Privacy Policy

Veyrin is operated by David Ghazali ("we", "us"). This policy explains what the Veyrin app collects, why, how long it is kept, and the choices you have. Questions: ghazaliosupport@gmail.com.

1. Summary

• We do not track you across other companies' apps or websites, and Veyrin does not ask for App Tracking Transparency permission.
• We do not include third-party analytics SDKs.
• We do not sell personal information.
• Message text and screenshots you scan are analyzed on your iPhone.
• Public community labels never reveal who reported a number.
• You can download your data and delete your account inside the app.

2. Sign in with Apple and your account

Accounts use Sign in with Apple. We receive a stable Apple user identifier, and a name or email address only if you choose to share them with Apple's sign-in sheet. If you choose Hide My Email, we receive an Apple relay address. We use this information to create your account, keep you signed in, and contact you about the service. We do not use it for advertising.

3. App Attest and device trust

To protect security-sensitive actions, Veyrin uses Apple App Attest and a signing key created in your iPhone's Secure Enclave. We store the App Attest key identifier, the public keys, and trust status needed to verify that requests come from a genuine copy of Veyrin on your registered device. Private keys never leave your device. Keys created for test builds are not accepted in the App Store version.

4. Trusted Verification and Trusted Circle

When you add people to your Trusted Circle or Family, or send a verification request, we store relationship records, request details you enter, the decision (approved, denied, or expired), timestamps, and the device trust state used to make the decision. This lets both people see the result and helps prevent replayed or forged approvals.

5. Phone number processing

When you check a number, Veyrin normalizes it and works out format, likely line type, and region on your device. To show community signals, the app asks our server about that number. The server uses a keyed fingerprint of the number to look up reports, and we do not log raw phone numbers for analytics. Veyrin shows a caller name only when a legitimate source provides one. We never invent names for private numbers.

6. Scam Scanner

Messages and screenshots you scan are analyzed on your iPhone. Veyrin does not upload the text or images for scanning, and they are never shared with advertisers.

7. Community reports and moderation

If you report a number, we store the report category, time, and a hashed form of your account identifier so we can limit duplicates and stop abuse. Public labels combine reports from several independent accounts and never show who reported. We may review, correct, or remove labels, and we may suspend accounts that misuse reporting. Anyone can dispute a label with "Report incorrect information", and disputes never require Premium.

8. Caller Protection

If you turn on Caller Protection, Veyrin stores an identification and blocking list on your iPhone for iOS Call Blocking & Identification. iOS checks incoming calls against that list on the device. Veyrin does not receive your call history.

9. Notifications (APNs)

If you allow notifications, we store an Apple Push Notification service device token to deliver verification requests and results. Notification text is kept short and does not include money amounts. You can turn notifications off in iOS Settings at any time.

10. Subscriptions (StoreKit)

Veyrin Premium subscriptions are sold and billed by Apple. We receive transaction and subscription status information from Apple, including App Store Server Notifications, to unlock features on your account. We never receive your payment card details.

11. Advertising (Google Mobile Ads and UMP)

On the Free plan, Veyrin may show a small ad after a scan or phone check result. Ads are provided by Google Mobile Ads. Where the law requires it, Google's User Messaging Platform (UMP) asks for your consent first. We request non-personalized ads, and we do not use the advertising identifier for tracking. Google may process your device's IP address, device information, and ad interaction data under Google's policies and your consent choices. We never send phone numbers, message text, screenshots, reports, or verification details to advertising partners. Premium plans do not show ads.

12. Retention

• Account, device trust, and relationship records are kept while your account is active.
• Verification history is kept for the history period of your plan.
• Community reports expire after 180 days.
• Data export files expire 15 minutes after they are ready.
• Push tokens are kept while the device stays registered for notifications.
• Limited security and abuse-prevention records may be kept after deletion when required to prevent fraud, resolve disputes, or meet legal obligations.

13. Download My Data and account deletion

In the app, open Security and choose Safety & Support, then Download My Data, to get a copy of your account data. To delete your account, open Security and choose Delete Account. Deletion removes or de-identifies account-linked records, except the limited records described above. Deleting your account does not cancel an Apple subscription, so manage or cancel it with Apple first.

14. Privacy choices and your rights

You can change ad consent, notifications, and Caller Protection at any time. See Privacy Choices. Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Email ghazaliosupport@gmail.com to make a request. You may also complain to your local data protection authority.

15. Sharing and service providers

We share data only as needed to run Veyrin: with Apple for sign-in, App Attest, notifications, and purchases, with Google for ads on the Free plan, and with hosting providers that store data on our behalf. We may disclose information when the law requires it or to protect users from fraud and abuse.

16. Children

Veyrin is not directed to children under 13, or the minimum age in your country. If you believe a child has created an account, contact us and we will delete it.

17. Changes and contact

If we make material changes, we will update this page and the effective date. Contact: ghazaliosupport@gmail.com.