Privacy policy

In short

• No advertising, no ad trackers. Veya counts actions to get better — never what you write — and sells nothing to anyone. You can switch that off with one tap under “You”.
• The most personal things never leave your phone — your ritual steps and the full history of your days — unless you turn on backup, which keeps a sealed copy nobody opens.
• What does reach our servers serves one purpose: letting someone close hold you.
• You can take everything with you (one file, from the app) and erase everything (three taps, permanent).
• Our servers are in France, in Paris.

1. Who is responsible for your data

Veya is published by ARRIGHI Yannick Romain, sole trader operating as Hyminix Studio, in Nice, France. He is the data controller under the GDPR.

For any question, or to exercise your rights: hyminix.studio@gmail.com.

2. What stays on your phone

Veya works locally first. The following is stored on your device only and is never sent anywhere:

• The steps you write for a ritual (the Memory layer) — free text, often personal, and nobody but you ever reads it. Not the person close to you, not us.
• The full history of the days you kept, since each ritual was created.
• The periods when a ritual was paused.
• The “Later” postponements you tap on a reminder.
• The times of your private rituals — the ones nobody holds.

3. What reaches our servers, and why

Everything below exists for one reason: letting someone close be reassured, alerted if you forget, or able to cheer you on. Without a link to someone close, most of it would have no reason to exist.

Your account

A technical identifier, created when you choose to begin — not when you open the app. By default it is anonymous: no name, no email address, no phone number. If you choose to attach your account to Google or Apple so you can recover it on a new phone, those companies then pass us your email address and display name.

Your first name

The one you type yourself, as is. It exists so the people close to you know who is being talked about, in their circle and in the notifications they receive. You can correct or erase it at any time from the app.

Your rituals

The name of your rituals, their category, the days they are planned, whether they are active, and the count of days you kept. The people you attach to a ritual can see its name — including in the notifications they receive, on their lock screen. You can hide a ritual’s name: it then stops being sent along with that ritual, and they only see the ritual’s family and its time. It does remain in your backup, if you turned it on — a copy no one opens.

Your backup, if you turned it on

A sealed copy of what you wrote in Veya: your rituals, their times, your step notes, your whole history. It is compressed into one bundle that nothing reads and nothing indexes: none of our automated programs open it, nobody close to you has access to it, and it serves one purpose only — giving it back to you on a new phone. It requires an account linked to Google or Apple, without which nobody could reopen it. Turning the setting off erases it immediately, and deleting your account takes it with it.

Your upcoming times, and recent confirmations

For rituals someone holds only, the app posts the expected times for the next fifteen days ahead, along with the time you confirm. That is what lets our servers notice a missing confirmation and tell the person close to you. This is erased 48 hours after it was due. A ritual nobody holds sends no times at all.

Your links with people close to you

For each link: both identifiers, both first names, and the date of the last signs sent (a heart, a nudge). We keep only the latest, never a history.

Your invitations

When you invite someone, a temporary code is created with your first name and, if you chose so, the name of the rituals involved. Once it has been used it can no longer let anyone in, and it is erased after seven days at most.

The time zone you live in

Only for rituals someone close carries and whose streak they see, the app tells which time zone you are in — “Europe/Paris”, “America/Martinique”: the name of a zone, never a location. Without it, someone who stayed home would judge your day by their own clock and think you were late when it is only 4 a.m. where you are. It is a broad marker — a region of the world, not a city and certainly not an address — it is shown to nobody, and it does not leave your phone at all if no one follows a streak of yours.

Your devices

A technical identifier provided by Google or Apple so we can send you notifications, the device type (Android or iPhone), and your language code — so notifications reach you in the right language. Never your location: the only geographic marker Veya knows is the time zone described just above.

A few settings

The delay before someone close is told, and small progress markers (the app remembers it already offered you something, so it does not ask forever).

4. What the person close to you sees — and does not

Someone you attached to a ritual sees: the name of that ritual — unless you hid it, in which case they see its family (“Personal health”, “Teeth”…) —, whether today’s confirmation happened, and — if you turned on the Motivation layer — the number of days kept.

They never see:

• rituals you did not attach them to;
• the name of rituals you chose to hide;
• your ritual steps;
• your past beyond the current day;
• rituals you paused or deleted;
• the time zone you are in, or what time it is where you are: their app uses it so it will not think you are late while your day is still going, and never writes it anywhere.

