Velmour

Velmour Privacy Policy

Effective date: October 23, 2026

Velmour is operated by ChartPT, Inc. ("ChartPT", "we", "us"). This policy explains what personal information we collect when you use Velmour (the "Service"), how we use and share it, and the choices you have.

1. Information We Collect

Information you give us

• Account information from the sign-in provider you choose (Google or Apple): a unique account ID, your email address, and, if provided, your name.
• Profile information such as your nickname, profile image, and the preferences you set (for example, which characters you want to see).
• Content you create or send: your chat messages, characters you create (names, descriptions, images), images you upload, and reports or support requests.

Information created when you use the Service

• AI-generated content: replies and images generated for your conversations.
• Purchase information: when you buy Gems on the web, our payment processor Stripe collects your payment details. We receive the transaction ID, amount, currency, the email you entered at checkout, and the payment status — we never receive or store your full card number. When you buy Gems in the iOS or Android app, Apple or Google processes the payment and we receive only a purchase receipt (transaction identifier, product, and status) to credit your Gems.
• Usage and device information: pages and features you use, timestamps, IP address, browser and device type, and approximate location derived from your IP address.
• Cookies and local storage: we use browser storage to keep you signed in and remember your settings, and analytics cookies (Google Analytics for Firebase) to understand how the Service is used.

2. How We Use Information

• To provide the Service: run your account, generate AI replies and images, save your conversations and characters, and deliver the Gems you buy.
• Safety: to enforce our content rules, detect abuse, and respond to signs that someone may be at risk of harm, including by showing crisis resources.
• To process payments, prevent fraud, and handle refunds and disputes.
• To understand and improve the Service, fix problems, and develop new features.
• To communicate with you about your account, purchases, and changes to our terms.
• To comply with the law and protect the rights and safety of our users and others.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. AI Processing

To generate a reply, we send the relevant part of your conversation and the character's settings to AI model providers through OpenRouter, and image requests to image-generation providers. These providers process the data to return a result on our behalf, under their own API terms. Do not put sensitive personal information (such as health, financial, or government ID details) into chats.

4. How We Share Information

We share personal information only as needed to run the Service:

• Service providers that process data for us: Google Cloud (hosting and storage, in the United States), Firebase (sign-in, push notifications, and analytics), Stripe (web payments), Apple and Google (in-app purchases in the apps), OpenRouter and AI model providers (generating replies), and image-generation providers.
• Other users: characters you make public, and content you choose to share, are visible to others.
• Legal and safety: when required by law or legal process, or to protect the safety of any person, or to prevent fraud or abuse.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. How Long We Keep Information

• Account and profile information: until you delete your account. After deletion, we remove your account data within 30 days, except for information we must keep by law.
• Conversations: until you delete the chat or your account. Deleted chats are permanently removed within 30 days.
• Purchase records: as long as required for tax, accounting, and legal purposes (generally up to 7 years).
• Backups: database backups are kept for up to 30 days before they are overwritten.

6. Your Rights and Choices

Depending on where you live (for example, California and other U.S. states with privacy laws), you may have the right to:

• know and access the personal information we hold about you;
• delete your personal information;
• correct inaccurate information;
• opt out of the sale or sharing of personal information (we do not sell or share it);
• not be discriminated against for exercising these rights.

You can delete your account at any time in the app's settings. For other requests, email us at the address below. We will verify your request using your account information and respond within the time required by law. You may use an authorized agent where the law allows.

7. Children

The Service is only for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete the account and the information. If you believe a minor is using the Service, contact us.

8. Security

We protect your information with measures such as encryption in transit, access controls, private networks for our databases, and limited staff access. No system is completely secure, so we cannot guarantee absolute security.

9. Where Information Is Processed

We store and process information in the United States. Our team may access it from other countries, including South Korea, to operate and support the Service, with appropriate safeguards.

10. Changes to This Policy

We may update this policy. If a change is material, we will notify you in the Service or by email before it takes effect.

11. Contact

ChartPT, Inc. — Velmour

Email: hipyinchang@gmail.com