Privacy Policy

1. Overview

Vellum ("we", "us", "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

• Account information: Your email address, provided when you sign up. Stored securely in Supabase (our database provider).
• Subscription data: Plan type, billing dates, and payment status. Payments are processed by Stripe — we never see or store your credit card number.
• Reading data: Books, reading sessions, goals, and notes you create in the iPhone app. This data belongs to you.
• Analytics: We use Firebase Analytics to understand how the app is used (e.g., which features are popular). This data is aggregated and does not identify you personally.

3. How We Use Your Data

• To provide and maintain the Vellum service
• To process subscription payments via Stripe
• To send transactional emails (receipts, account confirmations)
• To improve the App based on aggregated usage patterns

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — Authentication and database hosting
• Stripe — Payment processing
• Resend — Transactional email delivery
• Firebase — App analytics
• Vercel — Website hosting

Each service operates under its own privacy policy. We do not sell your data to any third party.

5. Data Retention

We retain your account and reading data for as long as your account is active. If you cancel your subscription, your account and data remain accessible. If you request account deletion, we will permanently delete your data within 30 days.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your reading data

To exercise any of these rights, contact us at support@vellumread.com.

7. Children's Privacy

Vellum is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on our database, and secure authentication via Supabase. No system is 100% secure, but we take reasonable steps to protect your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

Questions or concerns? Contact us at support@vellumread.com.