DRAFT. NOT LEGAL ADVICE. NOT APPROVED. Stan must approve this before it is published. A lawyer should review it before launch, mainly the California, children, and subscription sections. Text in [brackets] needs a value from Stan. This draft describes what the app does per engineering/rfcs/0002-first-slice.md and the backend schema as of 2026-10-03. If the product changes, this text changes first.

Veya Privacy Policy

Effective: [date of first public release] Last updated: [date]

Veya ("we", "us") is operated by [LEGAL ENTITY], a [STATE] [entity type], [postal address]. Contact: [email protected]. This policy covers the Veya app for iOS and Android, our website at veya.site, and our servers.

What Veya is

Veya shows you secondhand clothing listings that we collect from the public pages of other marketplaces (eBay, Poshmark, Depop, and ThredUp) and learns your taste from your swipes. When you decide to buy, we send you to the original listing. We do not sell clothes and we do not take your payment for them.

What we collect

Without an account (your first session). The app creates a random install ID on your device. It is not your advertising ID and it does not identify you by name. With it we store:

• your taste answers, if you give them: who you shop for, a price band, and up to three styles
• your swipes: which listings you liked or passed, and when
• a taste summary we compute from your swipes
• how many swipes you have made, and whether you opened outfits, to decide when the subscription screen appears

With an account (from your second session). You sign in with Apple or Google. We receive an account identifier from that provider and, if you allow it, your email address and name. With Sign in with Apple you can hide your email. We link your install ID, swipes, and taste to your account. We do not run our own password store.

Purchases. When you subscribe, the App Store or Google Play handles payment. We never see your card number. We receive a notification that says whether your subscription is active and when it ends, tied to your account.

Usage analytics. We record in-app events such as swipes, likes, outfits opened, listing opened, the subscription screen shown, and purchase started or completed. They carry the install or account ID, an app version, the platform, and a timestamp. They do not carry your name or email. We run this analytics tool ourselves on our own server [ASSUMPTION: self-hosted PostHog, see growth/ANALYTICS.md]; no third-party analytics company receives them.

Technical data. Our servers log request times, listing IDs, and error types. Logs do not hold credentials, session tokens, or your taste summary joined to your sign-in.

Outfit images. When you like a piece, we may generate or fetch outfit looks. To generate one, we send the listing photo and a style prompt built from your taste to an image-generation provider [name: model pin in backend, confirm provider]. We do not send your account ID, name, or email. Generated looks are labeled "Generated" in the app.

Veya is not affiliated with, endorsed by, or a partner of those marketplaces. We do not collect your location, contacts, photos, microphone, or health data. We do not use the advertising ID. We do not track you across other companies' apps and websites, and the app does not show the iOS tracking prompt.

How we use it

• to show you listings and rank them by your taste
• to build outfit looks from pieces you liked
• to run the free session and the subscription, and to verify store purchases
• to understand which parts of the app work, fix bugs, and keep the service safe
• to answer your support requests and meet legal duties

We do not sell your personal information and we do not share it for advertising.

Who receives it

• Apple and Google, for sign-in and for payments, under their own privacy policies.
• Our hosting provider [name], which runs our server. It processes data on our instructions.
• Our image-generation provider, as described above.
• The marketplace, when you tap through to a listing. Once you leave Veya, the marketplace's own policy applies. We do not send it your taste profile.
• Authorities or advisers if the law requires it, or to protect our rights.
• A buyer, if we are sold. We will tell you before your data is covered by a different policy.

Where it is stored

Our server is in the United States [confirm VPS location with Stan]. Data moves over HTTPS.

How long we keep it

We keep your data while your account or install exists. If you delete your account in the app, we delete your profile, swipes, taste summary, and account link within [30] days, except records we must keep for tax or fraud (for example purchase records). An install without an account that has been inactive for [12] months is deleted [ASSUMPTION: retention windows are placeholders; Stan and backend must set real ones and build the jobs].

Your choices and rights

• Delete your account: Settings > Delete account in the app. Or email [email protected].
• Access or correct your data: email [email protected].
• Cancel the subscription: in your Apple ID or Google Play subscriptions. Deleting the app does not cancel it.
• Turn off analytics: [Settings > Share usage data. ASSUMPTION: not built yet; ios and android must add it, or remove this line].

California and other US states. If you live in California, Colorado, Connecticut, Virginia, Utah, Texas or another state with a privacy law, you may ask to know, access, correct, delete, or port your data, and to opt out of sale, sharing for targeted advertising, and profiling that has legal effects. We do none of the three. We will not discriminate against you for asking. Email [email protected]. We answer within 45 days. [Lawyer: confirm Veya's thresholds under each state law and whether a "Do Not Sell" link is required.]

Children

Veya is for people 18 and older [ASSUMPTION: matches the recommended Play audience in growth/LAUNCH.md]. We do not knowingly collect data from anyone under 13. If you think a child gave us data, email us and we will delete it.

Security

HTTPS in transit. Access to production data is limited to named staff. Secrets are not stored in our code. No system is perfectly secure.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it applies.

Contact

[email protected], [postal address].