VEYLOPrivacy policy
Draft — pending legal review.
Who we are
Veylo is provided by Websitters. Contact: [email protected].
Data we process
Account: sign-in method and email if you choose email sign-in.
Profile: first name or nickname, age range and country. No medical history.
Preferences, only if you add them: recovery time and approaches you are open to, lower-face treatments you have had, facial hair. Stored on your iPhone; shared with a clinic only inside a case you share.
Realistic-view ratings: a thumbs up or down with the view and the names of the treatments, linked to your account or device ID. Never images.
Face data: see the Face-data notice.
Usage analytics, only if you allow them: anonymous events such as “scan completed”. Never images, face shape or landmarks.
Purchases: handled by Apple. We receive the subscription status, not your payment details.
Your rights
You can access, export, correct and delete your data in the app, withdraw consent, and complain to your data protection authority.
Sharing
We do not sell personal data. Service providers process data only on our instructions: Google (Gemini API) for Realistic view, Cloudflare for the network connection to our server, Apple for sign-in and purchases.
What we capture
Photos of your face from a few angles during a scan, the face shape and landmark points calculated from them, and on iPhones with Face ID the depth map from the TrueDepth camera.
From the depth we calculate approximate measurements (for example jaw width) and the 3D view. They are descriptive only and never used to rate you.
Why
Only to build your face model and show the visualizations you ask for. We do not use it to identify you, rate your appearance or for advertising.
Where it is processed and stored
On your iPhone. Scans, depth maps, measurements and visualizations do not leave the device unless you create a share link for a clinic or use Realistic view. A shared case contains only what the share screen lists.
Realistic view is optional and asks for your permission first. When it is on, the photo you are editing and the chosen settings are sent over an encrypted connection to our server and to Google (Gemini API) to create the realistic image. Neither we nor Google keep the photo for training; our server does not store it. You can turn Realistic view off in Face data & privacy.
Who can access it
You. A clinic can open a case only through a link you created, until it expires or you remove access.
Model training
Your scans are never used to improve our models unless you turn on “Help improve the model”. You can turn it off at any time.
Deleting it
Delete one scan, all scans or your whole account in Profile → Face data & privacy. Deletion on the device is immediate.
Legal basis
Face scans are biometric data. We process them only with your explicit consent (Article 9(2)(a) GDPR), which you can withdraw at any time by deleting your data.
Scans: until you delete them or your account.
Visualizations and notes: until you delete them or your account.
Shared case links: until the expiry date you choose (7 or 30 days) or until you remove access.
Analytics events: 14 months, without face data.
Realistic-view images: not stored on our server; a saved visualization keeps its image on your iPhone until you delete it.
Realistic-view ratings: until you delete your account.