Effective date: September 21, 2026.
Draft revised: 2026-09-21
Effective date: 2026-09-21
This Policy describes personal-information handling for VeloxReel (also called “Velox” in the app), including accounts, AI creation, purchases, on-device storage, and support. The responsible operator is wanglei, the individual developer and operator of VeloxReel.
Uploaded files are deleted after 24 hours from successful upload. Outputs and related facial-feature data follow the 24-hour rules in Section 10, without separate backups of generation data. Account transaction records are retained indefinitely; other data has a 24-hour retention period. Facial features are used to generate content based on templates, and the backend shares user information with advertising or analytics platforms. Access is limited to users aged 18 or older. Our customer support team replies within 12 hours of receiving an appeal.
This version does not list specific service-provider names or processing regions. Disclosures about shared data categories, recipients, and choices still need completion, as described in Sections 8 and 9. The effective date is September 21, 2026.
You may provide an email address, password, nickname, or six-digit sign-in code for registration or authentication. Account services return a user identifier, email, nickname, avatar, account status, and membership information. Passwords and sign-in codes are used for the relevant authentication request and are not persistently stored by the client. Sign-in credentials are kept in system secure storage. Local nicknames, language preferences, and workspace settings are stored on the device.
Feedback you enter is copied to the clipboard or passed to a sharing app only when you choose that action. The current feedback page does not send it automatically or automatically attach account details, passwords, or credentials. It includes the app version. Information you voluntarily send to support@veloxreel.com is used to handle your request.
After you choose an image or video, the app copies it into its local directory for editing, workspace recovery, and drafts. Selection alone does not submit an online generation. When you request online generation, the app uploads reference media needed by the selected model and submits the prompt, generation parameters, and necessary template or task identifiers. It then requests task status and generated media.
Creation records may include prompts, models, parameters, status, timestamps, and media URLs. The current client does not automatically cloud-sync local drafts, presets, favorites, or workspace settings; online generation history can be retrieved from the server. The app may download and cache media in advance for preview or export.
Local demo generation does not upload prompts or media to generation endpoints, although browsing sample media may make network requests when online services are configured. Backend storage and access arrangements for uploaded media and outputs require verification. Local drafts do not mean that online generation occurs entirely on the device.
Servers for accounts, configuration, generation, media, or updates receive network information needed for communication, such as IP addresses and request times. API requests also include app/site identifiers, app version, API language configuration, and necessary authentication. Creation-configuration and update requests additionally include build number, platform, timestamp, physical-device status, and system-integrity detection results. The current VPN field is empty; it does not indicate VPN detection or collection.
The app keeps up to 500 diagnostic entries locally, covering screens, operation names, request paths, times, durations, and error status for troubleshooting. Logs filter common sensitive values and omit full request bodies, headers, query parameters, and media. Operation names or screen identifiers may still contain related content names or identifiers. Review logs before exporting them. The current app does not automatically upload these local diagnostic logs.
Apple handles in-app payments and payment methods. The app and our verification service process product and transaction identifiers, plan details, purchasing-account associations, verification status, and membership/credit entitlements. This flow does not provide the app with your full payment-card number.
To associate transactions with the correct VeloxReel account and prevent duplicate delivery, the app creates a random purchase-account association identifier and keeps pending transaction associations and settlement records locally. Some association identifiers are sent to Apple with purchase requests. These local records are not necessarily all removed on sign-out or account deletion; the local cleanup schedule still requires confirmation. Server-side account transaction records are retained indefinitely without a fixed expiry, as described in Section 10.
The information above supports account creation and security, requested AI generation, retrieval and delivery of outputs, local editing recovery, purchase verification, credit and membership entitlements, troubleshooting, user-initiated support, and applicable security and legal obligations. Each feature should use only information necessary for its purpose.
This draft does not treat uploads as automatic authorization for general model training, promotion, or public display. Backend and upstream AI-provider retention, training, human review, and other uses require written confirmation. Until verified, we cannot promise that content is never used for training or that it is accessible only to you. Additional purposes or permissions must be explained first, with consent obtained where law requires.
Photos and videos: the system picker reads media you select; saving a creation requests photo-library write permission. You can refuse or adjust permissions in iOS Settings and continue using features that do not require them. Camera, microphone, contacts, and precise-location collection features are not enabled in the current app.
Clipboard: used when you explicitly paste or copy prompts, feedback, or other content. The current app does not continuously read the clipboard in the background.
Notifications: the current app offers a local test notification subject to system permission. The project has basic push-token capability but has not connected online-account binding and remote delivery. Recipients, purposes, and controls must be disclosed before enabling that flow. Builds with app updates enabled may contact Expo’s update service.
Apple: handles purchases, subscriptions, and system permission or sharing functions under its applicable policies.
Expo updates: receives update requests and necessary technical data only in builds where updates are configured; the release configuration must be verified.
Account, cloud-storage, media-delivery, and AI processors provide account, storage, delivery, and template-generation services. This version does not list their specific names or processing regions. Advertising and analytics platforms also receive user information shared by the backend, as described in Section 9. Disclosures of specific recipients, shared data categories, and relevant policy links remain incomplete. The client currently uses api.veloxreel.space for business APIs; some media comes from resource.veloxreel.space or media URLs returned by the server. A domain is not a vendor’s legal identity.
When you share a creation or feedback, the selected third-party app handles the content under its own policy. Disclosure may also be required by law or necessary to protect rights and safety. A lawful business transfer may involve information transfer with any required notices.
