⚽
VELORA
Privacy Policy
How Velora collects, uses, and protects your information.
Last updated: May 30, 2026
1
Who we are
Velora ("we", "us", "our") is a mobile application that helps football players train smarter through AI-generated weekly plans, video analysis, match tracking, and recovery insights. This policy explains what data we collect when you use Velora, why we collect it, and what choices you have.
For any privacy question, reach us at privacy@playvelora.net.
2
Information we collect
We only collect what we need to run the app:
Account info — your email, password (stored as a one-way bcrypt hash, never readable by us), and display name.
Profile & training data — age, position, fitness level, weekly availability, height/weight (optional), goals, recovery check-ins, completed sessions, match logs, and progress streaks.
Video uploads — short clips you choose to upload for AI analysis. Videos are temporarily processed by our AI provider and deleted from active storage when analysis is complete.
Device info — operating system, app version, and crash diagnostics. We do not track your precise location.
Payment info — handled entirely by Stripe. Velora never sees or stores your full card number. We keep a subscription status flag and Stripe customer ID so we know if you're on the free or premium tier.
Communications — emails you send us and feedback you submit through the in-app feedback button.
3
How we use your information
To create and personalize your AI training plans.
To provide AI video analysis when you upload clips for coaching.
To send you transactional emails (welcome, access granted, subscription receipts, password reset). We do not send marketing emails without your explicit consent.
To process subscription payments and manage your plan tier.
To improve Velora — for example, by analyzing aggregated, anonymized usage patterns to understand which features help players the most.
To prevent abuse, fraud, or unauthorized access to your account.
4
Third-party services we use
Velora is built on a few trusted partners. Each only receives the minimum data needed to do their job:
Stripe — payment processing. Stripe is PCI-DSS compliant and handles all card data. See stripe.com/privacy.
Resend — sends our transactional emails. They receive your email address and the message we send you. See resend.com/legal.
OpenAI / Anthropic / Google AI — generate your training plans and analyze your uploaded videos. We share only the specific training context or media needed for the task. Providers are configured to not use your data to train their models.
MongoDB Atlas — stores your account and training data in encrypted databases.
Apple App Store / Google Play — handle app distribution and, if you subscribe through the store, billing for that channel.
5
How long we keep your data
Account data — kept as long as your account is active.
Training history — kept while your account is active so we can show your progress and adapt future plans.
Uploaded videos — typically deleted from active storage within 30 days of analysis. Cached analysis results remain attached to your profile.
Billing records — retained per legal/tax requirements (typically 7 years for financial records).
When you delete your account we erase your personal data from active systems within 30 days. Some records (e.g. financial logs) may persist for legal compliance.
6
Your rights & choices
You always have control of your data:
Access — see all data we hold on you. Email privacy@playvelora.net for a copy.
Correction — edit your profile any time from the Profile screen.
Deletion — request full account deletion from Profile → Settings → Delete Account, or email us.
Export — request your training history as JSON.
Opt-out of analytics — usage analytics are aggregated and anonymous by default. You can opt out of behavioral analytics in Profile → Settings.
EU & UK residents (GDPR) have the right to portability, restriction of processing, and to lodge a complaint with a supervisory authority.
California residents (CCPA) have the right to know, delete, and opt out of any sale of personal information. We do not sell personal information.
7
Security
We protect your data with industry-standard practices: encrypted transit (TLS), encrypted database storage, bcrypt password hashing, rate limiting on authentication, and limited employee access on a need-to-know basis. No system is 100% secure, but we take it seriously and will notify you within 72 hours of discovering any breach that affects your personal data.
8
Children's privacy
Velora is intended for players 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has signed up, contact us and we will delete the account.
For users between 13 and 16 in regions that require it (EEA/UK), we recommend parental supervision when subscribing or uploading video.
9
International transfers
Velora is operated globally. Your data may be processed in the European Union (Resend EU region), the United States (Stripe, OpenAI), or other regions where our service providers operate. We rely on standard contractual clauses and reputable providers certified under recognized data-transfer frameworks.
10
Changes to this policy
We may update this policy as Velora grows. When we make a material change we'll notify you in the app and, if you have an account, by email. The "Last updated" date at the top of this page always reflects the current version.
11
Contact
Questions, requests, or complaints? Email us at privacy@playvelora.net and we'll respond within 7 days.
Velora · Your Football Evolution Starts Here