5. The companies that help us

We run no servers of our own. To make Veya work, we rely on:

• Google (Firebase) — account records, the database and notification delivery. Your database is in France (Paris), and automated processing runs in Belgium.
• PostHog — the usage measurement described in point 7. For this activity the European entity applies: your measurement data is hosted in the European Union (Frankfurt) and does not leave it.
• RevenueCat — Premium subscription management. This company is based in the United States: if you subscribe, your account’s technical identifier and purchase history are processed there, framed by the European Commission’s standard contractual clauses.
• Apple and Google — payment collection. We never see your payment details: they do not pass through Veya.

No other company receives your data. We sell nothing, rent nothing, and share nothing for commercial purposes.

6. How long it is kept

• Your due times and confirmations: 48 hours, then erased automatically every night.
• Your invitations: seven days at most, then erased automatically.
• Your backup, if you turned it on: as long as you leave it on. Turning it off erases it immediately.
• Everything else: as long as your account exists.

We do not delete accounts that have been inactive for a long time. That is a deliberate choice: erasing the account of someone who has not opened the app for months would break their link, and the person close to them would get a notification announcing the end of a link nobody wanted to end. We would rather wait for you to decide — it takes three taps, explained on our dedicated page.

7. Advertising, analytics and trackers

No advertising. Veya contains no advertising space, uses no advertising identifier, and shares nothing with ad networks. Nobody buys access to you.

Usage measurement, however, does exist — and here is exactly what it is. Veya counts actions: a check-in confirmed, a ritual created, a loved one invited, one of eight named screens opened. It exists so we can tell what works from what does not, and fix what does not.

What it never contains: the names of your rituals, their category, your step notes, your first name, the contents of your backup. No image of your screen is ever recorded — we have not switched that feature on, and we do not intend to. A technical guard strips these out before anything is sent, even if a mistake of ours let them through.

What it does contain: a technical identifier tied to your account (the same one described above), counters, and your country, inferred from your connection — never your city, never your location. The country tells us which languages the app needs to exist in.

You can switch all of it off, at any time, under “You” → “Anonymous statistics”. Nothing leaves your phone from then on. And if you delete your account, your measurement profile goes with everything else.

This website is measured too, in the same way. When you open a page — especially the one that greets you when someone close to you sends an invitation — we count the visit, whether a human stayed on it, and whether you left for an app store. It serves a single question: understanding why some invitations never make it.

Nothing is stored on your device: no cookies, no storage of any kind. That is why you were not asked to accept a banner — there is nothing to accept. You can check it in your browser’s developer tools.

Neither your first name nor your invitation code is sent, even though both appear in the page address: they are stripped before anything leaves. What is sent is the page you opened, your language, and a mark computed from the invitation code, which lets us connect an invitation to what became of it. It says nothing about you — not your name, not your device — but we do not call it anonymous: someone with access to our statistics who went to the trouble could work back to the invitation code behind it. That is why it serves this one purpose and nothing else.

And if your browser signals that you refuse to be measured — the “Do Not Track” or “Global Privacy Control” settings — we honour it: nothing is sent, without you having to ask.

Finally, like any website, our server keeps a technical log of the pages requested, kept for 7 days and then deleted. It serves the site’s operation and security.

8. Legal grounds

• Performance of the service you asked for: your account, rituals, links and notifications. Without this data, the app cannot work.
• Our legitimate interest: keeping the service available and protected from abuse.
• A legal obligation: keeping accounting records if you subscribe.

9. Your rights

At any time you can:

• Take your data with you — “You”, then “Export my data”, produces a complete file, assembled on your phone, without using the network. It is free and contains all of your history, including the part the free tier does not let you browse in the app.
• Correct your first name — “You”, then “Your first name”. The correction propagates to everyone linked to you.
• Erase everything — see the account deletion page.
• Object to processing, or ask for it to be restricted, by writing to us.

If an answer does not satisfy you, you may lodge a complaint with your national data protection authority — in France, the CNIL (cnil.fr).

10. Minimum age

Veya is for people aged 16 and over. We do not knowingly collect data about anyone younger; should that happen, write to us and the account will be erased.

11. Security

Traffic between the app and our servers is encrypted. Access to your data is locked down at the server level: technically, only you and the people you explicitly attached can read what concerns you.

Veya is not an end-to-end encrypted vault: as the publisher, we do hold technical access to the database. We do not use it to browse accounts, but we would rather write it down than let you believe otherwise.

12. Changes

If this policy changes in a significant way, the app will tell you. The date at the top of this page marks the latest version.