Privacy Policy for Veluto

Last updated: April 29, 2026

Veluto is a mobile application operated by TwoScript VOF (“we”, “us”, or “our”). This Privacy Policy explains what personal data we collect, how we use it, how we share it, how long we retain it, and your rights.

This policy applies to:

  • the Veluto mobile application
  • its backend systems and APIs
  • the website at https://veluto.app

Parts of the web environment may also be used for development, testing, and administrative purposes.

By using Veluto, you agree to this Privacy Policy.

1. Data We Collect

We may collect and process the following categories of data:

Account Data

  • username
  • email address
  • password (securely stored and hashed)

Profile Data

  • display name
  • bio
  • profile picture
  • privacy settings

Social Login Data

If you use Google or Apple login:

  • basic profile information (such as email)
  • a unique identifier

User-Generated Content

  • reviews
  • comments
  • photos
  • saved reviews
  • favorite businesses
  • other content you upload

Social Data

  • followers / following
  • likes and interactions
  • notifications and activity

Location Data

  • precise or approximate location (latitude/longitude), if you grant permission

Business and Location Data

  • business claim request and review metadata

Technical Data

  • device name
  • push notification tokens
  • app version
  • session data
  • logs and diagnostics

Preferences

  • notification settings
  • privacy settings

2. How We Use Data

We use personal data to:

  • create and manage user accounts
  • provide social, review, and discovery features
  • display businesses and locations
  • store and display user-generated content
  • enable interactions between users
  • send notifications and updates
  • ensure platform safety and prevent abuse
  • detect fraud and security risks
  • improve, maintain, and develop the Service

3. Legal Basis for Processing (EEA Users)

If you are located in the European Economic Area, we process your data based on:

  • contract performance (to provide the Service)
  • legitimate interests (e.g., safety, improvement, fraud prevention)
  • consent (e.g., location access, notifications)
  • legal obligations

4. Location Data

If you grant permission, Veluto may access your approximate or precise location to support location-based features, such as showing nearby businesses and improving local discovery within the app.
Location access is optional and can be disabled at any time through your device settings.
If you do not grant or later disable location access, some location-based features may be limited or unavailable.

5. Photos and User Content

Content you upload (such as photos and reviews):

  • is stored and displayed as part of the Service
  • may be visible to other users depending on your settings

You are responsible for ensuring that:

  • you have the right to upload the content
  • you have permission from identifiable individuals where required

We may:

  • moderate, restrict, or remove content
  • retain content for safety, legal, or enforcement purposes

6. Social Login

When you sign in via Google or Apple:

  • we receive basic profile information and a unique identifier
  • authentication is handled by the third-party provider

We do not receive your password from these providers.

7. Notifications

We use push notification services to send updates.

  • we store a push token linked to your account or device
  • you can disable notifications at any time via your device settings

8. Data Sharing

We do not sell your personal data.

We may share data with:

  • authentication providers (e.g., Google, Apple)
  • cloud and hosting providers
  • Expo push notification service
  • analytics and monitoring tools
  • location and map services such as Fourequare places

We may also share data:

  • if required by law
  • to protect rights, safety, or property
  • to prevent fraud or abuse

All third parties are required to process data in accordance with applicable laws.

9. Public and Private Content

Depending on your settings:

  • your profile and content may be visible to other users
  • some content (such as reviews) may be publicly accessible

You are responsible for what you choose to share.

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy.

Account Data

Stored while your account is active.

User Content

May be retained:

  • while your account is active
  • after deletion, if required for legal, safety, or platform integrity reasons

Technical and Log Data

Retained for a limited period for security and performance monitoring.

11. Account Deletion and Data Removal

You can request deletion of your account:

  • through the app’s settings link
  • or via our website

What Happens on Deletion

  • your account will be deleted
  • personal data will be removed or anonymized

Exceptions

We may retain limited data:

  • for legal obligations
  • for fraud prevention and security
  • to enforce our Terms

Residual Content

Some content may:

  • remain anonymized
  • remain partially visible

where necessary for legal or technical reasons.

12. Security

We take reasonable technical and organizational measures to protect your data.

However:

  • no system is completely secure
  • you are responsible for keeping your credentials safe

13. Your Rights

Depending on your location (e.g., GDPR), you may have the right to:

  • access your data
  • correct inaccurate data
  • request deletion
  • restrict or object to processing
  • request data portability
  • withdraw consent

You can exercise your rights by contacting:
info@twoscript.nl

14. Children

Veluto is not intended for users under the age of 16 (or the minimum legal age in your country).

We do not knowingly collect data from children.

If you believe a child has provided personal data, contact us so we can remove it.

15. International Data Transfers

Your data may be processed outside your country.

Where required, we use appropriate safeguards, such as:

  • standard contractual clauses
  • compliant service providers

16. Changes to This Policy

We may update this Privacy Policy from time to time.

For significant changes, we may:

  • notify you in-app
  • request renewed acknowledgment where required

The latest version is available at:
https://veluto.app/privacy-policy

17. Contact

TwoScript VOF
Email: info@twoscript.nl
Website: https://twoscript.nl

For:

  • privacy questions
  • data requests
  • safety or abuse concerns

you can contact us via the email above.