Privacy Policy.

1. Information We Collect

When you use the Veelo mobile app or web platform, we may collect the following types of information:

• Account Information: Your name and email address when you sign in via our passwordless magic link system or join a mission.
• Mission Submissions & Content: Photos, videos, text answers, quiz responses, and check-in records you submit while completing mission actions.
• Location Data: When enabled, we access your device's precise location (GPS) to verify proximity to geofenced action triggers and validate check-in points during active missions. Location is only accessed for active gameplay check-ins, not for ongoing background tracking.
• Device & Motion Sensors: With your permission, the app uses your camera and microphone to capture mission photos and videos, and your device's step/motion sensors to verify step-count challenges.
• Push Notification Token: If you allow notifications in the Veelo app, Apple or Google issues your device a notification token, which we store with your account so we can send you host announcements, the outcome of your submissions, and mission start and end alerts. You can switch notifications off at any time in your device settings.
• Technical & Diagnostic Data: Basic device identifiers, operating system version, and error logs necessary to ensure app stability and performance.
• Billing Information (organisers): When an organiser buys a Mission Pass, an Organiser subscription or a participant pack, Paddle, our merchant of record, collects the name, email address, billing address, country and, for businesses, the VAT number entered at checkout, together with the payment method. Paddle sends us a confirmation of each purchase: the Paddle customer reference, what was bought, its status, the amount paid, and the billing name, email address and address used at checkout. We never receive or store card or bank details.

2. How We Use Your Information

We use the collected information solely for app functionality and operations:

• Authenticating your account and maintaining your session securely.
• Delivering mission actions, scoring submissions, and updating live team leaderboards in real time.
• Generating mission memory recaps for participants and hosts.
• Sending push notifications about your missions: host announcements, the outcome of your submissions, and mission start and end.
• Providing offline queueing and automatically syncing your submissions once your connection is restored.
• Offering customer support and troubleshooting platform issues.
• Recording which plan, Mission Passes and participant packs an organisation holds, applying its limits, and showing usage and billing status in the organiser dashboard.

3. Third-Party Service Providers

We rely on trusted third-party infrastructure providers to run our platform:

• Authentication & Email: Resend is used to securely dispatch one-time magic login links to your email address.
• Media Storage: Hetzner Object Storage (Hetzner Online GmbH, data centres in Germany) is used to securely store and host uploaded mission photos and videos.
• Mapping Services: Apple Maps and Google Maps APIs are used to render map views and calculate distances to action locations.
• Push Notifications: Apple Push Notification service and Firebase Cloud Messaging (Google) deliver notifications to your device. They receive your device's notification token and the text of each notification.
• Payments & Billing: Paddle (Paddle.com Market Limited, United Kingdom, or Paddle.com Inc., United States, depending on your location) is the merchant of record for every purchase on Veelo. Paddle processes your payment, calculates and collects tax, issues receipts and invoices, and handles refunds. Paddle processes the payment and billing details you enter at checkout under its own privacy policy.

These service providers process data strictly on our behalf under confidentiality agreements and are prohibited from using your personal data for their own marketing or advertising purposes. Paddle is the exception: as merchant of record it sells the plan to you in its own name and handles your payment and billing details under its own privacy policy.

4. Data Sharing & Advertising

We do not sell, rent, or trade your personal information. We do not participate in cross-app tracking or share personal identifiers with third-party advertising networks or data brokers.

5. Data Retention & Deletion

We retain mission and submission data for as long as needed to provide you and your event organizer with access to mission results and memories.

Purchase records belong to the organisation that bought them. The plan, Mission Pass and participant pack history, with its Paddle references, is kept for as long as the organisation exists and afterwards for as long as tax and accounting law requires. Paddle keeps its own transaction records under its privacy policy.

Push notification tokens are deleted when you sign out, when you delete your account, when Apple or Google report that the device is no longer registered, or after 90 days without the app connecting to our servers.

You can delete your account at any time from the Profile tab in the Veelo app or web player. Deletion removes your name, email address, profile picture and every photo, video and text answer you submitted. Points you earned remain on mission leaderboards attributed to an anonymous participant so organizers keep accurate results.

If you no longer have access to the app, you can request deletion by email. See Delete your account for the full process. Email requests are processed within 30 days.

6. Security

We implement industry-standard administrative and technical safeguards to protect your personal data, including encrypted TLS/HTTPS connections for all network traffic, secure database isolation, and cryptographically verified session tokens.

7. Children's Privacy

Veelo is not intended for unsupervised children under the age of 13 without parental or educational organizer authorization. We do not knowingly collect personal identifiable information directly from children under 13 without appropriate consent.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: