools
• Update this privacy policy accordingly

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place:

• All service providers are GDPR-compliant
• Standard contractual clauses for international transfers
• Adequate levels of data protection maintained

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will:

• Notify you of any material changes via email or service notification
• Post the updated policy on our website
• Update the "Last Updated" date at the top of this policy
• For significant changes, we may require re-consent

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Compliance Certifications

• ✅ GDPR Compliant (EU General Data Protection Regulation)
• ✅ CCPA Aware (California Consumer Privacy Act)
• ✅ SOC 2 Type II (via Supabase infrastructure)
• ✅ ISO 27001 Certified Infrastructure