Privacy policy

In short

• No advertising, no trackers. Veya does not measure what you do in the app, and sells nothing to anyone.
• The most personal things never leave your phone: your ritual steps and the full history of your days.
• What does reach our servers serves one purpose: letting someone close hold you.
• You can take everything with you (one file, from the app) and erase everything (three taps, permanent).
• Our servers are in France, in Paris.

1. Who is responsible for your data

Veya is published by ARRIGHI Yannick Romain, sole trader operating as Hyminix Studio, in Nice, France. He is the data controller under the GDPR.

For any question, or to exercise your rights: hyminix.studio@gmail.com.

2. What stays on your phone, and never leaves it

Veya works locally first. The following is stored on your device only and is never sent anywhere:

• The steps you write for a ritual (the Memory layer) — free text, often personal, and nobody but you ever reads it. Not the person close to you, not us.
• The full history of the days you kept, since each ritual was created.
• The periods when a ritual was paused.
• The “Later” postponements you tap on a reminder.
• The times of your private rituals — the ones nobody holds.

3. What reaches our servers, and why

Everything below exists for one reason: letting someone close be reassured, alerted if you forget, or able to cheer you on. Without a link to someone close, most of it would have no reason to exist.

Your account

A technical identifier, created when you choose to begin — not when you open the app. By default it is anonymous: no name, no email address, no phone number. If you choose to attach your account to Google or Apple so you can recover it on a new phone, those companies then pass us your email address and display name.

Your first name

The one you type yourself, as is. It exists so the people close to you know who is being talked about, in their circle and in the notifications they receive. You can correct or erase it at any time from the app.

Your rituals

The name of your rituals, their category, the days they are planned, whether they are active, and the count of days you kept. Choose a ritual’s name knowing that the people you attach to it can see it.

Your upcoming times, and recent confirmations

For rituals someone holds only, the app posts the expected times for the next fifteen days ahead, along with the time you confirm. That is what lets our servers notice a missing confirmation and tell the person close to you. This is erased 48 hours after it was due. A ritual nobody holds sends no times at all.

Your links with people close to you

For each link: both identifiers, both first names, and the date of the last signs sent (a heart, a nudge). We keep only the latest, never a history.

Your invitations

When you invite someone, a temporary code is created with your first name and, if you chose so, the name of the rituals involved. It is erased after seven days, or as soon as it has been used.

Your devices

A technical identifier provided by Google or Apple so we can send you notifications, the device type (Android or iPhone), and your language code — so notifications reach you in the right language. Never your country, never your location.

A few settings

The delay before someone close is told, and small progress markers (the app remembers it already offered you something, so it does not ask forever).

4. What the person close to you sees — and does not

Someone you attached to a ritual sees: the name of that ritual, whether today’s confirmation happened, and — if you turned on the Motivation layer — the number of days kept.

They never see:

• rituals you did not attach them to;
• your ritual steps;
• your past beyond the current day;
• rituals you paused or deleted.

5. The companies that help us

We run no servers of our own. To make Veya work, we rely on:

• Google (Firebase) — account records, the database and notification delivery. Your database is in France (Paris), and automated processing runs in Belgium.
• RevenueCat — Premium subscription management. This company is based in the United States: if you subscribe, your account’s technical identifier and purchase history are processed there, framed by the European Commission’s standard contractual clauses.
• Apple and Google — payment collection. We never see your payment details: they do not pass through Veya.

No other company receives your data. We sell nothing, rent nothing, and share nothing for commercial purposes.

6. How long it is kept

• Your due times and confirmations: 48 hours, then erased automatically every night.
• Your invitations: seven days at most, then erased automatically.
• Everything else: as long as your account exists.

We do not delete accounts that have been inactive for a long time. That is a deliberate choice: erasing the account of someone who has not opened the app for months would break their link, and the person close to them would get a notification announcing the end of a link nobody wanted to end. We would rather wait for you to decide — it takes three taps, explained on our dedicated page.

7. Advertising, analytics and trackers

There are none. Veya contains no advertising space, no analytics tool, no tracker, and uses no advertising identifier. We do not know which screens you open or how long you spend on them.

On this website there are no cookies and no requests to any server other than ours — even the fonts are served from this domain. You can check it in your browser’s developer tools.

8. Legal grounds

• Performance of the service you asked for: your account, rituals, links and notifications. Without this data, the app cannot work.
• Our legitimate interest: keeping the service available and protected from abuse.
• A legal obligation: keeping accounting records if you subscribe.

9. Your rights

At any time you can:

• Take your data with you — “You”, then “Export my data”, produces a complete file, assembled on your phone, without using the network. It is free and contains all of your history, including the part the free tier does not let you browse in the app.
• Correct your first name — “You”, then “Your first name”. The correction propagates to everyone linked to you.
• Erase everything — see the account deletion page.
• Object to processing, or ask for it to be restricted, by writing to us.

If an answer does not satisfy you, you may lodge a complaint with your national data protection authority — in France, the CNIL (cnil.fr).

10. Minimum age

Veya is for people aged 16 and over. We do not knowingly collect data about anyone younger; should that happen, write to us and the account will be erased.

11. Security

Traffic between the app and our servers is encrypted. Access to your data is locked down at the server level: technically, only you and the people you explicitly attached can read what concerns you.

Veya is not an end-to-end encrypted vault: as the publisher, we do hold technical access to the database. We do not use it to browse accounts, but we would rather write it down than let you believe otherwise.

12. Changes

If this policy changes in a significant way, the app will tell you. The date at the top of this page marks the latest version.