Velyt Privacy Policy

Velyt Privacy Policy

Last updated: June 2026

Velyt is a trading journal and analytics app designed to help users manually record trades, review performance, analyze discipline, and better understand their trading process.

This Privacy Policy explains what data Velyt collects, how it is used, how it is protected, how it may be processed by service providers, and how users can request access to or deletion of their account and associated data.

By using Velyt, you acknowledge that you have read this Privacy Policy.

1. Data Controller and Contact

Velyt is operated by the app developer.

For privacy requests, account/data deletion, support, bug reports, feature requests, or questions about this Privacy Policy, contact:

supportedgelab@gmail.com

2. Data We Collect

Velyt may collect and process the following categories of data.

Account data:

• Email address

• Firebase user ID

• Authentication-related information used for login, account creation, account management, and security

• Account creation and update timestamps

User-provided trading journal data:

• Trades manually entered by the user

• Notes, tags, setups, ratings, sessions, instruments, and other details entered by the user

• Trading performance data and analytics generated from user-provided journal entries

• Any additional journal information voluntarily entered by the user

App functionality and account status data:

• App settings and preferences

• Pro entitlement status

• Subscription verification status

• Restore purchase status

• Export quota and backup/export status

• Technical information required to provide app functionality, protect paid features, and prevent abuse

Device, service, and technical identifiers:

• Device or other identifiers used by Firebase, Google Sign-In, Google Play services, Google Play Billing, and related services for authentication, security, payment verification, fraud prevention, and app functionality

• Technical data required by the services used to operate the app

Support and request data:

• Information voluntarily provided when contacting support

• Information voluntarily provided when reporting a bug

• Information voluntarily provided when requesting a feature

• Information voluntarily provided when requesting account and data deletion

Velyt does not connect to brokerage accounts, does not automatically import trades from brokers, does not execute trades, and does not manage user funds.

3. Data We Do Not Intentionally Collect

Velyt does not intentionally collect or store:

• Full payment card details

• Brokerage login credentials

• Bank account credentials

• Real-money trading account credentials

• Government ID documents

• Biometric data

• Advertising ID for advertising purposes, unless this changes and is disclosed in the app and Play Console declarations

Users should not enter sensitive third-party confidential information, brokerage passwords, payment card numbers, government IDs, or unlawful content into the app.

4. How We Use Data

We use data to:

• provide, operate, and maintain the app;

• create, authenticate, and manage user accounts;

• store and sync user journal data when cloud features are used;

• calculate and display trading journal analytics, performance statistics, discipline insights, and related app features;

• verify Pro access, restore purchases, manage subscription entitlement, and prevent unauthorized access to paid features;

• apply export limits, backup features, and CSV/JSON export functionality;

• provide support, respond to user requests, and handle account/data deletion requests;

• investigate bugs, abuse, security issues, or payment-related issues;

• improve app reliability, security, fraud prevention, and abuse prevention;

• comply with legal, payment, tax, accounting, security, fraud-prevention, dispute-resolution, and compliance obligations.

5. Legal Basis Where Applicable

Where applicable data protection laws require a legal basis, we may process data based on one or more of the following:

• Performance of a service: to provide the app, accounts, login, cloud features, Pro access, backups, exports, and user-requested functionality.

• Legitimate interests: to maintain app security, prevent abuse, protect paid features, respond to support requests, improve reliability, and protect Velyt, users, and services.

• Legal obligations: to comply with tax, accounting, payment, legal, security, fraud-prevention, dispute-resolution, or compliance requirements.

• User request or consent: when users voluntarily contact support, request deletion, report bugs, request features, or provide optional information.

6. Payments and Subscriptions

Velyt Pro subscriptions are processed through Google Play.

Payment information, billing details, subscription renewals, cancellations, refunds, and subscription management are handled by Google Play according to Google’s own terms and policies.

Velyt does not store full payment card details.

Velyt may store or process subscription-related entitlement information needed to verify Pro access, restore purchases, prevent fraud, and manage paid features. This may include subscription status, product/base plan identifiers, verification timestamps, and related entitlement metadata. Raw purchase tokens are not stored in public user documents.

Deleting a Velyt account or requesting deletion of Velyt data does not automatically cancel an active Google Play subscription. Active subscriptions must be managed or cancelled directly through Google Play.

7. Data Sharing and Service Providers

We do not sell user data.

We do not share user data with advertisers.

Data may be processed by trusted service providers that help us operate the app, including:

• Google Firebase, for authentication, cloud database, backend infrastructure, app security, and related functionality;

• Google Sign-In, for authentication where used;

• Google Play services and Google Play Billing, for subscription purchases, entitlement verification, payment-related functionality, fraud prevention, and app functionality;

• Other Google infrastructure services that support Firebase, authentication, storage, backend operations, security, and app delivery.

These service providers may process data according to their own terms, privacy policies, security practices, and applicable data processing requirements.

