Privacy Policy

1. Who we are

Valety is an iPhone app and the website valety.app. The service is operated by a sole trader based in Ukraine. Questions about data: support@valety.app.

2. Data we collect

• Account: email address, the name you entered or Apple shared when you signed in with Apple, and your account ID.
• Your content: chat messages (including dictated text), memory and journal entries, and the people and stories you add.
• Food profile: allergies, diet, goals and foods you skip. This is health-related data, so we use it only for your meal plan and the assistant’s answers.
• Photos you add for the stylist as a look reference.
• Purchases: your Valety Plus subscription status and a purchase identifier. We never see card numbers: Apple takes the payment.
• Devices: a trusted-device identifier and a push token if you turn notifications on.

We do not collect location, do not read your address book, do not record audio on our servers (Apple recognises dictation and only text reaches the server), and the app contains no advertising or analytics SDKs.

3. Why we use data

• To create your account and keep you signed in.
• To answer you in chat, build meal plans and recipes, suggest looks, and narrate and illustrate stories.
• To remember what you told us so the assistant can use it later.
• To manage your subscription and check its status.
• To protect the service from abuse and investigate faults.
• To answer support requests and meet legal obligations.

We do not sell your data and do not use it for advertising. We do not train our own models on your content.

4. AI companies that receive your data

The assistant, the nutritionist and the stylist run on models from other companies. To answer you, Valety sends them part of your data. Before the first AI use the app shows a screen, “How Valety uses AI”, with the same list and asks for your consent. Without consent the AI features stay off.

• OpenAI (USA): chat answers, meal plans, the stylist and memory. Receives your messages (including dictated text), your food profile (allergies, diet, goals), memory and journal entries, stylist requests and the photos you add.
• Google (USA): Gemini and Cloud Text-to-Speech for story narration and illustrations. Receives the text of a story you have read aloud and text descriptions for pictures.

These companies process data under their own terms and privacy policies. We send only what your request needs.

You can change your choice in the app: Profile → Privacy → “Change AI consent”. The choice is stored on your device separately for each account.

5. Infrastructure and other recipients

• Supabase: database and sign-in, region Europe (Frankfurt).
• Cloudflare R2: file storage, for example stylist photos.
• Contabo: servers (VPS) in Europe that run the Valety backend.
• Apple: Sign in with Apple, and purchases and subscriptions through the App Store (In-App Purchase). Apple processes payment under its own terms.
• The valety.app website: with your consent we use Amplitude analytics, and Sentry to detect faults (technical diagnostics, no advertising identifiers). There are no advertising or cross-site cookies.

We do not pass data to data brokers or advertisers. We may disclose data to authorities when the law requires it.

6. International transfers

OpenAI and Google are located in the USA, so data you send to AI is processed outside Ukraine and the EU. We send it only after you agree in the app. Our main database is in the EU.

7. Security and memory encryption

Memory and journal entries are stored encrypted, with a key for your account. The assistant decrypts only the part your request needs. This is not end-to-end encryption: the server handles content while answering, and when AI is used, the company named in section 4 receives it. Connections to our services use HTTPS. No system is completely risk-free, so protect your account and device.

8. How long we keep data

• Account data and your content stay while your account exists.
• When you delete your account we delete memory, journal, people, stories, chats, encryption keys, plans, shopping lists, stylist looks, devices and stored files.
• Payment records stay anonymised and unlinked from you where accounting or law requires it.
• Technical server logs are kept only as long as needed for security and fault diagnosis.

Data already sent to OpenAI and Google is kept under their policies. We cannot delete it on their side.

9. Deleting your account and your rights

You can delete your account in the app: Profile → “Account” → “Support and documents” → “Delete account”. Deletion removes the account and its data on our side and revokes Sign in with Apple access. It does not cancel an App Store subscription: cancel that in your Apple ID settings (see Support).

You can ask for access to your data and for its correction, export or deletion, and you can object to certain processing. Write to support@valety.app from the address linked to your account. You may also complain to the Ukrainian Parliament Commissioner for Human Rights.

10. Children

Valety is not intended for children. If you believe a child has given us personal data, write to support@valety.app and we will look into it.

11. Changes

If we change the AI companies or the data sent to them, the app asks for your consent again. The current version is always here, with the date above. Terms of use: Terms of Service.