Vely Privacy Policy

Effective date: 30 October 2026

AAIS (PTY) LTD provides Vely and velyvault.com. This policy covers the app, purchases, support and website. Questions or privacy requests: afonsoaisolutions@gmail.com.

Your files

Everything you add — documents, photos, videos, notes, scans, and the names of your files and folders — is encrypted on this iPhone before it is saved.

There is no sign-up and no Vely server.

See How your data is protected for encryption, recovery, exports, protection limits and information that could still be seen.

Optional iCloud backup

You choose whether to enable backup.

Vely encrypts your files on this iPhone before backing them up to your private iCloud storage, using Apple's CloudKit. Apple receives only encrypted data: not your files' contents, their names, your notes or your keys.

Apple, or someone with access to your iCloud data, could see that you use Vely's backup, how many encrypted files it holds and their sizes, and when backups happen.

Apple's privacy policy applies to its services.

Purchases

Apple processes payments. RevenueCat uses a random app user ID, purchase and receipt information, subscription status, and technical connection information such as app/iOS versions and IP addresses to manage Pro, restore purchases, prevent fraud and provide subscription reporting. Purchase checks can occur before you buy Pro. These records are not necessarily anonymous. We do not receive your payment-card details.

Apple and RevenueCat see your purchase, never your files.

See RevenueCat's privacy policy.

Permissions

• Camera: "Vely uses the camera only to scan documents into your vault, when you ask it to."
• Photos: "Vely uses access to your photos only to delete the originals of photos and videos you've moved into your vault, when you ask it to."
• Face ID: "Vely uses Face ID to open your vault, if you turn it on."

Importing uses Apple's photo picker. Manage permissions in iPhone Settings. Supported devices use Touch ID instead of Face ID.

Support and diagnostics

If you email us, we receive your email address, any supplied name, message and attachments to answer your request and investigate problems. Our mailbox uses Gmail; see Google's privacy policy. Please never send your pattern, recovery phrase or private vault contents.

Apple may provide crash and usage diagnostics according to your Apple privacy settings. We use them to investigate faults. Review Settings > Privacy & Security > Analytics & Improvements. Vely has no third-party crash-reporting SDK. See Apple's diagnostic-sharing information, including its separate arrangements for TestFlight.

The website

We add no analytics scripts, advertising pixels, trackers, cookies or third-party embeds. Your chosen theme is saved in browser local storage; remove it through your browser's site-data settings. Fonts and images are served from the website.

Vercel hosts the site and may process IP addresses, requested URLs, browser details and request times for delivery, security and operational logs. See Vercel's privacy notice.

Providers and use of information

We use personal information to administer purchases, answer support requests and operate the website. Where a legal basis is required, these activities rely on contract performance, legitimate interests in support and service reliability, or legal obligations. Consent-based processing remains subject to your choices and withdrawal rights.

Providers processing information on our behalf must limit its use to the agreed services and provide protections equivalent to this policy and Apple's applicable privacy requirements. Providers may process information internationally, including in the United States, under applicable data-protection and transfer arrangements. Contact us about relevant safeguards. We may disclose information when legally required or to handle legal claims.

We do not sell personal information, share it for cross-context behavioural advertising, use advertising identifiers or run cross-app tracking or product-analytics tools.

Retention, deletion and your rights

We keep support and purchase-related records as long as needed to resolve requests, meet legal obligations and handle disputes. Provider-held records are also subject to their retention arrangements. Deleting Vely does not itself delete these records.

For a file you delete in Vely:

It stays in Recently Deleted for 30 days. After that, or when you delete it there, Vely removes the file and its key from this iPhone. It stays in your iCloud backup until Vely replaces the backups that contain it, which takes up to two more backups. Copies you exported or shared earlier aren't affected.

Deleting Vely doesn't delete your iCloud backup. To delete it, go to Settings > iCloud Backup.

Depending on applicable law, you can request access, correction, deletion or portability of personal information, object to or restrict processing, or withdraw consent. Email us to make a request; we may need to verify it and will explain any legal limits. You may complain to your local data-protection authority, including the UK ICO, your EU authority, or the South African Information Regulator.

Changes and contact

Changes will be posted here with an updated date and any notice required by law.

AAIS (PTY) LTD — afonsoaisolutions@gmail.com.