Who is responsible
Veil is operated by MOTTA E MARQUES TECNOLOGIA LTDA. Contact [email protected] for support or privacy requests. This policy describes Veil, its website and the browser photo tool.
Your files, on your device
Veil encrypts the files and library metadata stored inside each private space. You do not create a Veil account. Your local library is not sent to an analytics provider. Optional usage analytics is described below.
Your files are decrypted while you use them. Previewing or exporting may create temporary copies protected by iOS; locking clears Veil’s temporary previews. Exports, screenshots and copies in other apps are outside Veil’s control. Local file sizes, counts and timestamps may remain observable; encryption is not a promise of forensic invisibility.
Importing leaves originals in Photos or Files. Removing originals from Photos is a separate action that requires your confirmation and may affect iCloud Photos and other synced devices.
Permissions you choose
The system photo picker provides the items you select. Additional Photos access is requested for optional removal of imported originals. Camera and microphone permissions support capture inside the app. You can change these permissions in iOS Settings. Veil does not request your contacts or location.
Purchases and Apple
Apple processes purchases and payment details. Veil checks signed transaction information on your device to determine Plus access; Veil does not receive your payment card details.
Online features
iCloud backup, device sync and shared invitations are not active in this version. Local encrypted backup exports remain available. Before online services are enabled, this policy will be updated to describe their providers, service metadata, retention and deletion controls. Encrypted content does not mean that connection information or service metadata is invisible to a provider.
This website and its photo tool
This website offers optional Amplitude analytics as described below. There are no advertising pixels. Fonts are served with the site. Cloudflare hosts the public website and can process connection information, including IP addresses and access logs, to serve and protect it.
The photo tool processes selected images in your browser. Its code does not upload them to a Veil server. A downloaded result is saved to the destination your browser chooses. Clearing the tool or closing the page releases its image references, without promising immediate forensic erasure from memory.
Optional usage analytics
Veil uses Amplitude only after you allow analytics. On iOS, choose Settings > Usage analytics. On the website, choose Allow analytics; you can change this in Analytics preferences. Declining does not restrict your files or features.
The app sends opening, space creation, import success or failure, and purchase-step events. The website sends page categories, selected button clicks, plan choices, demo and photo-tool completion, language, and recognized campaign labels. Each event includes a timestamp and a random installation or browser identifier. The two identifiers are separate. No photos, notes, filenames, vault names, patterns, recovery codes, full URLs or screen recordings are included.
Amplitude processes these events in the United States to help us understand usage and improve Veil. Network connections expose an IP address to the provider even though Veil does not add it to event payloads. We do not use analytics for advertising or cross-company tracking.
Turning analytics off cancels pending sends, stops future events and removes the local analytics identifier. It does not automatically erase events already received by Amplitude. Automatic expiry is not currently configured; those events remain until deleted. Contact [email protected] for privacy requests. Because we do not collect an account or email with events, we may be unable to associate past events with you after the local identifier is removed.
When you contact support
If you email us, we receive your email address, message and any attachments you choose to send. Your email service and our email providers also process that correspondence. We use it to answer your request and maintain the support record as needed for that purpose or applicable legal obligations.
Do not send private files, patterns, recovery codes or invitation codes. We cannot reset a lost pattern by email or recover files without their necessary keys and copies. Describe the action, the message shown and your app and iOS versions instead.
Retention, deletion and your choices
Local content stays on your device until you delete it or remove the app. Deleting a space does not delete exported copies, backup files or copies held by others. Keep the recovery codes needed for older backups. Veil cannot remotely delete files that remain solely on your device.
Contact [email protected] to request access, correction or deletion of information you have sent to support, or to ask about our practices. Depending on where you live, you may have additional privacy rights and the right to contact a privacy regulator. We may need to verify your request, but will never ask for a vault recovery code or pattern.
We will update this page when these practices change. The date above identifies this version.