Legal

Privacy Policy

Effective date: March 28, 2025  ·  Last updated: March 28, 2026

Overview

Veyn ("we", "our", or "us") is a journaling and self-reflection app. We are committed to protecting your personal information and being transparent about how we collect, use, and share it. This policy explains what data we collect when you use the Veyn mobile app and website (veynapp.com), and your rights regarding that data.

By using Veyn, you agree to the practices described in this policy. If you do not agree, please discontinue use and contact us to request deletion of your data.

Information We Collect

Account information. When you sign up, we collect your email address and a hashed password (or OAuth token if you sign in with Apple or Google). We do not store plaintext passwords.

Journal content. All journal entries you write, including text, mood selections, and any other input you provide within the app, are stored so the service can function. Your entries are associated with your user account.

Usage data. We collect metadata about how you use the app — such as feature interactions, session timestamps, and streak data — to improve the product. This data is not sold.

Device information. We may collect your device type, operating system version, and app version for debugging and crash reporting purposes.

Payment information. If you subscribe to Veyn Premium, payment is processed by our payment provider. We do not store your credit card number or full payment details on our servers.

How We Use Your Information

  • To provide, personalise, and improve the Veyn app and its features
  • To generate AI-powered reflections and insights based on your journal entries
  • To manage your account, subscription, and billing
  • To send transactional emails (e.g. account verification, password reset)
  • To analyse aggregate usage trends and fix bugs
  • To comply with legal obligations

We do not use your journal content for advertising or sell it to third parties.

Third-Party Services

Veyn uses the following third-party services to operate. Each service has its own privacy policy.

Supabase
Authentication and database hosting. Your account credentials and journal entries are stored in a Supabase-managed PostgreSQL database with row-level security. Data is encrypted at rest and in transit.
Anthropic (Claude AI)
AI-powered reflections and insights. Relevant portions of your journal entries are sent to Anthropic's API to generate personalised responses. Anthropic's usage policies prohibit training on API inputs by default.
RevenueCat
Subscription and in-app purchase management. RevenueCat processes purchase receipts from the App Store and links subscription status to your user ID. Your full payment details are never shared with Veyn.
Apple / Google
If you sign in with Apple or Google, we receive only your email address and a unique identifier from that provider. We do not receive your password.

We do not share your personal data with any other third parties except as required by law or to protect the rights and safety of our users.

AI Services

Veyn uses Anthropic's Claude API to power Liv, our AI companion. When you write journal entries or send messages to Liv, that content is transmitted to Anthropic solely to generate responses. Anthropic does not retain this data beyond generating a response, does not use it to train AI models, and does not share it with third parties. For more information, see Anthropic's privacy policy.

What is sent: The journal entry text you submit for analysis, along with any relevant context needed to generate a coherent response.

What is not sent: Your name, email address, or any other personally identifiable information beyond what is contained in the journal text itself.

Data Retention

We retain your account and journal data for as long as your account is active. If you delete your account, we will delete your personal data and journal entries within 30 days, except where retention is required by law.

Anonymised and aggregated usage statistics that cannot be linked back to you may be retained indefinitely for product improvement purposes.

Security

We take the security of your data seriously. Measures include:

  • All data transmitted between the app and our servers is encrypted via TLS
  • Database access is protected by row-level security policies (Supabase RLS)
  • Passwords are hashed and never stored in plaintext
  • Access to production systems is restricted to authorised personnel only

No system is 100% secure. If you believe your account has been compromised, please contact us immediately at hello@veynapp.com.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate or incomplete data
  • Deletion — request that we delete your account and associated data
  • Portability — request an export of your journal entries in a machine-readable format
  • Objection — object to certain types of processing, including direct marketing
  • Withdrawal of consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at hello@veynapp.com. We will respond within 30 days.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

Veyn is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of Veyn after changes take effect constitutes acceptance of the updated policy.