NorthByte Studio
← Back to Overview

Privacy Policy for Veezy

Last updated: April 15, 2026

1. Introduction

This Privacy Policy explains how Veezy ("the App", "we", "us") collects, uses, and protects your personal data when you use our AI-powered vision board app. By using Veezy, you agree to the practices described in this policy.

2. Data Controller

Leonardo Granetto 📧 info@northbyte.studio Biebricher Straße 7f 55252 Mainz-Kastel Germany

3. Data We Collect

Locally on your device

  • An anonymous unique identifier (UUID) generated at first launch
  • Your visions, goals, and preferences
  • Usage data such as the number of image generations used

On our servers

  • Reference images you upload (including face and body photos) for AI image generation
  • AI-generated images associated with your anonymous identifier

Via third-party services

  • Anonymous usage analytics (PostHog)
  • Subscription status and transaction data (RevenueCat)
  • Attribution and install data (AppsFlyer)

We do not collect

  • Your name, email address, or any other directly identifiable information
  • Precise location data
  • Any data beyond what is necessary to provide the Service

4. How We Use Your Data

We use your data exclusively to:

  • Generate personalized AI images based on your reference photos and goals
  • Deliver motivational push notifications tailored to your visions
  • Display your vision board on your home screen widget
  • Manage your subscription status
  • Understand how users interact with the app to improve the Service
  • Measure the effectiveness of our marketing campaigns

5. Reference Images and Face Data

Your uploaded reference images may contain face and body data and are considered sensitive personal data. We handle this information with the highest level of care.

Reference images are:

  • Uploaded securely to Cloudflare R2, hosted in Eastern Europe / EU region
  • Accessible only via your anonymous identifier through secure internal systems
  • Used solely for AI image generation via Google Vertex AI
  • Never shared with third parties for advertising or any purpose beyond providing the requested AI image generation
  • Deleted upon verified user request through the in-app Support section

We do not:

  • Perform facial recognition
  • Perform biometric identification
  • Extract facial geometry
  • Create biometric templates, faceprints, or biometric identifiers
  • Use uploaded face data for profiling, analytics, advertising, or machine learning model training

Google Vertex AI processes uploaded reference images solely on our behalf and under data processing terms requiring equal or greater protection of user data.

To request deletion of your reference images and generated data, use the in-app Support section. We will verify your request internally using your anonymous identifier.

6. Data Storage and Location

| Data Type | Storage | Location | | ----------------- | ------------- | --------------------------------- | | Reference images | Cloudflare R2 | Eastern Europe (EU) | | Generated images | Cloudflare R2 | Eastern Europe (EU) | | Subscription data | RevenueCat | United States | | Analytics data | PostHog | EU (self-hosted option available) | | Attribution data | AppsFlyer | United States |

Transfers of data outside the EU are governed by Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.

7. Third-Party Services

Veezy uses the following third-party services:

| Service | Purpose | Privacy Policy | | ------------------------------- | ----------------------- | ---------------------------------- | | Google Vertex AI | AI image generation | policies.google.com/privacy | | Cloudflare R2 | Secure image storage | cloudflare.com/privacypolicy | | RevenueCat | Subscription management | revenuecat.com/privacy | | PostHog | Product analytics | posthog.com/privacy | | AppsFlyer | Marketing attribution | appsflyer.com/legal/privacy-policy | | Apple Push Notification Service | Push notifications | apple.com/legal/privacy |

Each service operates under its own privacy policy and data processing terms.

8. Analytics and Attribution

PostHog

PostHog collects anonymous usage data such as screen views and feature interactions. No personally identifiable information is linked to these events. PostHog is used solely to improve the app experience.

AppsFlyer

AppsFlyer collects attribution data to measure which marketing channels drive app installs. This may include your device's advertising identifier (IDFA) if you have granted tracking permission via Apple's App Tracking Transparency prompt. You can deny this permission and the app will function normally without it.

9. Data Retention

  • Reference images and generated images are retained until the user requests deletion through the in-app Support section
  • Analytics data is retained for up to 12 months
  • Subscription and transaction data is retained as required by applicable law

Since Veezy uses no accounts, deleting the app removes all local data. Server-side data can be deleted upon request through the in-app Support section.

10. Data Security

We take appropriate technical measures to protect your data:

  • All data transfers are encrypted via HTTPS/TLS
  • Images are stored in private Cloudflare R2 buckets, inaccessible without signed URLs
  • Your anonymous identifier is never linked to personally identifiable information
  • Access to our backend infrastructure is restricted and monitored

11. Children's Privacy

Veezy is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has used our Service, please contact us immediately.

12. Your Rights (GDPR)

If you are located in the European Union, you have the following rights:

  • Right of access – request a copy of the data we hold about you
  • Right to rectification – request correction of inaccurate data
  • Right to erasure – request deletion of your data ("right to be forgotten")
  • Right to restriction – request that we limit how we use your data
  • Right to data portability – receive your data in a structured, machine-readable format
  • Right to object – object to processing of your data
  • Right to withdraw consent – withdraw any consent you have given at any time
  • Right to lodge a complaint – with the supervisory authority in your country

To exercise any of these rights, please use the in-app Support section. We will respond within 30 days.

13. Legal Basis for Processing (GDPR)

We process your data on the following legal bases:

  • Contract performance – to provide the Service you have requested
  • Legitimate interests – to improve the app and prevent abuse
  • Consent – for marketing attribution (AppsFlyer/IDFA), which you can withdraw at any time

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app. Continued use of Veezy after changes become effective constitutes acceptance of the updated policy.

15. Contact

Leonardo Granetto 📧 info@northbyte.studio Biebricher Straße 7f 55252 Mainz-Kastel Germany