Veyo is a private creative space for two people. This policy explains the data needed to run that space.
Your email address, chosen name, colors, account identifier, partner membership, canvas strokes, notes, letters, opening times, letter reactions, photos and voice recordings you choose to send, and exported images you choose to back up. A namespaced authentication identity allows us to keep your Veyo account separate from other services.
You and the person who joins your private invitation can view your shared canvas and available letters. Future letters, including their photos and voice files, are withheld from the recipient until their opening time. Favorites stay on your iPhone. We do not offer public feeds, advertising, or tracking across other apps. We do not sell your personal information.
Cloudflare Workers runs the API, Cloudflare R2 stores private image and voice files, Cloudflare Email Sending delivers account codes, and Supabase stores account and collaboration data. Providers may process information outside your country. Data is encrypted in transit; Veyo does not claim end-to-end encryption.
Unsigned work and drafts stay on your device. Signed-in work is cached so you can keep drawing offline and sync later. Session tokens are kept in Keychain. Reminders are optional local notifications. Camera, microphone and photo library permissions are requested only when you choose the related feature. Selected Photos access is supported. Recordings are limited to 60 seconds and stop when the app leaves the foreground. You can preview or discard them before sending. We re-render selected photos to remove embedded location metadata. Saving an export requests add-only photo permission. Unsent letter drafts and attachments stay on this iPhone; sending a letter uploads its attachments when signed in and connected to a shared space. Unattached server uploads expire after two days. Permissions can be changed in iPhone Settings. Widgets use a local shared app container.
Export artwork from Keepsakes. Sign out to clear cached account data on this iPhone. End a shared space to disconnect both people and remove its shared content. Delete your Veyo account in Us to permanently remove your Veyo profile, authentication identity and associated shared space. Both members lose access to the deleted space. Stored images and recordings enter a retryable deletion queue and are normally removed immediately, with daily retry if storage is temporarily unavailable. Provider backups may retain data for their normal retention period.
Sign-in codes expire after ten minutes, are single-use, and are protected by rate limits. Diagnostic request logs do not intentionally include artwork, codes, tokens or email addresses. Support reports are retained only as needed to resolve the issue. The service is intended for people aged 16 or older.
Contact hello@inhusbi.com or submit a private report in Us → A little help.