Privacy
Policy

Who We Are & What This Covers

Velogos ("we", "us", "our") is a mobile application designed for baseball players that connects to Bluetooth Low Energy (BLE) sensors to measure swing acceleration (m/s²), tracks session data, and manages athlete profiles through a subscription-based system.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights regarding your data when you use the Velogos app (iOS and Android).

Information We Collect

We do not collect GPS/location, contacts, or microphone data. Camera access is optional and used solely to set a profile avatar.

Bluetooth Low Energy (BLE) Access

Velogos requires Bluetooth permission to discover and connect to your swing sensor. We access BLE solely to read acceleration data during active sessions.

• BLE scanning is only active while the app is open and you initiate a pairing or session.
• We do not track your location via Bluetooth or scan for unrelated devices.
• Sensor identifiers are stored locally and on our server only to enable automatic reconnection.

Camera & Photo Library Access

Velogos may request access to your device's camera and photo library solely for the purpose of setting an avatar image on an athlete profile.

We only request camera and photo library access when you tap to change avatar

• Photos are used only to display as a profile avatar within the app.
• We do not scan, analyse, or process photo content beyond resizing for display.
• Profile photos are uploaded to our secure server so they appear consistently across devices.
• You can remove a profile photo at any time; the image will be deleted from our servers within 30 days.
• Camera and photo library access are requested only when you actively choose to set or update a profile photo — never in the background.

How We Use Your Information

• Run the app: Authenticate you, sync sessions across devices, display performance charts.
• Profile management: Create and manage multiple athlete profiles according to your subscription tier.
• Subscriptions: Verify purchase receipts, enforce tier limits (number of profiles), and process renewals via App Store / Google Play.
• Improve the app: Analyse anonymised crash logs and usage patterns to fix bugs and prioritise features.
• Communications: Send transactional emails (e.g. password reset, subscription confirmation). No marketing without explicit opt-in.

OAuth Authentication

When you choose Sign in with Google or Sign in with Apple, we receive only the information those services provide:

• Google: Name, email address, and profile picture URL.
• Apple: A unique identifier and, optionally, your name and email (Apple may relay or hide your email).

We never receive or store your Google or Apple passwords. OAuth tokens are used only to verify your identity and are handled securely on our server.

Where & How Your Data Is Stored

All data is stored on our secure cloud servers. We implement industry-standard safeguards:

• Data in transit protected by TLS 1.2+.
• Data at rest encrypted using AES-256.
• Access to production databases limited to authorised personnel only.
• Regular security reviews and dependency audits.

Swing performance data is treated as user-generated fitness data and is protected with the same security standards as other personal information.

Session data is also cached locally on your device for offline chart viewing. You may clear local cache at any time via the app settings.

Who We Share Data With

We do not sell personal information or share it with third parties for targeted advertising or cross-context behavioral advertising. We share data only in the following circumstances:

• Service providers: Hosting, analytics, crash reporting — under strict data processing agreements.
• App Stores: Apple App Store and Google Play process subscription payments; their privacy policies apply to that transaction.
• Legal requirements: If required by law, court order, or to protect the safety of our users.

How Long We Keep Your Data

• Account & profile data: Retained while your account is active, and for 30 days after account deletion.
• Session data: Retained while your account is active. You may delete individual sessions or all data at any time.
• Crash & diagnostic logs: Automatically deleted after 90 days.
• Subscription receipts: Retained for up to 7 years as required for financial records.

Your Privacy Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate profile information directly in the app.
• Deletion: Delete your account and all associated data from Settings → Account → Delete Account.
• Portability: Export your session data in CSV format from the app.
• Opt-out: Disable diagnostic reporting at any time in Settings → Privacy.

For requests you cannot complete in-app, contact us at the address below and we will respond within 30 days.

Users Under 13

Velogos is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

For users aged 13–17, we encourage a parent or guardian to review this policy with them.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via an in-app notification or email at least 14 days before the change takes effect. Continued use of the app after that date constitutes your acceptance of the updated policy.

The "Effective Date" at the top of this page always reflects the current version.

Contact Us

If you have questions, requests, or concerns about this Privacy Policy or your data: