Privacy Policy

Last updated: 2026-09-19

Velox, provided by Opal Labs Oy, uses cloud processing to create, enhance, and edit photos, video, and audio. This policy explains what we collect, why, and your options. Available features and controls depend on your app version.

Data we collect

Account: your account identifier, email when you use an email account, and optional profile details.
Purchases: subscription status, store transaction records, credit balances, and refund information used to deliver purchases and prevent duplicate credit grants. We do not receive your full payment card details.
Jobs: metadata for your uploads and results (e.g., filenames, sizes, status, timestamps).
Content: selected images, video, audio, text prompts, settings, and generated results. Selected media can contain faces and voices.
Preferences and support: onboarding answers, processing-consent records, and information you provide when requesting help.
Diagnostics: crash/error logs (if enabled) to fix issues.
App activity: feature usage, processing status, and purchase activity used to operate and improve Velox. Advertising measurement in older app versions is described below.

How we use data

Authenticate, process and deliver your creations, and show your project history.
Validate subscriptions, deliver credits, and restore access across devices and app updates.
Maintain security, performance, support, and prevent abuse.
Understand feature usage, service reliability, and subscription activity to operate and improve Velox.

Sharing

We use Google Firebase for authentication and diagnostics, Convex for Studio application data, jobs and media storage, and RevenueCat for subscription and purchase verification. Earlier app versions also use Firebase database and storage services. Apple or Google handles your store payment.

For AI features, your selected content and instructions are sent to WaveSpeedAI and the model providers used by the chosen tool. The Studio app asks for permission before your first live creation. Declining does not start that creation. Only submit media, faces and voices you own or have permission to use. Provider processing and retention are described in the WaveSpeedAI Privacy Policy and the applicable model-provider terms.

Advertising tracking and older app versions

Velox 2.0.0 for iPhone and iPad does not include Meta/Facebook or TikTok advertising SDKs, access the advertising identifier (IDFA), or share app data for cross-company targeted advertising or advertising measurement. Account access, purchase verification, credit delivery, media processing, and crash diagnostics continue to use the service providers described above.

As of September 19, 2026, our RevenueCat-to-Meta advertising integration is disabled. Purchase records continue to be processed for subscriptions and credits; they are not forwarded through that advertising integration.

Earlier Flutter versions contain Meta/Facebook and TikTok measurement integrations that may collect identity, app-usage, and conversion events where enabled. Updating to Velox 2.0.0 replaces those embedded integrations. Disabling our purchase advertising integration does not remotely remove SDKs from an older installed app. Their applicable notices and your device's privacy choices continue to apply to older versions.

Where information is processed

Our production application data and media storage are hosted in the United States. Our service providers may also process information in other countries. Contact us for information about the providers and transfer safeguards applicable to your data.

Retention

We retain account, purchase, and job data while you use the app and as needed for legal, security, and accounting purposes. See “Delete your data”.

Saved Studio projects do not currently expire automatically. Unreferenced uploads can be cleaned up separately; this does not mean every project is deleted after a fixed number of days. Download results you want to keep.

WaveSpeedAI describes its generated media as temporary and generally expiring within seven days; prediction metadata, usage logs, and records needed for billing, security, support or legal obligations may remain longer. This provider storage period is separate from copies saved in your Velox projects. See its data retention policy.

Restricted recovery backups can retain earlier copies after deletion from active systems. We also retain limited transaction and deletion identifiers where needed to prevent duplicate purchases, resolve disputes, honor deletion requests after a recovery, and meet legal obligations.

Your rights

You can request access, correction, portability, objection, or deletion where applicable to your region’s laws (e.g., GDPR/CCPA). We will verify your request via your account email.

Delete your data

In the Studio app: open the account card in Settings and choose Delete account. Deletion is scheduled after the seven-day safety period shown in the app. You can cancel during that period; once permanent deletion starts, it cannot be cancelled.
Earlier app versions: use Settings → Danger zone → Delete account.
By email: write to support@opallabsdev.com from your account email with subject “Velox account deletion”.

The deletion process covers account access, profiles, projects and uploaded media, and requests cleanup from relevant service providers. Limited records described under Retention can remain. Provider retries or a shared purchase identity can require additional checks; contact support if your request has not completed. Copies you have downloaded or shared outside Velox remain under your control.

Subscriptions

Deleting your account does not cancel an active App Store or Google Play subscription. Cancel in your store settings.

Children

The service is not directed to children under 13 (or the minimum age required in your region).

Changes

We may update this policy. Material changes will be noted by updating the date above.

Contact

Email: support@opallabsdev.com