Velaven

Privacy Policy

Last updated: June 30, 2026 · For users in the United States and Canada.
The short version. Velaven is an AI companion for adults (18+). To make your companion work, your conversations are sent to and processed by AI providers and our systems. Velaven is not end-to-end encrypted. We use your information to run the Service, remember what you share, and keep you safe. We don’t sell your personal information, we don’t use the content of your conversations for advertising, and we don’t use your identifiable conversations to train AI models. You can delete your account and data anytime in the app.

This Privacy Policy explains what Velaven (“we,” “us”), a business based in Ontario, Canada, collects, how we use and share it, and the choices you have. It applies to the Velaven app and related services. By using the Service you agree to this Policy and our Terms of Service.

1. Information we collect

CategoryExamples
AccountEmail address; authentication identifiers (including if you sign in with Apple or Google).
Age / date of birthYour date of birth, collected to confirm you are 18+. We use it for age-gating and, with your settings, for birthday features.
ProfileDisplay name, language/locale, interests you choose, and notification preferences.
Companion settingsYour companion’s name, personality, traits, and any topics you ask it to avoid.
ConversationsThe messages you exchange with your companion.
Memory & eventsFacts the Service derives from your conversations to provide continuity (e.g., “has a dog named Max”) and upcoming events you mention.
Usage & deviceApp activity, message counts, device and app information, log data, approximate region/time zone, and push-notification tokens.
PurchasesSubscription status and transaction identifiers. Payments are processed by the app store (Apple or Google); we do not receive your full payment-card details.
Support & safetyMessages you send us, and protected records our systems create when they detect a possible safety/crisis signal (see §6).

2. How we use your information

Our legal bases / purposes are providing the service you request (performance of our agreement), your consent (e.g., notifications), our legitimate interests in operating and securing the Service, and compliance with law.

3. How your conversations are processed (AI)

To generate replies and run companion features, your recent conversation is sent to third-party AI providers that operate the underlying AI models, and is processed by our systems to maintain memory, create summaries, and detect safety signals. We may change our AI and other service providers at any time as our technology and costs evolve.

We do not use the content of your conversations to train AI models in a way that identifies you, and our AI providers process your messages under their own commitments to us and do not use our customers’ data to train their models for their own purposes. We may use de-identified or aggregated information (which does not identify you) to understand usage and improve the Service.

Some information is kept on the server and is never sent to the AI, for example, your date of birth.

4. How we share information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We disclose information only to:

5. Where your information is processed (cross-border)

We and our service providers are located in, and process information in, the United States and Canada. If you are in Canada, your information (including your conversations) may be processed and stored in the United States and may be accessible to U.S. authorities under U.S. law. By using the Service you consent to this cross-border processing.

6. Safety records

When our systems detect a possible crisis or safety concern, we keep a limited, protected record so we can operate our safety features and meet legal obligations. Where feasible this record is stored in a pseudonymized form (for example, using a keyed hash rather than the raw message) and is restricted to authorized purposes.

7. Security & how conversations are protected

We protect your information with industry-standard safeguards: data is encrypted in transit (TLS) between your device and our servers, and encrypted at rest by our infrastructure providers. Your login credentials are stored in your device’s secure storage. We limit access to conversations to the systems and people who need it to operate, support, and secure the Service.

Velaven is not end-to-end encrypted. For your companion to work, your messages must be readable by our systems and our AI providers, so your conversations are processed in unencrypted form by us and our service providers and are not encrypted in a way that prevents us or our providers from accessing them. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. How long we keep your information (retention)

We keep your information for as long as your account is active, so your companion can remember you when you return. You can delete your account and associated data at any time in the app; deletion is permanent and cannot be undone. After deletion, residual copies are removed from active systems promptly and purged from backups within approximately 30 days, except where we must retain limited information to comply with law, resolve disputes, or enforce our agreements. We also delete accounts that have been inactive for 24 months, after attempting to notify you by email beforehand. We do not keep personal information longer than reasonably necessary for the purposes above.

9. Your rights & choices

You can review and update profile and companion details, manage notifications, and delete your account and data in the app. Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent.

United States (including California)

Subject to law, you may request to know, access, correct, or delete your personal information, and to receive a copy. We do not sell or “share” personal information and do not use sensitive personal information for purposes that require an opt-out. We will not discriminate against you for exercising your rights. You may use an authorized agent. To make a request, email support@velaven.app; we will verify your request through your account.

Canada (PIPEDA)

You may request access to, and correction of, your personal information, and may withdraw consent (which may limit the Service). You may also contact the Office of the Privacy Commissioner of Canada. To make a request, email support@velaven.app.

10. Children

The Service is only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will suspend access and delete their information. If you believe a minor has provided us information, contact support@velaven.app.

11. Notifications & analytics

If you enable notifications, we use push tokens to deliver them; you can turn them off in your device settings. We use privacy-respecting product analytics and crash diagnostics to understand and improve the Service. We do not use third-party advertising trackers.

12. Changes to this Policy

We may update this Policy from time to time. If changes are material, we will take reasonable steps to notify you and will update the “Last updated” date above. Your continued use after changes take effect means you accept the updated Policy.

13. Contact us

Questions, concerns, or privacy requests: support@velaven.app.