We may also disclose data if required by law, legal process, security requirements, fraud prevention, payment disputes, compliance obligations, or to protect the rights, safety, and integrity of Velyt, its users, service providers, or others.

8. Third-Party Services, Infrastructure, and Security Events

Velyt relies on third-party infrastructure and service providers, including Google Firebase, Google Sign-In, Google Play services, and Google Play Billing, to provide authentication, cloud storage, backend functionality, security, subscription verification, and app functionality.

We take reasonable technical and organizational measures to protect user data. However, no digital service, cloud provider, network, database, or method of electronic transmission or storage can be guaranteed to be completely secure.

Security incidents may occur due to factors outside our direct control, including failures, vulnerabilities, outages, unauthorized access, cyberattacks, or data breaches affecting third-party providers, user devices, user networks, operating systems, app stores, or infrastructure services used by Velyt.

If we become aware of a security incident involving personal data, we will assess the incident and take reasonable steps required by applicable law, which may include investigating the incident, mitigating its effects, notifying affected users where required, and notifying competent authorities where legally required.

9. Financial Disclaimer

Velyt is a trading journal and analytics tool.

Velyt does not provide financial advice, investment advice, trading signals, investment recommendations, brokerage services, payment services, crypto exchange services, asset management, copy trading, or real-money trade execution.

Any score, chart, metric, insight, label, statistic, export, or analysis shown in Velyt is generated from user-provided data and is provided for informational and self-review purposes only.

All trading decisions remain the sole responsibility of the user. Trading involves risk, including the risk of financial loss. Past performance, journal statistics, discipline scores, edge scores, or app analytics do not guarantee future results.

10. Data Security

Data is encrypted in transit.

We use Firebase and Google services to manage authentication, cloud data, backend security, and app functionality. We apply access controls and security measures intended to protect user data from unauthorized access, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security or that unauthorized access, loss, misuse, or disclosure will never occur.

Users are responsible for keeping their login credentials secure, protecting their devices, and managing any exported files, backups, screenshots, CSV files, JSON files, or other data stored outside the Velyt app.

11. Data Retention

We keep user data only for as long as reasonably necessary to provide the app, maintain user accounts, provide support, comply with legal or payment-related obligations, resolve disputes, prevent fraud or abuse, and enforce our terms, policies, or security requirements.

Some records may be retained where required for legal, security, fraud prevention, payment records, tax, accounting, dispute resolution, audit, or compliance obligations.

We may retain limited technical, security, fraud-prevention, or payment-related records where necessary to protect the app, comply with law, resolve disputes, or prevent abuse.

12. Account and Data Deletion

Users can request deletion of their Velyt account and associated data through the in-app account/data deletion request entrypoint or by contacting:

supportedgelab@gmail.com

Please use the subject line:

Velyt account deletion request

Please include the email address used for your Velyt account so we can identify and verify the account.

When an account deletion request is received and verified, we will delete the user account and associated cloud data stored for Velyt, including account information, Firebase user ID, export quota data, and any synced journal data if present.

Some data may be retained only if required for legal, security, fraud prevention, payment records, tax, accounting, dispute resolution, audit, or compliance obligations.

Deletion requests are processed within 30 days.

Deleting your Velyt account and associated data does not automatically cancel any active Google Play subscription. Active subscriptions must be managed or cancelled directly through Google Play.

13. Local Data, Backups, and Exports

Some data may be stored locally on the user’s device.

Users may also create exported files, such as JSON backups or CSV exports. Users are responsible for managing files they export, download, copy, share, or store outside the Velyt app.

Deleting cloud data from Velyt does not automatically delete files that the user has exported, downloaded, copied, shared, backed up, or stored elsewhere.

Velyt is not responsible for user-managed copies of exported files stored outside the app, including files stored on the user’s device, cloud storage, messaging apps, email accounts, or third-party services.

14. User Rights and Requests

Depending on applicable law, users may have the right to request access, correction, deletion, restriction, portability, or objection regarding their personal data.

To make a privacy-related request, contact:

supportedgelab@gmail.com

We may need to verify the user’s identity before processing certain requests.

Some requests may be limited where retention is required for legal, security, fraud prevention, payment records, tax, accounting, dispute resolution, audit, or compliance obligations.

15. Children and Age Requirements

Velyt is intended for users aged 18 or older.

The app is not directed to children and should not be used by children.

We do not knowingly collect data from children.

16. International Data Processing

Velyt uses Google Firebase, Google Play, and related Google services. Data may be processed on servers located outside the user’s country of residence, depending on Google’s infrastructure and service operation.

By using Velyt, users understand that their data may be processed in countries where service providers operate, subject to applicable law and provider safeguards.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make changes, we will update the “Last updated” date above.

Users are encouraged to review this Privacy Policy periodically.

18. Contact

For privacy requests, account/data deletion, support, bug reports, feature requests, or questions about this Privacy Policy, contact:

supportedgelab@gmail.com