The backend shares user information with advertising or analytics platforms for related advertising and analytics processing. The actual data categories, event parameters, identifiers, recipients, and whether cross-app tracking or targeted advertising is involved still need to be documented from the deployed configuration. The absence of an advertising SDK in the client does not mean this sharing does not occur.
The current client does not integrate Adjust, ThinkingData, or Meta advertising SDKs and contains no calls to read IDFA or request tracking permission. This client implementation detail does not negate the backend sharing described above.
We make no blanket “no sale/no sharing” claim. Whether the activity constitutes sale, sharing, or targeted advertising under applicable law depends on the actual data and purposes. Contact support@veloxreel.com for opt-out, restriction, or related appeal requests; customer support replies within 12 hours of receiving an appeal. Applicable dedicated opt-out mechanisms, tracking permission, and recipient disclosures still need to be implemented. Acceptance of these Terms does not replace required permission.
On the device: workspaces, drafts, favorites, presets, and imported media support local features; sign-out generally retains account-local records. Successful account deletion clears local account records, sign-in credentials, and associated imported media. The operating system may reclaim media caches, but account deletion does not guarantee immediate removal of every media cache, local diagnostic log, or purchase-association record. Diagnostic logs can be cleared separately in the logs page. Original photo-library media and creations already saved there are not removed with the account.
Server-side uploaded files: files are deleted after 24 hours from successful upload. This also applies to failed tasks that produce no output; task failure does not restart the retention period.
Server-side outputs and facial-feature data: these are deleted within 24 hours after the output is produced. Separate backups of uploaded files, outputs, and related facial-feature data are not retained. Save outputs you wish to keep to your device within their retention period; server-side downloads may be unavailable afterward.
Account transaction records: these are retained indefinitely, without a fixed expiry, and are not subject to the 24-hour rule. Account deletion does not automatically delete these records. You may still send privacy requests to support@veloxreel.com for handling by our customer support team under applicable rules. This retention arrangement does not override legally required deletion obligations.
Other data: facial features extracted for tasks without an output, account-profile data excluding account transaction records, task metadata, and security logs have a 24-hour retention period. This does not change indefinite retention of account transaction records. Beyond the upload-success and output-production triggers specified above, the clock start and cleanup scope for each other category still need to be defined in the operating rules. This server-side rule does not mean that drafts, favorites, or saved creations on a user’s device are automatically cleared after 24 hours.
Export results you want to keep. Uninstalling the app does not delete an online account or cancel subscriptions.
Uploads may contain faces or other personal characteristics. Obtain necessary permission from depicted people and avoid unnecessary identity documents, intimate material, or other sensitive data. The Service processes facial features in media to generate content based on the template you select. The Service does not create feature templates for identity recognition. The particular features extracted still need to be documented from the actual processing flow. Generation-related facial-feature data is deleted within 24 hours after the output is produced, as described in Section 10. The current client does not implement an identity-recognition face database or local face-feature extraction; that does not rule out upstream processing. Confirmation of facial-feature processing does not confirm model-training or identification uses. Any legally required special notice, written consent, or public retention schedule must be implemented before that processing.
The app uses HTTPS in transit, system secure storage for credentials, and filtering of diagnostic information. The backend uses access controls, encryption at rest, and security-incident response measures to protect data. No system guarantees absolute security.
This version does not list server or processor countries or regions. The final Policy must identify cross-border processing and required safeguards.
You may decline uploads, adjust photo or notification permissions, stop optional features, clear local logs, or request online-account deletion through Profile → Delete account. A local nickname change does not correct all server records. To request access, correction, deletion, or a copy, contact the privacy email support@veloxreel.com. Appeals may be sent to the same address. Our customer support team replies within 12 hours of receipt. A reply does not mean that verification, deletion, or dispute resolution has been completed; further handling will be explained when more investigation is needed.
Depending on your state, applicable law, and whether the Service meets relevant applicability thresholds, rights may include knowledge/access, correction, deletion, portable copies, opting out of sale/sharing or targeted advertising, limiting certain sensitive-data uses, and appealing a denial. Where applicable, authorized agents may act for you, and you are protected against unlawful discrimination for exercising rights.
Verification should be proportionate and should not require your password. Appeal verification and escalation procedures, applicable final-resolution deadlines, agent verification, and opt-out-signal handling still need to be implemented. Legal exceptions may apply. Where consent is required, you may withdraw it using the available method without affecting prior lawful processing.
The Service is available only to users aged 18 or older. It is not directed to anyone under 18, and parental permission does not create an exception. If someone under 18 has provided personal information, that person or a guardian may contact support@veloxreel.com to request investigation or deletion. Our customer support team will handle the request under applicable rules.
Before publication, age notices and access procedures must implement the 18-year minimum and the store age rating must be reviewed. An age clause does not establish that client-side age verification has been implemented.
We will update the revision date when this Policy changes. New data categories, purposes, recipients, or material effects on rights require appropriate notice and renewed consent where required. Independent processing by linked sites and sharing apps is governed by their policies.
Operator: wanglei, an individual developer.
Privacy email: support@veloxreel.com.
Support/legal email: support@veloxreel.com.
Draft revised: September 21, 2026. Effective date: September 21, 2026.
The current Contact support page does not automatically send requests. Send privacy requests or appeals to support@veloxreel.com. Our customer support team replies within 12 hours of receiving an appeal; verification, further handling, and escalation procedures still need to be implemented.