The short version. Veilum runs entirely on your phone. We don't run any servers that receive your photos or the faces you've added. The longer text below exists because some of the laws that apply to apps like Veilum ask us to be specific about a few things.

Who we are

Veilum is operated by Elixirly, LLC. "We," "us," and "Veilum" mean Elixirly, LLC. You can reach us at [email protected], and our privacy team at [email protected].

What information is involved

When you enroll a person in Veilum, the app uses a photo you provide to create a numerical face embedding, a vector of numbers your phone can later compare to other photos to find the same person. This embedding is a form of biometric information used to identify a specific individual.

The embedding, the name you gave the person, your sticker preferences, and a local log of how many faces Veilum covered in each photo all live in Veilum's private storage on your device. None of this is sent to a server we operate, because we don't run any servers that receive personal information. There is no Veilum account, no email, no phone number, no sign-in.

Biometric data: collection, use, and retention

Because face embeddings are a sensitive category of information under several privacy laws, we want to be specific about how we handle them.

• What we collect. A numerical face embedding produced from a photo you choose to provide. The embedding can be compared to other embeddings to determine whether two faces are likely the same person. It is not a photograph and cannot be turned back into one.
• Why we collect it. Solely to find the people you've enrolled in photos you ask Veilum to cover, so the app can place a sticker over their face. We don't use embeddings for any other purpose.
• Where it lives. Only in Veilum's private storage on the device you installed Veilum on. It is never transmitted to us, and we never see it.
• How long we keep it. Until the earliest of: (a) you remove the person from Veilum, (b) you reset Veilum from Settings, or (c) you uninstall the app. We do not have a copy and so we cannot retain it after any of those events.
• How we destroy it. The embedding is deleted from the app's private storage when any of the events above occurs. Because the data never leaves your device, deletion on your device is deletion everywhere.
• How you consent. The first time you enroll a person, Veilum asks you to confirm that you understand a face embedding will be created and stored on your phone, and that you have the right to enroll the person. If you skip the consent screen, no embedding is created.
• How to withdraw consent. Open Veilum, select the person, and tap Remove. The embedding is destroyed immediately.

We do not sell, lease, trade, or otherwise profit from biometric data, and we do not share it with any third party.

Photo library access

Veilum only reads photos from your library when you choose specific photos to cover. We don't make our own copy of those photos, scan them in the background, or send them anywhere. Covered photos are only written back to your library when you tap Save.

Crash reports

If Veilum crashes, your phone's operating system can send a small diagnostic report to Apple or Google. Those reports are governed by Apple's and Google's privacy policies, not ours, and we don't receive a copy. They do not contain your photos, the embeddings you've created, or anything that identifies you to us. You can turn them off in your phone's settings (iOS: Settings → Privacy & Security → Analytics & Improvements; Android: Settings → Privacy → Usage & Diagnostics).

Information the app stores collect

When you download Veilum from the App Store or Google Play, Apple or Google receives information about that download, including your store account, device, IP address, and similar, as part of how their stores work. That collection is theirs, not ours, and is governed by their privacy policies. We do not receive it.

No third parties, no analytics, no ads

Veilum contains no third-party analytics SDKs, no advertising kits, no remote configuration services that read your data, and no other code that sends information about you to anyone. We do not sell, share, rent, or trade any information about you.

Children

Veilum is intended for adults who want to cover the faces of children or other people in their photos. The app is not directed to children under 13, and we do not knowingly collect any information from a user we know to be under 13. If you are a parent and believe a child under 13 has used Veilum on a device you control, open Veilum → Settings → Reset Veilum to remove all enrolled people and local data, or contact [email protected] for help.

Your privacy rights

Even though Veilum stores data only on your device, certain laws give you rights regarding personal information processed about you. The specific rights depend on where you live, but they generally include the right to know what is processed about you, to correct it, to delete it, to restrict or object to its processing, to data portability, to opt out of any sale or sharing, and to limit the use of sensitive personal information (including biometric information).

Because Veilum stores data only on your device and we don't run servers that receive your data, you can exercise most of these rights directly inside the app:

• Know / access / portability: Open Veilum's Settings to see every person you've enrolled. We have no copy to give you.
• Correct: Edit a person's name, or re-enroll them.
• Delete / restrict / object: Remove the person from Veilum, or uninstall the app entirely.
• Opt out of sale or sharing: Already opted out by default; we don't sell or share personal information.
• Limit sensitive data: Face embeddings are used only to power the face-covering feature. We don't use them for any other purpose, including profiling or inferences about you.

If you live in the EU, UK, or Switzerland, you also have the right to lodge a complaint with your local data-protection authority. If you live in California, Virginia, Colorado, Connecticut, Oregon, Texas, Utah, Indiana, Iowa, Montana, Tennessee, Delaware, New Hampshire, New Jersey, or another US state with a comprehensive privacy law, your state's law gives you the rights listed above.

We do not discriminate against you for exercising any privacy right. To make a request or appeal a denial, email [email protected] and we will respond within 30 days (or the period required by your local law, if shorter).

How to delete your data

Because all data lives on your device, deletion is fast:

• Remove one person: Open Veilum → tap the person → Remove.
• Reset everything: Veilum → Settings → Reset Veilum. This erases all embeddings, names, settings, and history.
• Uninstall: Removing the app removes its private storage along with it.

The same instructions are also published as a standalone Delete your data page, so they can be linked directly from the App Store and Google Play listings.

Data security

Embeddings and other Veilum data are stored in the app's private container, which iOS and Android isolate from other apps on the device. No system is perfectly secure, but because the data never leaves the secure container, an attacker would need physical or operating-system-level access to your specific phone to reach it.

International users

Veilum is offered worldwide. Because we don't transmit your data anywhere, there is no cross-border transfer of personal data initiated by us. Your data remains on your device, which is governed by the laws of the place where that device is used.

Changes to this policy

If we change this policy, we'll update the date above and, if the change is material, we'll show you a notice inside the app before the change takes effect. Continued use of Veilum after a material change means you accept the updated policy.

Contact

Privacy questions, requests, or complaints: [email protected].