Privacy Policy

Last update: September 26, 2025

Our Commitment

Protecting your privacy is important to us. Vellaric collects the minimum data necessary to operate a secure portfolio simulation and notification experience.

Information We Collect

• Account details: first name, last name, email, password (hashed with bcrypt). • Device data: iOS device token for push notifications. • Portfolio data: simulated holdings, orders, executions, snapshots, and preferences (currency, time zone, notification settings). • Usage data: basic app interactions for reliability and fraud prevention. • Market data: we fetch public market data from third parties (e.g., Polygon.io, Coindesk) but do not collect your brokerage credentials.

How We Use Information

• Authentication and account management (JWT-based sign-in). • Simulated trading, order processing, and performance analytics. • Scheduled portfolio snapshots (hourly/weekly) for charts and insights. • Notifications (e.g., price alerts, market open/close) when enabled. • Emails (e.g., activation, password reset) sent via our email service provider. • Security, abuse detection, and to comply with applicable law.

Email & Notifications

We use Brevo (Transactional Emails) to send account emails (activation and password reset). Push notifications use Apple Push Notification service (APNs). You can toggle notifications at any time in Settings.

Data Sharing

We do not sell your personal information. We share limited data with service providers solely to operate the app (e.g., hosting, email delivery, market data). These providers are bound by confidentiality and data protection obligations.

Security

We use TLS/HTTPS in transit, hashed passwords (bcrypt), and access controls. While no system is perfectly secure, we continually improve our safeguards.

Data Retention & Deletion

We retain your account and portfolio simulation data for as long as your account remains active. You may request deletion at any time via the Delete Account option. Certain minimal records may be retained as required by law or for legitimate business purposes (e.g., security logs).

Children’s Privacy

Vellaric is not intended for children under 16. If we learn we have collected personal data from a child under 16, we will delete it.

International Transfers

Your information may be processed in countries other than your own. We take steps to ensure appropriate protections are in place consistent with applicable law.

Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version in the app and update the Last update date above.

Contact Us

Questions or requests? Contact us at [email protected].